Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: 4bx6YvwO1kDMiAkbDK2ZliszdZAWmgtJmfF21bwokso=
Subject key identifier: D6:DA:DB:60:C3:00:DD:2C:B9:D1:62:4E:FA:51:E2:92:A2:90:1E:90
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 0C4413F41D1EF4777D5DEAF8DDA92896955575B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: 02D9
Signing time: Fri 17 Apr 2026 00:17:02 +0000
Manifest this update: Fri 17 Apr 2026 00:12:02 +0000
Manifest next update: Sat 18 Apr 2026 01:02:02 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: nSOn3n/IJpbEOtkDgXwb7AHaBC+DfV7LN1NdG0kHAc4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:44:13:f4:1d:1e:f4:77:7d:5d:ea:f8:dd:a9:28:96:95:55:75:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Apr 17 00:12:02 2026 GMT
Not After : Apr 18 01:02:02 2026 GMT
Subject: CN=D6DADB60C300DD2CB9D1624EFA51E292A2901E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:f1:fa:40:d2:69:89:88:24:b4:49:d5:2e:
90:99:65:26:0e:6c:ae:e8:d7:7d:0d:4c:36:23:5d:
a6:4b:f7:4f:7b:c8:1e:b2:5f:5d:4c:08:a7:6d:0e:
d3:c9:74:bd:60:b0:72:49:f1:81:67:a6:92:3f:94:
cf:ff:8c:95:c1:3b:d1:e2:35:22:95:92:de:bf:5c:
5c:fe:7a:ba:48:bf:e6:e7:7e:3d:32:c9:8b:1b:a0:
de:13:dd:f3:96:79:3a:f6:33:1a:c5:c4:76:a2:f3:
c6:0a:79:98:fe:a0:b1:b0:1e:b3:1e:75:31:2a:92:
45:69:5b:1d:3e:2e:8b:5f:c8:d0:3c:ff:37:5f:0d:
a4:fe:da:a0:78:29:8f:86:9e:35:2b:a2:c6:55:3d:
b0:2d:c9:fe:d6:56:8c:cb:56:af:44:f9:42:2c:20:
ff:a5:6f:19:f2:66:6c:74:07:e8:8e:13:05:7c:ea:
b7:4b:24:2e:7f:36:0d:f9:c4:60:d6:75:68:fe:8d:
08:f1:2b:48:99:7f:40:da:6e:6c:c8:94:f6:1a:af:
51:21:b9:74:41:8c:33:c4:2e:ab:9f:a3:0a:cb:05:
3b:95:64:ae:e1:34:51:b1:76:c0:7f:cc:74:b8:a0:
33:02:32:af:8e:c2:1e:a2:9b:07:c5:84:26:70:65:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DA:DB:60:C3:00:DD:2C:B9:D1:62:4E:FA:51:E2:92:A2:90:1E:90
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a9:63:b1:b5:86:b7:27:5c:ff:3d:53:e1:29:75:8d:c4:74:
5b:13:02:69:92:7a:fa:ca:0e:b2:ac:27:d0:dd:36:22:4f:29:
c5:38:5b:aa:5c:7e:2c:95:30:5e:0f:69:44:63:7b:4b:6b:c5:
db:ed:ed:2f:15:10:91:cb:63:d8:59:0b:5e:d5:a9:7c:35:bc:
13:c7:9f:d9:cf:d6:57:a8:5d:bf:b4:9b:a6:31:d2:5b:d6:fa:
d7:58:5a:5e:7b:be:1b:da:31:41:93:f7:b1:6c:83:91:72:d7:
2a:af:36:c7:1f:75:c6:3e:09:b3:26:33:ef:4b:fa:ea:e5:a5:
1f:cd:26:0a:cc:c3:9b:4d:b0:19:26:58:4f:b2:22:f5:c5:f5:
ef:0b:bd:1f:25:b7:23:79:3e:dc:42:40:4f:db:3b:b9:66:10:
a8:d6:37:6c:87:f8:9d:03:4c:44:6c:1c:80:a9:bd:e5:32:6a:
da:3f:f4:46:01:a5:06:1a:52:96:dc:b0:da:e8:c7:d2:54:cc:
a1:f8:d8:cc:67:f9:7b:15:e3:93:29:6b:e5:81:0a:70:c8:17:
42:04:f6:49:47:0d:e6:ff:af:c0:30:b8:12:c2:bc:18:32:2c:
b2:76:89:72:40:2c:92:48:91:8f:65:7f:5c:70:4c:7b:6e:cd:
3e:d6:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:39 2026 by rpki-client