Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
File: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft (raw, json)
Hash identifier: ehufxToW52dDeKKqgGTLajDqSb2PJ+7fmwZ9wwSxGo4=
Subject key identifier: 03:9B:D1:FD:0F:7C:FE:C4:22:DC:5D:DC:AD:43:CD:DE:30:71:C3:2C
Authority key identifier: 5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB
Certificate issuer: /CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
Certificate serial: 06E769AE19BA0E86E5B9E94361CEDBE3A28199B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
Manifest number: 0282
Signing time: Mon 02 Mar 2026 04:03:29 +0000
Manifest this update: Mon 02 Mar 2026 03:58:29 +0000
Manifest next update: Tue 03 Mar 2026 05:17:29 +0000
Files and hashes: 1: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl (hash: GDQQd1QoY/xMDZZ33RidHYgu7Nk5N2urwsMtskZuVlc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e7:69:ae:19:ba:0e:86:e5:b9:e9:43:61:ce:db:e3:a2:81:99:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
Validity
Not Before: Mar 2 03:58:29 2026 GMT
Not After : Mar 3 05:17:29 2026 GMT
Subject: CN=039BD1FD0F7CFEC422DC5DDCAD43CDDE3071C32C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:7b:2e:24:f9:88:2c:41:92:2b:b0:7c:30:
c8:54:d8:90:f8:85:a7:02:fb:55:2f:3a:24:9c:f4:
2d:df:ca:c4:82:f8:d7:fa:2a:c9:33:93:43:c9:3c:
15:dd:17:86:f1:cf:e4:e5:24:29:11:be:e4:f6:f9:
3a:a6:cf:aa:96:38:08:cd:7d:8d:66:13:05:ce:f4:
43:62:cc:1c:0d:f9:71:34:d6:d4:62:4d:7c:8c:b7:
27:88:de:27:21:0b:ff:fc:b5:05:22:4e:21:68:4a:
18:2e:b1:d4:67:21:9c:4e:80:81:bd:3f:36:22:00:
c7:27:41:ce:ec:04:8b:1d:41:59:84:7f:79:c3:24:
5f:c4:b7:6a:53:61:9d:56:63:ed:90:b9:f2:92:17:
dd:d0:63:c8:32:b5:82:8a:fd:c4:d3:83:5d:aa:4e:
25:f0:1e:da:c8:b2:86:b4:0f:3f:b5:7d:0b:20:d8:
95:53:81:d8:69:64:41:76:d5:df:5c:b2:4c:2a:71:
27:a8:fb:16:a7:c5:35:dd:fb:f4:13:0f:a2:e8:03:
bb:fb:3f:85:e3:f5:e4:96:aa:93:42:43:cf:6f:65:
d0:c6:f7:99:cf:64:45:9f:dc:46:8f:7c:3b:2f:58:
a5:a4:92:eb:23:61:53:09:ad:99:22:29:05:ce:e8:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:D1:FD:0F:7C:FE:C4:22:DC:5D:DC:AD:43:CD:DE:30:71:C3:2C
X509v3 Authority Key Identifier:
keyid:5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2b:30:1e:40:c7:61:35:49:ff:6b:45:8a:56:1e:21:21:11:
23:d2:ff:a4:59:77:20:06:2c:94:f0:b0:fb:8f:ae:84:f1:7c:
87:8b:bc:2a:ff:90:66:0b:29:12:b7:fb:83:4b:17:79:28:ba:
37:15:e2:8e:71:81:de:f7:a5:99:52:1b:57:29:6a:d3:b1:2d:
3c:d6:ef:72:54:2c:a5:bb:6c:bd:31:8e:34:06:44:47:36:8a:
50:5f:65:12:3a:ec:8d:f0:21:fd:77:cd:b7:27:b7:73:9f:8f:
16:96:bf:75:2b:00:3e:4a:8b:60:4e:00:04:49:0a:ea:02:2b:
3f:6f:57:7d:aa:6c:29:f1:e2:bf:3e:2e:1d:7e:b5:eb:66:3d:
17:26:83:e3:e6:f0:c5:88:1a:d3:09:96:d8:46:22:f3:ee:a6:
32:61:a5:e5:0a:2d:5b:be:8f:a4:41:dd:ad:7f:73:dd:42:78:
4a:5d:13:f3:a8:11:d1:3a:50:dd:94:4d:6f:93:85:01:d7:54:
8f:3a:ba:39:68:f0:8d:2e:4e:35:41:9e:98:80:1a:34:ca:54:
eb:48:43:24:53:f3:9f:95:3a:5d:f7:9b:12:e7:ad:16:bc:72:
bd:55:17:50:cc:b8:2b:93:f2:d0:c8:e7:2d:db:1e:59:ed:12:
9d:bb:23:43
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUBudprhm6DobluelDYc7b46KBmbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVkYmQ2ZTc5YzY4OWM1NmE4NGZhNDZjZDdjOWZhMzE1
MWRmZTBiYjAeFw0yNjAzMDIwMzU4MjlaFw0yNjAzMDMwNTE3MjlaMDMxMTAvBgNV
BAMTKDAzOUJEMUZEMEY3Q0ZFQzQyMkRDNUREQ0FENDNDRERFMzA3MUMzMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vHsuJPmILEGSK7B8MMhU2JD4
hacC+1UvOiSc9C3fysSC+Nf6Kskzk0PJPBXdF4bxz+TlJCkRvuT2+Tqmz6qWOAjN
fY1mEwXO9ENizBwN+XE01tRiTXyMtyeI3ichC//8tQUiTiFoShgusdRnIZxOgIG9
PzYiAMcnQc7sBIsdQVmEf3nDJF/Et2pTYZ1WY+2QufKSF93QY8gytYKK/cTTg12q
TiXwHtrIsoa0Dz+1fQsg2JVTgdhpZEF21d9cskwqcSeo+xanxTXd+/QTD6LoA7v7
P4Xj9eSWqpNCQ89vZdDG95nPZEWf3EaPfDsvWKWkkusjYVMJrZkiKQXO6ARzAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUA5vR/Q98/sQi3F3crUPN3jBxwywwHwYDVR0j
BBgwFoAUXtvW55xonFaoT6Rs18n6MVHf4LswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQtMzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRl
ODM3LzAvNUVEQkQ2RTc5QzY4OUM1NkE4NEZBNDZDRDdDOUZBMzE1MURGRTBCQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1h0dlc1NXhvbkZhb1Q2UnMxOG42TVZI
ZjRMcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NTM2MjNjNC0z
M2JkLTQzOGEtYTkzZS0wMThkNjVjNGU4MzcvMC81RURCRDZFNzlDNjg5QzU2QTg0
RkE0NkNEN0M5RkEzMTUxREZFMEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiswHkDHYTVJ/2tFilYe
ISERI9L/pFl3IAYslPCw+4+uhPF8h4u8Kv+QZgspErf7g0sXeSi6NxXijnGB3vel
mVIbVylq07EtPNbvclQspbtsvTGONAZERzaKUF9lEjrsjfAh/XfNtye3c5+PFpa/
dSsAPkqLYE4ABEkK6gIrP29XfapsKfHivz4uHX6162Y9FyaD4+bwxYga0wmW2EYi
8+6mMmGl5QotW76PpEHdrX9z3UJ4Sl0T86gR0TpQ3ZRNb5OFAddUjzq6OWjwjS5O
NUGemIAaNMpU60hDJFPzn5U6XfebEuetFrxyvVUXUMy4K5Py0MjnLdseWe0Snbsj
Qw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:40 2026 by rpki-client