Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
File: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft (raw, json)
Hash identifier: wM7+r3hmiHkkcKjgfqHG3AWFIzpeURcm7liky8L81KU=
Subject key identifier: E6:8E:20:4B:97:E2:B9:D0:66:66:7A:17:1D:6C:23:7C:CB:21:99:14
Authority key identifier: 8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
Certificate issuer: /CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Certificate serial: 7EE05E44BB8FB92CD3EDEC9F16C643DA8A0A8C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
Manifest number: 039F
Signing time: Sun 19 Apr 2026 12:17:01 +0000
Manifest this update: Sun 19 Apr 2026 12:12:01 +0000
Manifest next update: Mon 20 Apr 2026 13:42:01 +0000
Files and hashes: 1: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl (hash: MDxVxIdlzvFyDXOQtyLzIgvbQdUkvXvNb0TUaX3P3jM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e0:5e:44:bb:8f:b9:2c:d3:ed:ec:9f:16:c6:43:da:8a:0a:8c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Validity
Not Before: Apr 19 12:12:01 2026 GMT
Not After : Apr 20 13:42:01 2026 GMT
Subject: CN=E68E204B97E2B9D066667A171D6C237CCB219914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:7b:cc:cb:73:e3:ba:c7:99:64:24:e3:1f:
73:9f:95:d6:02:2e:21:39:d3:59:07:c6:67:4b:b6:
4b:e0:99:e8:5e:36:89:46:a3:6e:3e:5a:91:0f:d9:
bc:4f:05:64:58:93:92:8a:d2:8f:63:a5:3e:1d:41:
40:97:d9:05:a4:5b:5b:98:ac:d7:5b:c0:c7:b1:18:
4c:00:c0:b1:29:ff:4d:49:3d:54:f0:5c:b9:f1:c2:
c5:94:c2:76:e2:f3:46:a6:04:e4:2a:8a:30:e8:75:
59:02:e3:c1:32:ef:0f:0a:f0:86:54:54:47:3a:fc:
26:b7:52:5e:d4:f4:9f:45:43:74:8f:44:01:8e:0f:
e2:6b:5d:6b:45:75:87:41:43:5b:13:bc:d5:28:b2:
b2:9e:13:7f:2f:26:72:0b:28:1b:78:a3:07:83:07:
70:b1:6a:49:45:5a:ad:5f:08:73:13:8c:c4:79:9c:
0c:bd:76:72:f6:c2:85:fe:bf:0b:6b:5e:b5:b8:68:
29:db:a8:65:35:6a:80:ef:54:af:9d:d7:cd:03:bf:
47:34:54:b1:c4:a4:de:ed:a1:af:db:85:e9:ae:59:
27:e0:f3:df:a4:47:be:ae:3a:fa:e2:4d:8d:6f:18:
bb:4d:c3:bd:6b:b6:96:2d:9b:8e:9f:48:b9:b8:d0:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8E:20:4B:97:E2:B9:D0:66:66:7A:17:1D:6C:23:7C:CB:21:99:14
X509v3 Authority Key Identifier:
keyid:8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:58:1d:79:d9:3d:60:cc:ca:eb:53:02:0e:36:04:15:87:6e:
d9:22:de:1f:a6:16:76:82:e8:00:f9:a2:6d:26:82:f2:a3:90:
07:ba:7b:2c:35:e3:93:76:90:9f:0b:ba:99:b9:76:59:39:b3:
fc:55:4f:2b:18:d6:94:9c:98:62:d1:ea:10:cd:93:ad:14:53:
e1:b3:31:91:a5:ac:ad:e3:fd:db:8a:ba:f2:34:c0:56:b0:90:
7e:04:bf:e4:4e:1e:22:fd:bf:6a:3a:9b:bb:95:70:0e:28:a2:
95:fb:7d:98:dd:96:cb:3e:06:c6:7d:d0:15:bf:48:f8:4f:90:
92:43:09:8f:a1:3d:c6:82:02:b3:04:e8:1e:6e:07:63:eb:d3:
45:e7:d4:85:18:fc:b3:57:aa:57:12:76:4a:11:af:bd:e9:89:
28:66:a6:e6:9d:9d:29:c3:d2:ef:e8:fd:7c:b1:e0:73:b7:73:
aa:c6:b2:d2:04:23:c5:e6:da:74:f6:9a:e5:bb:98:90:0e:84:
01:5a:6e:7f:bb:94:d7:6d:84:5f:b3:21:28:9d:29:40:54:33:
5f:83:1c:ec:78:a0:46:2a:ea:61:08:a8:be:83:65:ed:e4:1a:
3b:b3:2f:ec:71:2d:b3:6b:12:44:e0:5c:d1:13:b6:69:00:35:
3f:27:05:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:04:50 2026 by rpki-client