Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier: irOkuCz/6hpyIuFdyZ0F//mQt33SlemfW52ri33SmM0=
Subject key identifier: E7:5A:C7:5F:F2:39:9E:10:11:19:0F:81:7F:1F:5A:73:9E:F2:0B:A4
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer: /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial: 6540100FA02F58A76B90B45E46ADA6E7C34688FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number: 04AC
Signing time: Sun 01 Mar 2026 18:52:48 +0000
Manifest this update: Sun 01 Mar 2026 18:47:48 +0000
Manifest next update: Mon 02 Mar 2026 19:53:48 +0000
Files and hashes: 1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: RvBMRx8jYis+VOkUasm+LyCZsWWoPOeqTK2VtyKcamQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:40:10:0f:a0:2f:58:a7:6b:90:b4:5e:46:ad:a6:e7:c3:46:88:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Validity
Not Before: Mar 1 18:47:48 2026 GMT
Not After : Mar 2 19:53:48 2026 GMT
Subject: CN=E75AC75FF2399E1011190F817F1F5A739EF20BA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:eb:1a:ff:d8:06:30:db:b0:27:c0:cb:fb:
fa:80:e6:eb:bc:af:23:2c:3a:00:9d:20:bc:43:8a:
31:33:8b:13:57:50:a4:72:60:8e:72:b1:e2:30:75:
4e:c7:6f:11:fb:17:fd:cb:8e:d3:b4:56:73:b3:7f:
a9:33:fb:82:19:8c:bc:1c:15:9d:93:2f:58:77:0a:
cd:75:1b:e3:ed:96:29:25:4e:ca:94:c3:47:ed:f1:
ae:3b:60:43:31:ca:45:b0:54:e9:a0:0c:57:e2:57:
19:7c:c9:05:fd:06:a3:87:6a:96:9d:c9:06:79:7c:
da:cf:c5:22:96:6a:08:ef:dd:f0:73:d0:40:63:dc:
67:d2:47:43:af:1e:6b:17:87:1f:d3:c0:44:3b:29:
1d:96:cb:f4:e7:76:20:ea:11:55:3b:61:1c:09:fe:
e3:95:c5:ae:36:4b:ec:e9:d3:a8:5a:75:e7:f8:40:
9c:f8:c8:bc:df:dd:d7:ea:58:19:4f:1c:36:52:c7:
0d:b3:24:c3:a2:63:be:5f:eb:d6:81:bf:60:65:c1:
89:03:82:63:62:91:50:1e:f4:ab:8d:3d:39:19:d4:
d9:73:59:e5:26:7f:80:65:e4:91:ee:a2:9a:76:ae:
26:8d:c2:99:0e:0d:97:29:1d:a1:be:80:15:58:a4:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5A:C7:5F:F2:39:9E:10:11:19:0F:81:7F:1F:5A:73:9E:F2:0B:A4
X509v3 Authority Key Identifier:
keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:78:0e:7e:83:0e:60:23:f7:ec:f2:a7:2b:94:9a:e0:19:aa:
b8:e2:f0:0c:62:82:b7:b8:49:c8:54:a5:e6:c3:8e:88:d2:b4:
d2:26:57:30:bc:57:b3:d0:5c:23:b0:7b:5f:eb:f0:31:57:f9:
24:02:f0:d7:6b:db:d9:d3:28:eb:1f:4e:34:bd:60:27:87:71:
65:ca:d2:03:a9:80:c2:4c:23:52:c2:50:4e:a9:88:42:8c:ff:
f9:c3:62:a3:a8:c2:6e:7f:f0:e8:cd:bc:e9:e2:26:1e:f8:34:
3f:5f:db:c8:22:39:e2:ab:83:5c:1f:9d:88:14:e7:52:7c:95:
b7:55:dc:70:bb:22:1f:6b:d0:b4:1e:47:e7:b8:73:a2:bd:1e:
51:94:93:07:04:e0:d5:31:c1:1e:09:04:e9:d8:fc:c0:dc:22:
80:9e:c1:2a:4c:b9:fc:64:ab:85:ed:4b:fd:fb:3d:e3:14:fa:
3f:ba:24:50:38:7b:02:b3:2c:37:65:3c:0a:c4:f5:bb:9e:0f:
63:3e:d5:89:43:3f:ad:15:c4:ca:ae:f1:46:9d:a4:4f:c8:b6:
ab:89:c1:cf:27:8e:93:c9:6b:68:a1:02:ef:81:5d:34:37:a4:
3e:1c:ed:5e:26:ee:2a:1a:b2:f6:df:37:55:b6:47:4b:91:d4:
13:f1:c0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:13:59 2026 by rpki-client