Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft
File: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft (raw, json)
Hash identifier: fquo1Vd+DQtk9Zh4xAetqlt1Bu5DXRKm/uM+Ojx45VI=
Subject key identifier: 86:E2:28:70:1F:44:86:25:5B:84:27:FF:07:07:98:98:68:6F:DE:EC
Authority key identifier: 67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F
Certificate issuer: /CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F
Certificate serial: 404D2F21D3C3FB67CE092E6E9A4A62B533AD425D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft
Manifest number: 0104
Signing time: Wed 12 Aug 2026 15:51:45 +0000
Manifest this update: Wed 12 Aug 2026 15:46:45 +0000
Manifest next update: Thu 13 Aug 2026 19:02:45 +0000
Files and hashes: 1: 326131343a373538363a363330303a3a2f34342d3438203d3e20313533333736.roa (hash: EmjH1JU+BsV2c2yZp0xHpfbOG+X2vne6qXcNiETAM44=)
2: 67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl (hash: 39FiahX0OkTMYaz/6ijVX73QJbIncemo9Q9UVO+PorY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:4d:2f:21:d3:c3:fb:67:ce:09:2e:6e:9a:4a:62:b5:33:ad:42:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F
Validity
Not Before: Aug 12 15:46:45 2026 GMT
Not After : Aug 13 19:02:45 2026 GMT
Subject: CN=86E228701F4486255B8427FF07079898686FDEEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:90:47:c6:9b:27:d1:7b:74:a0:f6:53:39:
7b:e6:6f:60:48:ab:79:e6:ff:07:37:74:21:71:fc:
90:bc:8b:86:de:fe:29:72:03:dc:60:3c:17:f3:71:
99:74:23:30:cf:37:40:e3:aa:5c:8b:f6:0f:12:e2:
e3:a8:29:b9:30:87:e6:23:ea:51:4c:17:7d:98:9e:
ff:69:27:c4:7f:30:b6:fc:ec:23:f5:48:d7:4b:9f:
95:a4:49:e1:b9:2c:17:fe:63:0f:58:11:bd:63:88:
30:8e:5b:7c:45:8c:ab:ab:dd:06:18:fd:cf:14:b7:
6c:aa:63:31:8b:b3:ea:b8:98:c0:5a:d8:51:1d:55:
3f:de:ed:f9:68:d8:ee:df:24:c3:35:ac:14:61:86:
d7:45:30:1c:f8:da:31:cf:40:4f:68:41:41:98:c5:
54:55:e4:fb:74:8e:24:30:2a:c7:36:58:1c:3c:65:
00:15:49:d2:13:07:e4:f9:d6:0d:57:bb:08:7d:3f:
8f:e0:a9:bc:fa:9d:2b:25:d3:d8:fe:bc:8d:0d:a3:
9e:2e:87:82:90:91:3b:1c:a9:65:cf:3d:e8:55:d5:
b1:09:66:3a:8f:3f:a9:73:8d:13:e2:a5:16:8e:e2:
8c:37:48:40:49:22:1b:2b:17:13:56:69:87:03:fd:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E2:28:70:1F:44:86:25:5B:84:27:FF:07:07:98:98:68:6F:DE:EC
X509v3 Authority Key Identifier:
keyid:67:E2:DB:CE:9C:00:B1:89:84:CA:C2:ED:BA:B4:2C:58:F4:39:9B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb806978-5571-4dc9-a872-92397c4c8880/0/67E2DBCE9C00B18984CAC2EDBAB42C58F4399B0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:98:26:ee:d1:e5:94:3e:6a:05:99:48:10:ee:0c:b5:17:ff:
66:8f:56:ef:3d:8b:0a:4b:39:48:eb:e2:ac:45:c0:0e:81:aa:
d3:e9:b7:37:f4:d1:ed:69:ae:e3:04:7e:2d:fd:42:4f:11:d5:
c3:cb:4a:76:e6:4f:7c:f5:82:30:ab:c6:b8:22:6b:03:05:d1:
a4:c1:3f:67:6b:92:f5:28:39:43:a7:be:21:9b:2e:ff:6e:da:
4f:f3:d2:82:46:6f:ee:ac:41:09:6f:35:de:42:5a:59:1a:f2:
c9:e8:9a:e6:db:4e:27:27:55:e6:ef:fa:35:86:04:4e:c6:f2:
73:88:2d:6b:b9:f2:16:22:39:ec:68:c6:b1:db:bf:00:d1:48:
b5:3a:11:0b:a6:51:be:01:f8:9e:ad:54:da:ab:8a:56:c5:2b:
63:fb:25:cd:18:02:0b:89:a6:e3:ac:c4:13:5e:a0:0f:00:60:
81:bf:65:3b:02:1f:0d:28:36:f4:e7:ed:5f:9d:57:50:4c:56:
19:52:43:7b:11:a3:10:27:59:ca:cc:d9:69:c9:46:a3:ab:2b:
60:0c:a6:8d:be:b1:2e:7d:89:09:2c:39:f3:8f:e0:12:a5:72:
82:6a:69:30:ec:0d:52:97:ae:b5:64:23:da:0a:9c:9c:f1:e8:
cd:0f:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:48:12 2026 by rpki-client