Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
File: E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft (raw, json)
Hash identifier: YGkNgmUiGlyF7ntojc/1XFGWTPyNgmyxrP8zCcLaMTg=
Subject key identifier: E8:81:BB:13:F1:5F:C1:AB:BC:A4:D4:C3:09:1E:C4:A8:42:FE:B0:D4
Authority key identifier: E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95
Certificate issuer: /CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
Certificate serial: 34D79CB407D2204291D9013D19BB9EFEB9DF2786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
Manifest number: 65
Signing time: Sun 01 Mar 2026 13:10:34 +0000
Manifest this update: Sun 01 Mar 2026 13:05:34 +0000
Manifest next update: Mon 02 Mar 2026 14:00:34 +0000
Files and hashes: 1: E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl (hash: h7wMFga8Z7GL6KQ3rLN9sSdJOaPz3jVvZbqS9IVhe7E=)
2: AS214976.asa (hash: v5lBSdK131Etk8q/qrO2YWGrpYrwgCaCsAichEGY55Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d7:9c:b4:07:d2:20:42:91:d9:01:3d:19:bb:9e:fe:b9:df:27:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
Validity
Not Before: Mar 1 13:05:34 2026 GMT
Not After : Mar 2 14:00:34 2026 GMT
Subject: CN=E881BB13F15FC1ABBCA4D4C3091EC4A842FEB0D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:86:cd:a2:41:fc:73:5c:48:be:80:3b:ef:6d:
c1:9a:2e:4a:a9:bc:d5:f5:b4:b7:f9:05:7a:9b:61:
64:74:4e:a7:f9:45:50:a4:37:b5:93:00:f8:5b:a1:
05:e5:95:d4:34:3e:fe:9f:ba:5d:e7:d5:ce:72:d5:
51:b9:85:bd:d2:63:2d:20:b1:00:bc:1f:c8:ee:4d:
f5:95:7e:f5:66:f9:e7:59:02:80:6a:a9:c8:17:f7:
b9:ab:7e:35:24:a8:45:4a:1a:6d:f1:61:d2:d4:ed:
99:36:ea:05:68:77:9f:96:d2:cb:02:2f:7d:b0:69:
0e:5a:a6:30:42:b8:39:1e:2d:de:78:7c:8b:27:6b:
2c:7b:fc:9d:73:59:cd:d8:9c:a5:1f:be:83:75:3d:
35:1b:d5:33:b5:a8:2a:b4:7b:da:ed:36:54:08:7e:
44:d0:6b:40:a2:c5:1c:3f:5e:a2:8f:ff:e0:57:68:
8a:ea:e0:d8:63:c1:4b:23:0c:1c:5f:ab:6c:17:9b:
22:5e:2d:8a:51:a0:77:d1:32:87:09:28:50:96:a6:
4b:5b:37:8a:d5:ed:43:5c:a2:e9:02:6a:91:fd:ee:
dc:f7:40:3d:4a:35:fa:63:27:ea:fa:ac:aa:fe:c9:
98:5a:20:2f:58:96:02:f1:2a:59:ab:65:32:0a:d5:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:81:BB:13:F1:5F:C1:AB:BC:A4:D4:C3:09:1E:C4:A8:42:FE:B0:D4
X509v3 Authority Key Identifier:
keyid:E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:79:f4:4b:05:fd:b0:e1:86:38:b3:50:09:14:4e:35:49:62:
9f:05:f3:ae:07:5c:f8:e1:3d:d8:b3:59:e3:06:b9:29:40:97:
56:a6:fb:da:92:bc:0c:98:25:10:d4:34:ae:81:ee:f6:88:50:
53:a8:f3:35:bb:53:cb:bb:78:88:4f:52:ec:37:65:25:2a:13:
14:42:b8:e4:92:1a:13:ef:ae:2a:0c:85:f3:54:c3:cb:8b:e6:
bf:d6:78:b7:4c:0c:85:e7:a6:61:01:61:99:cb:5b:82:9e:ce:
26:af:42:80:98:24:76:6a:09:8c:de:00:60:6c:a8:b9:17:a0:
d0:70:6f:3c:e0:06:a5:5f:4c:fd:49:05:c4:e1:f2:b9:98:be:
bb:19:1f:85:b9:38:9b:d3:8e:b0:24:ca:cc:ff:8a:98:e5:d4:
2a:aa:fc:95:e1:a2:cc:bb:37:63:ba:67:a4:3c:e7:da:c4:6e:
b3:55:ca:4f:30:7e:61:6f:20:bb:a1:95:ed:f9:9f:d0:46:20:
a3:45:c8:b7:2c:97:c6:b6:dc:e9:c2:04:6a:87:5a:d7:0c:6e:
c4:00:25:60:5e:c8:cd:2b:1c:08:db:81:02:bf:47:d0:7c:17:
bf:f3:a5:1d:fc:b1:5d:26:8e:bd:02:a4:29:21:03:94:f1:d7:
4b:d9:6e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:47 2026 by rpki-client