
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
File: E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft (raw, json)
Hash identifier: ORbaTVJpNh6oIWgo7sq1bstdIjfJN7qy6TAJt1GfSOg=
Subject key identifier: 1D:A7:06:6F:56:AD:66:CE:DC:C9:2B:2C:A7:93:D6:28:7D:CF:12:8E
Authority key identifier: E0:EB:C3:E1:88:E3:5D:38:BC:8D:CC:68:6C:A2:76:C6:5D:6D:A2:AF
Certificate issuer: /CN=e0ebc3e188e35d38bc8dcc686ca276c65d6da2af
Certificate serial: 57174A54E507CB6DED7620C58550C9B935295590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
Manifest number: 93
Signing time: Mon 02 Mar 2026 00:13:24 +0000
Manifest this update: Mon 02 Mar 2026 00:08:24 +0000
Manifest next update: Tue 03 Mar 2026 03:48:24 +0000
Files and hashes: 1: 3139332e3130372e38322e302f32342d3234203d3e203630383630.roa (hash: x3oBjxqc7sXsiScFg8HANPn6SPGL7AD0sdvQlu75w7g=)
2: E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl (hash: HdWDPqFp8y7CCJ6e4B0IhR/NkHhvDAHrHkyrfP1jJDM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:17:4a:54:e5:07:cb:6d:ed:76:20:c5:85:50:c9:b9:35:29:55:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebc3e188e35d38bc8dcc686ca276c65d6da2af
Validity
Not Before: Mar 2 00:08:24 2026 GMT
Not After : Mar 3 03:48:24 2026 GMT
Subject: CN=1DA7066F56AD66CEDCC92B2CA793D6287DCF128E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:ef:14:46:c9:19:f3:58:c7:1d:7c:2b:22:
ea:99:a8:0f:04:3a:a6:4e:21:8f:8b:5d:b0:aa:90:
0e:a5:10:57:48:f6:4b:35:75:69:1a:de:3c:b0:97:
ad:2f:69:a9:a7:be:6b:bf:24:f4:1b:4c:25:a6:81:
6a:16:07:b5:bf:72:55:e7:a3:0a:60:66:47:bb:a1:
a6:10:85:65:f5:df:06:58:a4:09:cd:33:40:75:65:
b5:5b:ea:92:67:fc:2f:a9:ed:22:57:2f:f2:f7:f2:
3c:49:17:bf:68:26:7c:92:28:de:32:78:64:54:df:
23:00:2f:b3:03:43:bf:15:95:5a:a7:b2:f4:65:44:
52:7a:b1:bd:e6:12:bd:6c:58:ba:03:b3:ec:f8:c0:
dd:09:22:04:41:e3:a1:17:aa:64:18:66:d3:e4:3e:
b5:ff:dc:e0:92:a6:71:5f:78:2c:ae:0d:7f:dc:b3:
f8:69:d4:a3:a7:1f:b3:b4:5c:47:cf:52:83:e8:47:
0f:0c:02:17:35:e0:21:8f:d4:f0:b5:85:b5:be:dd:
36:7e:66:8a:05:63:76:3b:f9:0a:72:ed:57:44:24:
1d:2d:b7:30:3a:75:bf:12:26:db:a6:43:b5:26:db:
30:2a:64:ca:10:f6:3f:29:f0:90:90:67:8d:55:d6:
d2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A7:06:6F:56:AD:66:CE:DC:C9:2B:2C:A7:93:D6:28:7D:CF:12:8E
X509v3 Authority Key Identifier:
keyid:E0:EB:C3:E1:88:E3:5D:38:BC:8D:CC:68:6C:A2:76:C6:5D:6D:A2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvD4YjjXTi8jcxobKJ2xl1toq8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/3/E0EBC3E188E35D38BC8DCC686CA276C65D6DA2AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:45:ec:24:1a:44:ce:c9:15:0d:2e:cd:c6:a9:af:1c:a1:b2:
25:39:cd:29:ec:e4:48:42:50:26:8b:05:46:10:c7:d8:4b:a1:
a4:79:d3:b8:3e:1f:3a:d1:13:72:33:3f:7f:94:78:a9:15:4b:
92:71:03:8c:8a:80:7c:1f:91:69:e5:87:d9:cd:ba:16:f1:d3:
41:5e:ea:7c:6a:9d:f5:26:a0:90:f6:7b:50:c1:68:4b:34:7e:
eb:20:c0:2c:ed:f0:df:d5:0f:3f:69:42:90:df:23:b0:47:c2:
15:8e:4e:1c:d7:2d:f2:3c:6e:f3:8a:dd:c3:0f:be:9d:c5:0b:
e4:49:a6:40:bc:76:b2:cb:9d:ec:9c:bc:00:c5:c2:bc:e5:b6:
d0:87:cf:44:f1:81:d0:75:e5:19:29:a4:d1:25:c7:8f:1c:3e:
c5:25:11:56:77:6b:a8:65:b6:3a:c6:2e:c4:90:75:03:1c:bb:
0f:9f:e2:ed:0a:8b:45:af:e0:0e:05:1b:81:92:7f:00:ca:25:
3b:34:9f:0a:a0:be:14:ff:ec:9c:58:f1:ef:68:6a:b0:04:ac:
e7:1d:f4:99:33:df:da:9c:2e:a5:7a:8a:d0:db:16:ca:50:62:
da:41:d4:24:b5:0a:dd:30:89:bc:22:8d:d4:d0:b1:2c:b2:07:
d1:e1:c6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:35:29 2026 by rpki-client