Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
File: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft (raw, json)
Hash identifier: jNMBFUiG4gP/2cNHpI2k3eiD+LHBo4S1BQT7kC0j1GI=
Subject key identifier: 6E:35:7A:C3:76:4E:22:5A:0A:F1:2B:AF:73:B1:55:6B:99:54:DE:F3
Authority key identifier: 8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
Certificate issuer: /CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Certificate serial: 744035C7A1B8224D49E5BEDFC93663ADB4C68494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
Manifest number: 035F
Signing time: Mon 02 Mar 2026 04:41:45 +0000
Manifest this update: Mon 02 Mar 2026 04:36:45 +0000
Manifest next update: Tue 03 Mar 2026 08:11:45 +0000
Files and hashes: 1: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl (hash: Y2UwO2bD9cdnHGeSjLGhubW1ppyViE+e6DMiIImsl0A=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:40:35:c7:a1:b8:22:4d:49:e5:be:df:c9:36:63:ad:b4:c6:84:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Validity
Not Before: Mar 2 04:36:45 2026 GMT
Not After : Mar 3 08:11:45 2026 GMT
Subject: CN=6E357AC3764E225A0AF12BAF73B1556B9954DEF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:3f:0a:6e:2a:fc:b3:0e:ae:c1:68:38:2a:
ee:2b:b9:72:47:72:85:4e:37:a7:ca:10:29:a0:02:
9b:fe:61:10:fa:7f:bd:b1:85:86:59:a6:6f:0b:cf:
81:de:60:ee:2e:4c:f4:54:ff:d6:7e:67:66:8b:a1:
2e:bf:47:eb:58:09:4a:27:48:62:0c:9a:c9:3a:ce:
cb:e0:62:ae:11:6d:0f:2f:55:b3:b2:37:a2:c1:02:
04:3e:49:38:98:ee:48:00:be:e4:3e:75:0b:97:ef:
fa:d5:a4:20:a7:07:88:e2:40:c5:64:3b:b8:be:5f:
9f:83:88:ad:ea:58:94:be:43:ad:8b:79:ba:1f:8e:
dd:fe:b9:71:fb:45:2b:22:4e:73:1b:1d:d5:9b:4e:
0b:24:53:fc:ca:c7:cc:f7:4f:0c:39:2d:e3:14:fc:
5d:50:28:57:c5:13:40:13:b9:0a:7b:f7:a7:ca:03:
e2:50:44:b8:88:3e:9a:94:10:18:10:67:1a:78:f3:
a1:02:04:62:ff:2b:11:c3:2d:c5:6c:83:35:92:ed:
a2:94:b2:8c:d0:97:61:04:18:2c:82:88:48:30:21:
4f:ca:07:cb:f1:75:c8:e5:fb:64:02:60:79:e2:de:
2b:08:fd:b0:d8:7c:7c:57:63:4a:32:6c:eb:df:eb:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:35:7A:C3:76:4E:22:5A:0A:F1:2B:AF:73:B1:55:6B:99:54:DE:F3
X509v3 Authority Key Identifier:
keyid:8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ec:d1:d4:cf:6c:82:47:aa:5c:9d:21:c3:1e:95:11:29:cf:
f9:74:ae:18:c4:2d:f0:38:e7:18:f8:ea:99:87:eb:49:ac:13:
5a:24:53:24:5a:78:8a:ed:b8:1c:a2:5a:4d:c8:77:d9:88:55:
b3:cc:40:a9:93:fb:8e:12:8f:28:bb:ee:ea:5b:7d:ea:fd:75:
eb:d9:18:3b:82:45:d4:b4:94:d5:8e:b4:c5:e7:73:64:53:46:
35:b8:2b:07:39:2b:c9:c8:54:1b:ce:ee:5a:29:34:ad:89:11:
82:fd:4b:b6:ff:3e:24:00:bf:06:40:a5:fd:71:01:e0:58:49:
bf:4d:f4:6e:d8:11:8f:45:55:89:ec:73:05:df:2f:cd:4a:27:
62:47:fe:f6:bc:c8:9b:21:f3:47:72:59:ff:84:ac:57:cb:7f:
30:de:03:d2:f4:fc:96:72:19:c9:c3:7d:79:0e:d3:91:2f:2b:
bd:02:58:ea:16:2f:90:d4:c7:7d:86:aa:a3:a3:ad:00:62:7c:
41:9b:bf:d8:17:81:c7:7a:39:6f:97:f8:34:7f:d4:53:e2:3e:
ac:6e:06:27:a3:4d:a9:44:19:d7:82:17:d5:66:74:c3:d9:31:
30:05:3c:51:2a:7f:a6:fa:42:a3:29:0d:ec:15:e7:8c:51:74:
90:54:e8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:40 2026 by rpki-client