Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
File: B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft (raw, json)
Hash identifier: TKbyRUFWq4bf5BwViSaEdeu+YGRT2W6FjCNL8Yz+iwo=
Subject key identifier: 1C:A8:48:11:F2:80:10:39:32:91:56:93:71:18:B1:8B:8C:0F:97:35
Authority key identifier: B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF
Certificate issuer: /CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
Certificate serial: 0BA10B50E73CFD2EED9EBDA619AA958B3AD5A4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
Manifest number: 0138
Signing time: Sun 01 Mar 2026 14:33:08 +0000
Manifest this update: Sun 01 Mar 2026 14:28:08 +0000
Manifest next update: Mon 02 Mar 2026 17:56:08 +0000
Files and hashes: 1: B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl (hash: TjcNQLyU/wQ/UaGq1ma+PwMTnTwfx3p7YkdMsh/zTFM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl
rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a1:0b:50:e7:3c:fd:2e:ed:9e:bd:a6:19:aa:95:8b:3a:d5:a4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
Validity
Not Before: Mar 1 14:28:08 2026 GMT
Not After : Mar 2 17:56:08 2026 GMT
Subject: CN=1CA84811F2801039329156937118B18B8C0F9735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:55:1e:d9:e5:46:a9:56:71:47:07:e5:f8:
69:4f:34:7c:78:10:28:37:26:a2:2f:de:37:35:d4:
a4:67:72:f4:3f:02:4d:c7:e6:c0:a0:6c:f3:87:45:
01:86:0e:37:10:9f:d6:42:1b:38:a3:6e:04:87:62:
46:7e:11:54:75:d8:f9:80:bd:96:58:61:80:ee:7d:
a2:d6:67:01:8f:c1:46:0e:04:fa:73:d8:a9:d5:f6:
a3:1e:b7:6c:a4:62:95:12:52:ea:af:e2:55:d2:b1:
05:03:d0:05:55:6e:35:a2:f5:5c:5c:7f:72:97:13:
ed:22:1d:5d:40:01:fc:d4:d4:e5:e7:46:13:9e:ec:
cc:e0:49:61:47:f8:60:03:23:04:ef:05:e8:e7:9c:
50:be:22:c2:9a:21:a1:25:0a:ef:3a:00:86:e3:52:
75:ba:93:2a:53:3b:f2:b4:4c:11:ad:ff:68:2c:d1:
7b:d9:f1:f7:bb:99:2b:3f:e6:df:91:d3:f1:15:88:
8f:32:6e:ce:36:8b:1c:c5:18:5f:9e:2d:9a:8d:8c:
b9:32:69:e2:f3:51:bc:88:71:85:8a:4a:ce:b9:61:
25:d9:a1:5e:51:e1:e9:c6:e9:f6:8d:cf:73:62:0d:
b1:49:21:3f:39:75:e7:95:5b:8b:3b:9c:ce:46:bf:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A8:48:11:F2:80:10:39:32:91:56:93:71:18:B1:8B:8C:0F:97:35
X509v3 Authority Key Identifier:
keyid:B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:88:1f:2f:e7:bf:57:4d:4e:2d:0e:f0:6f:e4:12:69:0b:a5:
ff:e1:cc:37:32:a5:29:8d:77:23:ea:1d:c3:17:01:16:c1:60:
04:25:2e:a8:d5:8d:7e:8c:b4:72:5e:7a:41:60:ba:43:54:53:
de:f7:84:70:de:b6:cb:07:11:08:65:d1:2d:4c:d5:49:c7:41:
d0:26:4c:77:d7:7e:44:a9:38:c0:80:0f:17:35:56:45:c1:72:
b2:b2:11:11:0d:bb:19:28:87:3b:5a:76:d4:1c:9a:be:ea:81:
a3:e1:98:df:c4:55:a8:5f:bf:c5:98:63:4e:9c:2e:7a:31:ad:
b9:01:fa:f1:9f:41:5d:01:51:6c:44:da:59:cc:d7:2a:87:a1:
32:00:45:1a:2c:a5:52:e6:59:ce:d1:c0:f3:05:c1:fe:5e:17:
ca:8f:9a:d0:0b:3c:59:0d:a4:c8:03:21:66:c4:fd:98:99:ee:
cc:e4:dd:7d:90:8c:8d:31:7d:af:6a:b9:31:7b:61:7a:27:08:
93:2a:96:8c:62:13:64:a0:e1:59:a4:aa:bc:21:b5:25:76:8b:
7e:2b:2a:78:81:89:42:64:48:32:bb:88:85:99:0d:b6:f7:17:
38:7c:79:a3:ec:b0:08:07:df:d4:b4:99:1e:a9:ee:d5:3f:0f:
2d:ef:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:43 2026 by rpki-client