
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier: Py8Y+Nh7F8Jm+WMihshdKDhuxKQEr8bXNJHHu5eryvY=
Subject key identifier: 86:67:1F:70:63:EE:56:27:2B:37:6C:3D:54:9B:D9:C9:92:94:32:77
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial: 3128EFAE719ACE13DEA23BCC59D786B719F27150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number: 05A7
Signing time: Fri 17 Apr 2026 07:57:13 +0000
Manifest this update: Fri 17 Apr 2026 07:52:13 +0000
Manifest next update: Sat 18 Apr 2026 10:25:13 +0000
Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: fFGE4ZZX3SP7pkdKYL9OJNW1iuDQz8Y2WUolUptcvCA=)
2: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:28:ef:ae:71:9a:ce:13:de:a2:3b:cc:59:d7:86:b7:19:f2:71:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Validity
Not Before: Apr 17 07:52:13 2026 GMT
Not After : Apr 18 10:25:13 2026 GMT
Subject: CN=86671F7063EE56272B376C3D549BD9C992943277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:4f:07:1c:ef:a3:36:9e:c6:1e:2b:40:ba:
a0:1e:5f:77:b7:1b:9d:b5:de:06:03:dc:80:61:03:
ba:c7:a7:79:41:5b:4a:ff:85:b5:87:33:eb:54:87:
db:77:db:86:8e:b1:79:b0:5f:c6:b0:56:44:98:b0:
db:05:77:aa:92:ff:be:d4:f9:54:60:d1:ef:38:a5:
d4:08:98:86:fe:db:b5:a3:23:7a:d0:a0:f8:85:c1:
9f:91:4e:7c:22:02:a7:0a:38:54:4f:7a:fe:de:43:
0d:58:66:3b:67:37:21:b1:42:93:c4:9a:4a:f3:a1:
9e:99:7a:50:17:ba:c3:fd:8a:51:6d:b3:28:b6:11:
e2:39:5b:aa:e3:a4:07:53:f8:79:6e:dd:58:00:55:
1b:33:30:62:a0:69:38:d0:4a:fb:28:df:5a:35:2e:
89:4f:be:bc:42:f0:8f:33:db:86:5e:33:7d:d1:57:
0c:c5:7e:28:1f:eb:a6:cf:bd:30:fb:e5:ec:b9:0d:
05:4c:62:b4:e1:d3:27:da:53:ca:13:44:64:d4:13:
ae:d9:f9:21:46:dc:9b:dd:eb:35:ee:b8:db:94:5b:
97:ad:a3:ac:4e:95:c8:13:1d:cf:0a:b7:be:88:3e:
f6:51:3c:63:6a:4b:13:4a:81:b5:9c:ff:e5:72:c1:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:67:1F:70:63:EE:56:27:2B:37:6C:3D:54:9B:D9:C9:92:94:32:77
X509v3 Authority Key Identifier:
keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:82:58:a4:c1:19:31:74:45:66:c8:a8:92:e3:5b:59:53:d9:
6b:36:94:1b:c2:1c:d2:16:d7:01:3b:c6:55:39:97:54:70:b0:
41:7e:5c:8a:c1:e6:48:7e:f1:eb:71:5a:c1:cb:2b:27:07:9c:
50:ac:7c:16:19:b0:d2:7b:e1:a8:c2:14:c6:c9:6c:66:a6:58:
54:3a:29:c9:b2:ca:6a:ff:56:46:aa:bb:23:36:8d:d4:a6:14:
f6:5e:b5:d0:e1:0c:2d:2e:2a:d7:ab:6f:36:80:3c:8a:b4:48:
e7:9a:3a:24:cd:07:b3:4d:05:4a:8e:2c:c3:d6:6f:24:b3:c6:
f7:3b:32:ed:70:6f:a9:44:dc:fa:a9:42:1b:d8:5d:65:52:d5:
22:8d:df:14:6b:2d:f1:8e:56:bc:97:60:5c:64:34:5f:92:85:
41:70:b4:eb:2b:9a:45:94:77:cb:aa:12:f2:3b:a0:dc:a4:a6:
4e:0d:6c:8f:76:4f:2b:f9:c8:df:b0:e8:33:29:79:9b:3a:46:
88:73:d0:4f:31:93:99:57:b7:3d:eb:69:31:c1:1c:bd:35:8d:
e1:1f:68:e1:f2:04:e9:f3:bb:c0:dc:e9:55:0a:01:d8:4f:3e:
dc:f8:9e:a0:51:4c:fb:68:9f:bb:4f:03:3a:ac:52:cf:43:f8:
03:71:81:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:04 2026 by rpki-client