
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: 7IT6kuHWIZSv/I54iwY4qEH8zOTevhQZjWlm5NNQnlw=
Subject key identifier: F0:12:78:C2:40:82:97:23:8A:AF:9F:49:B4:90:6F:B5:9A:E1:DD:97
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 6C7169C36319D50F4C806AA26C443BC9CECAA0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 05E7
Signing time: Thu 04 Jun 2026 17:08:38 +0000
Manifest this update: Thu 04 Jun 2026 17:03:38 +0000
Manifest next update: Fri 05 Jun 2026 19:19:38 +0000
Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: 6bC+I4YAUHjt+X0JNywy5jbZo3JnFah0PEqnd1Rsfbg=)
2: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:71:69:c3:63:19:d5:0f:4c:80:6a:a2:6c:44:3b:c9:ce:ca:a0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: Jun 4 17:03:38 2026 GMT
Not After : Jun 5 19:19:38 2026 GMT
Subject: CN=F01278C2408297238AAF9F49B4906FB59AE1DD97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:f8:9e:25:cb:e8:db:dd:10:4e:d9:f5:c8:
e3:a0:12:cf:36:26:31:34:c9:3b:c6:12:05:24:fc:
83:c8:97:a7:41:ad:14:d4:44:1b:63:f7:b2:5b:44:
31:c7:55:7f:14:d4:e7:12:89:0a:d1:0e:ad:93:2b:
fb:66:73:7f:c5:f9:6a:79:40:3a:b4:0a:84:a1:e9:
59:c7:9a:bf:51:90:b8:48:bf:de:c0:57:41:9b:8e:
52:a7:42:8f:66:a7:09:d5:a4:f2:b9:56:69:ee:68:
aa:ff:de:49:c3:ca:68:89:b3:c2:3e:f0:cc:5c:3b:
98:c2:b7:b1:d4:81:6b:62:7b:75:a5:65:d9:ab:4f:
40:7b:0f:3a:39:62:f8:ff:0b:7e:52:f0:5f:cf:d5:
b0:45:0c:f3:bc:95:b6:ed:36:b0:5f:77:71:c0:af:
d6:8d:9c:03:aa:18:85:1b:dc:e8:61:dd:8f:fa:3f:
e4:d1:dc:ea:6a:dc:96:7f:a6:f9:30:0d:f7:a5:d2:
fc:d4:15:60:30:b6:e3:b4:50:94:5d:90:29:ca:86:
f0:4d:96:de:fb:b4:ab:5e:10:4c:30:b8:c7:b3:2d:
a5:9a:31:b2:37:dd:9c:ea:5b:2b:33:4f:ed:a9:24:
b5:97:74:d6:7b:72:ae:b5:0c:da:a5:7b:fd:21:f5:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:78:C2:40:82:97:23:8A:AF:9F:49:B4:90:6F:B5:9A:E1:DD:97
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ef:ec:a7:c8:70:d2:38:90:65:7f:c2:14:83:c9:6f:03:99:
50:aa:c3:85:25:2a:51:fc:80:1d:40:79:c8:52:4d:7e:70:c4:
e5:fe:a5:98:81:c1:c1:de:d8:29:b0:a0:29:0c:7e:01:fc:1a:
45:6d:fe:76:e3:bc:53:f5:2f:df:40:c3:49:c5:dd:90:c9:13:
4d:c8:a5:c1:67:9d:a3:3f:db:6c:2b:11:f0:ac:22:0f:eb:14:
18:fd:eb:bd:46:17:d8:ec:09:bb:ac:dd:90:f7:13:40:2d:60:
45:0d:c1:d6:11:a9:dd:a6:54:6b:0b:84:06:a1:72:d4:d7:e9:
dc:d4:a8:f1:d6:d7:ac:d6:18:d4:ca:38:4a:06:b1:e3:ec:23:
9e:55:62:bb:71:ba:8a:08:c9:58:4a:0b:bf:24:e2:2a:46:97:
3b:28:c2:36:a5:7d:6d:63:ad:22:ef:8b:3f:4b:a7:f6:35:5f:
bf:94:2b:35:50:b0:d0:ee:a1:34:a5:ab:6b:c8:19:b6:41:08:
72:89:78:8a:c8:89:2d:fa:2a:86:6d:b2:5b:fe:89:f9:52:85:
7e:88:f0:85:fe:97:dc:dd:4a:bb:33:36:f8:0a:7a:25:cb:c5:
59:35:e4:1b:3f:82:f8:b9:1e:1d:47:59:f9:97:e5:b8:d1:55:
b2:6d:d7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:39:04 2026 by rpki-client