Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
File: B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft (raw, json)
Hash identifier: nJ0tcY26cpfyE8jQEL+c5pjVRQdTNwyw3Vwi9j0zJ9o=
Subject key identifier: DA:6A:91:7B:A5:5E:60:FB:DC:B0:28:12:1C:EA:AB:4E:51:78:6C:18
Authority key identifier: B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF
Certificate issuer: /CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
Certificate serial: 223281CB23B1CE5E8AE04BA31ECFA781B7076B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
Manifest number: 0170
Signing time: Sun 12 Apr 2026 15:25:40 +0000
Manifest this update: Sun 12 Apr 2026 15:20:40 +0000
Manifest next update: Mon 13 Apr 2026 18:04:40 +0000
Files and hashes: 1: B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl (hash: Xrc11Y9Vl5298T8IEXisuUaVUeFya2l3lXVnM+WOnn8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:32:81:cb:23:b1:ce:5e:8a:e0:4b:a3:1e:cf:a7:81:b7:07:6b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
Validity
Not Before: Apr 12 15:20:40 2026 GMT
Not After : Apr 13 18:04:40 2026 GMT
Subject: CN=DA6A917BA55E60FBDCB028121CEAAB4E51786C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:64:90:1a:38:c1:9b:67:3f:7c:91:13:86:69:
ea:e3:08:12:0f:9b:4c:c3:d7:d5:ee:c3:7e:aa:9e:
6f:e0:99:fe:b5:f7:ba:0f:04:cd:d0:e0:b4:3d:8b:
19:49:34:20:cb:5b:ff:76:6a:95:03:4d:26:ca:09:
46:6d:00:99:8e:94:75:00:f4:f8:e4:ac:cd:06:9d:
55:1e:63:9f:55:8c:6b:89:92:89:f7:73:9d:66:fb:
6c:28:f1:09:83:9a:77:51:89:b6:21:9e:01:ce:8a:
0d:14:ed:02:ff:1f:8d:4b:f0:d4:65:86:7b:97:8f:
37:08:75:5e:ec:87:ba:5c:26:1f:87:96:82:8a:f1:
6a:ab:39:60:45:d4:ff:4d:73:6b:28:2c:fd:af:b7:
1a:48:8b:45:42:af:f6:0e:90:1a:40:a0:a3:7f:e4:
6a:d8:04:05:7b:46:3e:8b:f6:d8:90:44:c3:3e:f7:
de:2e:ec:39:88:98:1b:ee:3b:23:86:40:00:32:c7:
08:5f:34:64:5f:e7:63:70:bc:73:6e:15:10:dc:7b:
50:08:16:7d:57:81:eb:55:a1:1b:7d:77:4b:37:46:
df:75:02:ea:cd:9d:51:ce:91:bc:c4:84:3b:72:f0:
9e:98:19:3f:b5:29:de:56:06:8e:eb:13:6b:80:5f:
e4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6A:91:7B:A5:5E:60:FB:DC:B0:28:12:1C:EA:AB:4E:51:78:6C:18
X509v3 Authority Key Identifier:
keyid:B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:79:ea:14:22:81:f7:98:ab:81:3a:cf:7d:2a:c3:bb:e0:20:
2f:2e:a3:f0:b6:2d:d0:22:f7:22:b9:f8:16:2c:60:a1:eb:59:
53:78:c2:52:03:a6:9b:95:30:51:7e:35:1b:a9:19:bc:e1:28:
1b:b9:e9:54:06:59:86:78:c5:0e:5c:66:e5:a0:50:ef:49:20:
cd:5e:71:02:0b:d0:f8:20:12:fa:91:26:21:21:b9:71:97:16:
98:44:ad:02:b0:bc:9a:45:02:c4:4f:a4:9a:89:d3:a8:e0:e3:
d7:98:2f:88:d2:c0:9b:d4:ea:8f:d5:01:07:8f:59:b2:cf:39:
bd:4e:18:8c:0f:98:71:d9:53:15:a9:17:57:46:86:27:5b:06:
88:67:66:df:a9:6e:a1:6a:f8:c3:cf:73:73:f7:67:2b:f2:05:
4c:51:31:df:d0:ad:d0:f1:e8:11:c7:ea:ac:91:6f:d1:40:ba:
a5:b7:9d:64:72:da:9f:e7:de:f3:86:34:66:3e:19:e1:86:88:
3d:5c:f9:c4:f0:a4:9d:79:64:a0:7b:e1:fa:91:f7:c6:a7:d5:
ba:5b:e9:2e:4c:a1:15:be:ce:27:07:41:ce:2e:b8:5b:4e:83:
38:44:a1:95:c8:c0:28:04:9e:31:b9:c9:27:58:31:5b:f3:b1:
8e:4b:e5:ed
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUIjKByyOxzl6K4EujHs+ngbcHax8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjgyODhlYTllM2Q2N2RjM2QzOGZhNzc1MTgxYzRiMmM4
NzcyOWJkZjAeFw0yNjA0MTIxNTIwNDBaFw0yNjA0MTMxODA0NDBaMDMxMTAvBgNV
BAMTKERBNkE5MTdCQTU1RTYwRkJEQ0IwMjgxMjFDRUFBQjRFNTE3ODZDMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFZJAaOMGbZz98kROGaerjCBIP
m0zD19Xuw36qnm/gmf6197oPBM3Q4LQ9ixlJNCDLW/92apUDTSbKCUZtAJmOlHUA
9PjkrM0GnVUeY59VjGuJkon3c51m+2wo8QmDmndRibYhngHOig0U7QL/H41L8NRl
hnuXjzcIdV7sh7pcJh+HloKK8WqrOWBF1P9Nc2soLP2vtxpIi0VCr/YOkBpAoKN/
5GrYBAV7Rj6L9tiQRMM+994u7DmImBvuOyOGQAAyxwhfNGRf52NwvHNuFRDce1AI
Fn1XgetVoRt9d0s3Rt91AurNnVHOkbzEhDty8J6YGT+1Kd5WBo7rE2uAX+QnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU2mqRe6VeYPvcsCgSHOqrTlF4bBgwHwYDVR0j
BBgwFoAUuCiOqePWfcPTj6d1GBxLLIdym98wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2M4ZTRlMTEtM2FjYS00MzA1LWFjZDQtZjA1ZTZjOTA5
MTE1LzAvQjgyODhFQTlFM0Q2N0RDM0QzOEZBNzc1MTgxQzRCMkM4NzcyOUJERi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3VDaU9xZVBXZmNQVGo2ZDFHQnhMTElk
eW05OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zYzhlNGUxMS0z
YWNhLTQzMDUtYWNkNC1mMDVlNmM5MDkxMTUvMC9CODI4OEVBOUUzRDY3REMzRDM4
RkE3NzUxODFDNEIyQzg3NzI5QkRGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHnqFCKB95irgTrPfSrD
u+AgLy6j8LYt0CL3Irn4FixgoetZU3jCUgOmm5UwUX41G6kZvOEoG7npVAZZhnjF
Dlxm5aBQ70kgzV5xAgvQ+CAS+pEmISG5cZcWmEStArC8mkUCxE+kmonTqODj15gv
iNLAm9Tqj9UBB49Zss85vU4YjA+YcdlTFakXV0aGJ1sGiGdm36luoWr4w89zc/dn
K/IFTFEx39Ct0PHoEcfqrJFv0UC6pbedZHLan+fe84Y0Zj4Z4YaIPVz5xPCknXlk
oHvh+pH3xqfVulvpLkyhFb7OJwdBzi64W06DOEShlcjAKASeMbnJJ1gxW/Oxjkvl
7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:52 2026 by rpki-client