Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
File: EC342ADD81633658330112D2BF8B1DE3EE19F684.mft (raw, json)
Hash identifier: /TA5cw6hUCVMSqaNTPxddHsTgRzjk6Tu5giOAQceWNU=
Subject key identifier: 8E:34:09:70:49:7F:C2:CF:10:F7:58:88:1D:BE:9D:63:78:CA:A0:CC
Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
Certificate issuer: /CN=ec342add81633658330112d2bf8b1de3ee19f684
Certificate serial: 25CED97D3B007C807C4BE3151CFA62191C6A0B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
Manifest number: 7F
Signing time: Fri 17 Apr 2026 15:38:59 +0000
Manifest this update: Fri 17 Apr 2026 15:33:59 +0000
Manifest next update: Sat 18 Apr 2026 16:29:59 +0000
Files and hashes: 1: AS214420.asa (hash: rBhnv0fmIQ5QImIxVDZoRShVH2YY2qokZq71xdb7POM=)
2: EC342ADD81633658330112D2BF8B1DE3EE19F684.crl (hash: Uo/ZHNArjkcILu3mQVSsHmigchMtJL2iwmToLZNxX6U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ce:d9:7d:3b:00:7c:80:7c:4b:e3:15:1c:fa:62:19:1c:6a:0b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684
Validity
Not Before: Apr 17 15:33:59 2026 GMT
Not After : Apr 18 16:29:59 2026 GMT
Subject: CN=8E340970497FC2CF10F758881DBE9D6378CAA0CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:f2:6e:2a:48:f0:59:b4:80:64:b5:a4:67:
f5:65:9e:a3:84:7f:6d:a9:27:7d:ed:e8:e2:bc:1d:
a1:3b:4b:a3:d8:af:9d:72:51:04:52:6f:c3:a7:1b:
05:23:3f:83:7f:4f:2e:44:85:db:b8:0e:70:16:eb:
c3:79:85:8e:22:9a:23:ef:b3:c8:26:81:51:6c:53:
44:82:4a:54:25:2d:78:f4:12:2b:2c:98:23:79:5f:
f9:22:b0:6d:dd:c3:12:42:b8:ba:9f:55:e1:70:f6:
de:0b:9a:b2:3a:ae:bf:f5:b8:54:6a:84:b1:b7:b9:
35:58:9a:1e:1a:2e:30:fd:59:8b:ef:26:57:48:7f:
f4:ff:e3:d5:be:88:ff:2b:b0:8b:0b:9a:11:63:0d:
d4:fb:c6:14:1a:8d:fe:42:aa:c6:09:59:1b:ac:b5:
9d:77:9b:56:20:58:cb:3f:0b:06:4d:7d:71:01:de:
3b:8e:54:93:0c:d7:8d:3a:0f:72:ac:c6:61:09:0f:
fb:04:88:72:ec:8e:02:cd:bb:9e:fe:4e:e2:37:3a:
a7:f1:fe:39:3b:02:07:a2:af:26:fd:71:7f:5e:59:
05:4b:04:f8:e0:b4:f3:47:7d:c8:7f:0a:ef:25:10:
8c:40:b9:ea:42:10:f6:fd:31:cb:fb:36:00:2b:c2:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:34:09:70:49:7F:C2:CF:10:F7:58:88:1D:BE:9D:63:78:CA:A0:CC
X509v3 Authority Key Identifier:
keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ad:19:f9:07:e5:3f:7d:b6:56:a1:ba:ff:9d:7e:65:16:fc:
18:23:95:14:26:a4:15:7f:16:48:0e:a9:b3:de:75:0e:48:1c:
19:ca:bb:77:31:c3:94:4c:78:91:72:3d:1a:49:32:11:6e:a8:
a8:10:20:7c:b1:aa:db:56:d3:c9:93:28:8e:1e:55:0e:a1:a6:
ac:67:77:36:82:e1:90:75:b0:16:d1:4b:33:97:8d:9f:bf:5d:
cc:e9:34:fc:c1:1a:47:7a:6d:41:2e:b3:54:80:2e:22:da:0f:
54:16:8d:b0:70:41:a0:4f:ce:f2:87:ac:f4:4b:09:65:fa:19:
03:54:9a:10:5e:df:b3:1a:69:0e:92:ef:67:39:4e:e0:1c:4a:
9a:0b:c8:91:cd:5f:31:65:b1:3d:6c:fd:92:f2:53:67:4a:29:
b7:4a:e6:1f:3c:da:de:e8:b0:a8:f2:00:8f:08:2d:ca:a4:a8:
15:ed:de:a6:35:e6:26:af:ac:4b:56:4d:c9:11:9c:89:50:08:
08:0a:6d:67:a8:12:b5:9d:8d:ac:84:c0:77:08:87:ef:30:d1:
99:43:13:ce:df:7b:2f:eb:e5:79:78:be:81:05:2b:02:52:35:
90:ec:b8:19:dc:17:9a:53:5d:91:2d:1f:df:e2:72:d4:26:bd:
d1:f3:18:4b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJc7ZfTsAfIB8S+MVHPpiGRxqC44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWMzNDJhZGQ4MTYzMzY1ODMzMDExMmQyYmY4YjFkZTNl
ZTE5ZjY4NDAeFw0yNjA0MTcxNTMzNTlaFw0yNjA0MTgxNjI5NTlaMDMxMTAvBgNV
BAMTKDhFMzQwOTcwNDk3RkMyQ0YxMEY3NTg4ODFEQkU5RDYzNzhDQUEwQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxvJuKkjwWbSAZLWkZ/VlnqOE
f22pJ33t6OK8HaE7S6PYr51yUQRSb8OnGwUjP4N/Ty5Ehdu4DnAW68N5hY4imiPv
s8gmgVFsU0SCSlQlLXj0EissmCN5X/kisG3dwxJCuLqfVeFw9t4LmrI6rr/1uFRq
hLG3uTVYmh4aLjD9WYvvJldIf/T/49W+iP8rsIsLmhFjDdT7xhQajf5CqsYJWRus
tZ13m1YgWMs/CwZNfXEB3juOVJMM1406D3KsxmEJD/sEiHLsjgLNu57+TuI3Oqfx
/jk7Ageiryb9cX9eWQVLBPjgtPNHfch/Cu8lEIxAuepCEPb9Mcv7NgArwiVdAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUjjQJcEl/ws8Q91iIHb6dY3jKoMwwHwYDVR0j
BBgwFoAU7DQq3YFjNlgzARLSv4sd4+4Z9oQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI3YjVlZjctZDEyMS00YWUyLWJhYjYtNDEwZDIwNTM0
OWI4LzAvRUMzNDJBREQ4MTYzMzY1ODMzMDExMkQyQkY4QjFERTNFRTE5RjY4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdEUXEzWUZqTmxnekFSTFN2NHNkNC00
WjlvUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjdiNWVmNy1k
MTIxLTRhZTItYmFiNi00MTBkMjA1MzQ5YjgvMC9FQzM0MkFERDgxNjMzNjU4MzMw
MTEyRDJCRjhCMURFM0VFMTlGNjg0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnq0Z+QflP322VqG6/51+
ZRb8GCOVFCakFX8WSA6ps951DkgcGcq7dzHDlEx4kXI9GkkyEW6oqBAgfLGq21bT
yZMojh5VDqGmrGd3NoLhkHWwFtFLM5eNn79dzOk0/MEaR3ptQS6zVIAuItoPVBaN
sHBBoE/O8oes9EsJZfoZA1SaEF7fsxppDpLvZzlO4BxKmgvIkc1fMWWxPWz9kvJT
Z0opt0rmHzza3uiwqPIAjwgtyqSoFe3epjXmJq+sS1ZNyRGciVAICAptZ6gStZ2N
rITAdwiH7zDRmUMTzt97L+vleXi+gQUrAlI1kOy4GdwXmlNdkS0f3+Jy1Ca90fMY
Sw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:58 2026 by rpki-client