Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
File: E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft (raw, json)
Hash identifier: D57yowd5SAkbwxbxwkH8lkjUW1jpFIMwZiJhhUojwzQ=
Subject key identifier: DB:68:0E:DE:AE:CD:9A:5A:5B:7C:2E:A2:E8:D0:48:A1:2E:C5:AB:38
Authority key identifier: E0:EB:C3:E1:88:E3:5D:38:BC:8D:CC:68:6C:A2:76:C6:5D:6D:A2:AF
Certificate issuer: /CN=e0ebc3e188e35d38bc8dcc686ca276c65d6da2af
Certificate serial: 27112A64993200875AAEE58661ADE679F22C09A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
Manifest number: D0
Signing time: Fri 17 Apr 2026 00:08:34 +0000
Manifest this update: Fri 17 Apr 2026 00:03:34 +0000
Manifest next update: Sat 18 Apr 2026 02:08:34 +0000
Files and hashes: 1: E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl (hash: xU6xVNka78C5pMaJ4XS92PEHNh7TVxw7jP2lsI8HBR0=)
2: 3139332e3130372e38322e302f32342d3234203d3e203630383630.roa (hash: x3oBjxqc7sXsiScFg8HANPn6SPGL7AD0sdvQlu75w7g=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:11:2a:64:99:32:00:87:5a:ae:e5:86:61:ad:e6:79:f2:2c:09:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebc3e188e35d38bc8dcc686ca276c65d6da2af
Validity
Not Before: Apr 17 00:03:34 2026 GMT
Not After : Apr 18 02:08:34 2026 GMT
Subject: CN=DB680EDEAECD9A5A5B7C2EA2E8D048A12EC5AB38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:15:82:49:57:14:dc:a3:d3:6b:b1:73:b4:b7:
68:67:f1:42:86:6c:ae:70:c7:c6:4c:ff:11:39:fd:
fa:59:20:90:c7:5b:59:a7:bb:f3:08:da:ec:aa:83:
60:fc:ec:24:3a:64:80:92:7c:73:66:f0:49:9e:ac:
ae:c9:b3:b7:2c:b8:15:da:1b:18:70:39:33:53:df:
e2:4f:10:f1:94:82:41:eb:3f:32:c4:22:12:bf:6e:
c3:40:70:07:35:fe:4f:c6:fd:a1:4c:05:37:ff:81:
60:0b:b5:65:40:d1:44:0c:c5:a0:a7:20:fe:18:5d:
99:71:9a:9f:c1:e6:b5:8f:c1:75:83:f4:7a:57:10:
c5:9f:49:ea:d0:72:da:ad:4b:e8:b7:91:07:3f:bb:
6d:7e:f8:2c:e0:73:c8:ef:4a:ad:d4:9b:5b:f1:1f:
1f:80:f4:61:32:e0:28:05:7d:92:31:a6:aa:cb:26:
50:a3:55:0a:18:b0:18:e9:8d:c2:ee:a6:c4:a8:43:
8d:2d:a0:bc:e6:71:f5:fa:23:6f:4d:26:b3:98:f5:
b3:e2:ff:be:69:0d:87:98:00:b3:e8:1f:09:3a:9b:
3c:88:94:f1:5d:4b:8c:6d:44:51:e9:5d:78:54:0e:
34:7d:e8:ea:3f:07:87:8a:9d:e0:54:82:b7:f1:7a:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:68:0E:DE:AE:CD:9A:5A:5B:7C:2E:A2:E8:D0:48:A1:2E:C5:AB:38
X509v3 Authority Key Identifier:
keyid:E0:EB:C3:E1:88:E3:5D:38:BC:8D:CC:68:6C:A2:76:C6:5D:6D:A2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:52:fb:55:06:31:1e:7a:c9:2c:e3:db:48:2a:09:54:3a:dd:
f9:d8:54:da:79:80:c4:52:07:63:41:d2:d3:c2:a0:d5:02:10:
05:47:9b:b1:68:18:f8:72:d7:ab:b4:eb:ae:67:97:26:bb:9a:
54:c2:01:af:47:30:07:be:e8:5d:e5:55:73:a3:2a:71:ee:33:
8e:cd:2a:6c:d1:ab:cc:79:58:dc:1f:8a:1b:7d:6e:47:88:65:
b5:a9:c5:dc:97:41:2d:47:46:cc:53:4c:42:f7:2e:ae:46:19:
3b:b8:6f:ee:66:3d:31:d8:9e:57:fa:24:b6:6e:5a:cb:3f:01:
76:03:0a:ae:69:a4:48:f7:a7:cc:b4:7d:61:ad:e2:3e:81:18:
b2:fc:2a:f0:40:c3:c9:72:84:78:9a:a5:2a:f4:9e:2b:d0:24:
cc:ce:6e:9c:64:1c:f5:84:13:e9:dc:59:73:dd:33:97:55:eb:
09:15:c4:35:19:1b:43:77:ba:cc:57:cd:d5:cb:83:33:b4:a9:
40:62:b5:3b:c9:df:a2:2f:e5:1b:3b:94:2c:a0:d3:58:31:c4:
2f:dd:93:1a:4f:e2:8d:be:bf:f5:36:df:83:5d:4c:46:69:7a:
50:d1:1b:93:b0:2c:97:50:d1:a8:cb:d2:88:a7:ca:9c:d3:9a:
c9:df:9d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:01 2026 by rpki-client