Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: 72bc2V2v3CtCKMgP10M+wbZKA9rgKYajLYa4tVXxHB8=
Subject key identifier: B8:9D:B9:73:D8:9A:80:6A:62:9C:3E:EB:54:74:82:7C:3D:3D:2E:C9
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 3689583CDB7F052805FD8B1CD233DEC5B153AB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: 0299
Signing time: Mon 02 Mar 2026 00:16:52 +0000
Manifest this update: Mon 02 Mar 2026 00:11:52 +0000
Manifest next update: Tue 03 Mar 2026 00:24:52 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: UKBWtYInxrFwvy5yy5jyvlFk4XND0A8IV64ZqdahkE8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:89:58:3c:db:7f:05:28:05:fd:8b:1c:d2:33:de:c5:b1:53:ab:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Mar 2 00:11:52 2026 GMT
Not After : Mar 3 00:24:52 2026 GMT
Subject: CN=B89DB973D89A806A629C3EEB5474827C3D3D2EC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:c4:a5:ad:a4:10:92:c3:62:25:34:cd:32:
02:67:c7:4d:a9:d4:e3:43:be:2c:12:2e:5f:6a:b3:
5c:c3:f5:a9:c7:aa:3c:76:5f:65:a0:fe:82:86:a1:
37:ed:a7:4c:c1:88:b2:02:8d:c0:3f:68:a6:0f:24:
f5:16:69:b7:cc:08:93:50:1c:2f:c4:f8:c1:e0:77:
b2:28:b9:c9:d8:d2:35:67:d3:cc:d6:6e:9e:11:ba:
95:ba:77:a5:84:66:9d:40:85:06:4e:38:f0:d2:75:
87:68:40:7f:74:15:86:a6:e4:0b:dd:23:99:06:ed:
69:06:61:63:5a:f1:dd:4b:fa:e4:81:93:2b:c3:84:
ba:e1:75:08:e0:4c:36:bf:e6:29:8f:4b:68:13:30:
a0:73:53:34:41:7d:6b:61:2d:41:72:b0:75:f6:3e:
ec:ad:db:f3:e7:df:dc:f0:da:a8:79:b2:58:eb:3f:
f4:cb:62:4f:c3:62:3b:cf:bf:b1:7c:80:4e:cf:ba:
b5:46:12:54:40:ac:b0:21:7f:7c:a8:8d:70:0d:e8:
80:1d:7e:4a:4c:01:76:cb:be:ef:b7:75:42:bf:34:
61:81:2b:1a:71:ba:20:e0:e0:01:d9:a7:a5:cc:c2:
6e:d9:73:e8:8c:ec:43:3b:7b:7f:f9:7b:36:22:b8:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9D:B9:73:D8:9A:80:6A:62:9C:3E:EB:54:74:82:7C:3D:3D:2E:C9
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:41:34:e8:81:f1:d0:38:09:2b:ac:c2:78:ea:0f:5f:ce:3a:
cd:00:b3:42:dc:af:ce:54:54:16:83:41:fb:57:cb:47:72:22:
14:57:40:36:64:a8:2a:73:5f:c3:8f:80:80:a6:da:aa:bb:4f:
f8:26:44:2e:a3:09:8b:17:1c:3c:ce:49:3e:70:04:e7:a0:ba:
97:2b:32:7e:70:14:e8:7f:9b:0c:78:c0:79:68:66:41:3a:ee:
7d:a8:3f:8d:70:e7:6d:61:1a:de:13:14:93:d8:13:09:10:10:
85:3f:da:2f:87:bf:0d:e6:d9:1c:42:4a:b5:7c:85:44:7c:03:
84:19:34:a2:70:11:40:d5:d4:3e:0f:e1:99:82:79:6f:ed:dc:
5f:93:b2:8e:e2:df:db:5d:37:36:79:c7:40:44:97:08:c1:9a:
76:94:5f:96:98:88:e8:12:f9:d4:1b:d3:3f:2f:c5:1d:37:18:
78:4e:d9:1f:cb:c6:90:7c:62:7b:07:78:c1:0b:7d:bc:40:82:
75:c4:02:71:d6:c9:26:b0:8e:77:2d:1e:f8:2b:57:e2:6f:1a:
85:1d:7a:0a:bf:d6:7b:10:17:eb:2e:2e:a6:7f:e3:dd:37:8b:
e4:dd:e3:b3:ce:83:2b:0c:86:12:2d:19:0e:d2:67:a6:45:21:
c2:37:0a:89
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUNolYPNt/BSgF/Ysc0jPexbFTq3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRlOTE5NjVhODA5ZDFhYzVhYTBmMGQwNTUwNmFjYjBk
ZGIwMmFiODAeFw0yNjAzMDIwMDExNTJaFw0yNjAzMDMwMDI0NTJaMDMxMTAvBgNV
BAMTKEI4OURCOTczRDg5QTgwNkE2MjlDM0VFQjU0NzQ4MjdDM0QzRDJFQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzusSlraQQksNiJTTNMgJnx02p
1ONDviwSLl9qs1zD9anHqjx2X2Wg/oKGoTftp0zBiLICjcA/aKYPJPUWabfMCJNQ
HC/E+MHgd7IoucnY0jVn08zWbp4RupW6d6WEZp1AhQZOOPDSdYdoQH90FYam5Avd
I5kG7WkGYWNa8d1L+uSBkyvDhLrhdQjgTDa/5imPS2gTMKBzUzRBfWthLUFysHX2
Puyt2/Pn39zw2qh5sljrP/TLYk/DYjvPv7F8gE7PurVGElRArLAhf3yojXAN6IAd
fkpMAXbLvu+3dUK/NGGBKxpxuiDg4AHZp6XMwm7Zc+iM7EM7e3/5ezYiuOnpAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUuJ25c9iagGpinD7rVHSCfD09LskwHwYDVR0j
BBgwFoAUdOkZZagJ0axaoPDQVQassN2wKrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl
OTUwLzAvNzRFOTE5NjVBODA5RDFBQzVBQTBGMEQwNTUwNkFDQjBEREIwMkFCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RPa1paYWdKMGF4YW9QRFFWUWFzc04y
d0tyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmNmOGJhNy1j
YjAyLTQxOGItYmUwNC00ZDlmM2EwN2U5NTAvMC83NEU5MTk2NUE4MDlEMUFDNUFB
MEYwRDA1NTA2QUNCMEREQjAyQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUE06IHx0DgJK6zCeOoP
X846zQCzQtyvzlRUFoNB+1fLR3IiFFdANmSoKnNfw4+AgKbaqrtP+CZELqMJixcc
PM5JPnAE56C6lysyfnAU6H+bDHjAeWhmQTrufag/jXDnbWEa3hMUk9gTCRAQhT/a
L4e/DebZHEJKtXyFRHwDhBk0onARQNXUPg/hmYJ5b+3cX5OyjuLf2103NnnHQESX
CMGadpRflpiI6BL51BvTPy/FHTcYeE7ZH8vGkHxiewd4wQt9vECCdcQCcdbJJrCO
dy0e+CtX4m8ahR16Cr/WexAX6y4upn/j3TeL5N3js86DKwyGEi0ZDtJnpkUhwjcK
iQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:56 2026 by rpki-client