Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File: B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier: Bu7K6jk4WUmojqkXkVShWen+YBvU0SGoQYErvQhXn0w=
Subject key identifier: 92:8D:C4:D8:08:63:EB:1D:37:8F:12:9C:EB:0A:43:ED:0B:AD:72:DB
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer: /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial: 7F7CFF23F9257CD5090C8D9FFFFC89419D8BD2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number: 045A
Signing time: Sun 01 Mar 2026 11:41:10 +0000
Manifest this update: Sun 01 Mar 2026 11:36:10 +0000
Manifest next update: Mon 02 Mar 2026 13:51:10 +0000
Files and hashes: 1: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: SOoOq6YSAmzQpOIxdVIvpGwx6pGLyhZDJ4+g0qD5gZE=)
2: AS215147.asa (hash: GjsvLtdFoDUTAXomZoavpdPPd8CJuRsD46c0/yYhSME=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7c:ff:23:f9:25:7c:d5:09:0c:8d:9f:ff:fc:89:41:9d:8b:d2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Validity
Not Before: Mar 1 11:36:10 2026 GMT
Not After : Mar 2 13:51:10 2026 GMT
Subject: CN=928DC4D80863EB1D378F129CEB0A43ED0BAD72DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:87:f4:d9:2a:4e:0e:9b:35:0b:6f:a9:24:
68:d4:a8:fd:31:3c:94:92:5b:7e:25:31:88:74:45:
d0:72:42:88:5f:05:e8:b3:b7:30:7a:41:2b:fd:ee:
9e:54:e5:e4:d8:d2:1b:e3:0d:8f:64:c6:57:ce:d8:
ba:42:3f:44:4e:96:3b:0d:42:d5:98:47:a7:a5:1a:
5f:77:5b:de:a7:d8:65:60:e4:85:18:85:04:02:9a:
87:f6:a7:48:3b:ce:73:71:21:17:b2:11:ae:19:d7:
03:ce:9f:b0:1d:2f:ea:df:7e:8d:76:7a:78:d1:cd:
ec:31:33:0a:bc:ea:8d:bb:4b:8d:01:a6:6b:6c:cd:
1f:bc:7a:7c:a2:15:53:dd:37:30:8a:ef:c0:63:1d:
32:aa:7d:58:01:f3:2f:bb:c0:5e:d2:b9:3c:d1:9a:
c8:7f:de:3e:c3:95:0b:0e:9e:90:ba:ef:20:cc:72:
26:2c:7e:46:a2:7d:fc:57:3b:0a:d4:83:c1:4e:06:
06:da:dc:68:60:31:d1:42:15:a7:3d:cf:5e:59:cc:
d0:66:e8:f1:13:22:4c:10:05:0f:f0:93:aa:56:d5:
3c:68:47:17:d7:8d:40:70:00:44:b1:c4:f1:47:a3:
59:7c:10:3e:f3:14:4d:99:d8:31:2b:8b:42:a2:8c:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8D:C4:D8:08:63:EB:1D:37:8F:12:9C:EB:0A:43:ED:0B:AD:72:DB
X509v3 Authority Key Identifier:
keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f6:e3:5a:af:c4:15:6d:08:e6:69:14:be:1e:ad:d7:e7:fb:
83:f9:05:a1:b5:f3:de:79:5a:ee:88:7c:80:08:8c:45:da:7f:
b1:6f:d4:86:29:5f:97:14:d2:b3:07:0b:6a:b9:a3:c9:ab:a6:
5e:01:f4:38:8b:d2:f2:b2:da:63:12:20:b8:97:3d:0d:99:6d:
f2:71:2d:47:35:d3:48:00:1d:82:20:ed:37:50:7f:12:7e:09:
9e:36:a6:8e:34:39:08:b0:12:f7:83:92:c4:eb:27:d9:d0:1e:
69:50:2e:ed:2d:cb:f0:fb:85:67:7e:e7:92:a1:9f:a4:f8:32:
d7:35:a1:23:25:dd:32:e6:17:b3:1d:64:09:2e:f2:c7:6a:dc:
44:b9:fe:54:65:d4:61:04:0e:c2:d1:20:45:44:da:0d:61:73:
b1:4a:f5:72:49:ee:08:5c:b6:45:71:45:45:45:20:1a:af:a3:
82:83:fa:60:68:bf:be:f0:a4:f8:52:02:e2:9f:1a:e6:13:5a:
8f:0a:1b:25:60:59:22:41:80:8d:e7:c1:b1:95:30:27:28:6c:
2c:bc:65:d0:d9:c9:62:31:d6:43:4a:e0:ca:d3:dd:f3:33:5e:
a8:2b:ee:4a:d4:ac:a6:cc:13:a4:f1:9c:1b:cc:ce:f4:75:b0:
59:98:fc:c8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUf3z/I/klfNUJDI2f//yJQZ2L0qAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjNjMDc4ZTE0OWQ5NzQxNDM0ZmQ4ODc3YWI0Y2VkNDZk
YzI3MjBkYTAeFw0yNjAzMDExMTM2MTBaFw0yNjAzMDIxMzUxMTBaMDMxMTAvBgNV
BAMTKDkyOERDNEQ4MDg2M0VCMUQzNzhGMTI5Q0VCMEE0M0VEMEJBRDcyREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpD4f02SpODps1C2+pJGjUqP0x
PJSSW34lMYh0RdByQohfBeiztzB6QSv97p5U5eTY0hvjDY9kxlfO2LpCP0ROljsN
QtWYR6elGl93W96n2GVg5IUYhQQCmof2p0g7znNxIReyEa4Z1wPOn7AdL+rffo12
enjRzewxMwq86o27S40BpmtszR+8enyiFVPdNzCK78BjHTKqfVgB8y+7wF7SuTzR
msh/3j7DlQsOnpC67yDMciYsfkaiffxXOwrUg8FOBgba3GhgMdFCFac9z15ZzNBm
6PETIkwQBQ/wk6pW1TxoRxfXjUBwAESxxPFHo1l8ED7zFE2Z2DEri0KijJInAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUko3E2Ahj6x03jxKc6wpD7QutctswHwYDVR0j
BBgwFoAUs8B44UnZdBQ0/Yh3q0ztRtwnINowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzAvQjNDMDc4RTE0OUQ5NzQxNDM0RkQ4ODc3QUI0Q0VENDZEQzI3MjBEQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M4QjQ0VW5aZEJRMF9ZaDNxMHp0UnR3
bklOby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m
MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMC9CM0MwNzhFMTQ5RDk3NDE0MzRG
RDg4NzdBQjRDRUQ0NkRDMjcyMERBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPbjWq/EFW0I5mkUvh6t
1+f7g/kFobXz3nla7oh8gAiMRdp/sW/UhilflxTSswcLarmjyaumXgH0OIvS8rLa
YxIguJc9DZlt8nEtRzXTSAAdgiDtN1B/En4JnjamjjQ5CLAS94OSxOsn2dAeaVAu
7S3L8PuFZ37nkqGfpPgy1zWhIyXdMuYXsx1kCS7yx2rcRLn+VGXUYQQOwtEgRUTa
DWFzsUr1cknuCFy2RXFFRUUgGq+jgoP6YGi/vvCk+FIC4p8a5hNajwobJWBZIkGA
jefBsZUwJyhsLLxl0NnJYjHWQ0rgytPd8zNeqCvuStSspswTpPGcG8zO9HWwWZj8
yA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:56 2026 by rpki-client