Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
File: EC342ADD81633658330112D2BF8B1DE3EE19F684.mft (raw, json)
Hash identifier: pX256cBWYMwBIFW3EpEYpxlcTuJpJ5itwiSl9vS29CU=
Subject key identifier: CE:57:BE:40:2D:6C:BC:00:62:38:AE:A3:78:77:27:4A:0E:AF:91:51
Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
Certificate issuer: /CN=ec342add81633658330112d2bf8b1de3ee19f684
Certificate serial: 4929AEB3C2F578C61B4FC0E34F813EBB3847C144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
Manifest number: CA
Signing time: Sat 13 Jun 2026 10:00:41 +0000
Manifest this update: Sat 13 Jun 2026 09:55:41 +0000
Manifest next update: Sun 14 Jun 2026 12:24:41 +0000
Files and hashes: 1: EC342ADD81633658330112D2BF8B1DE3EE19F684.crl (hash: ugs9FomproVF882sTTObA0kC26O2SDx2HJ9bpbVkRT0=)
2: AS214420.asa (hash: rBhnv0fmIQ5QImIxVDZoRShVH2YY2qokZq71xdb7POM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:29:ae:b3:c2:f5:78:c6:1b:4f:c0:e3:4f:81:3e:bb:38:47:c1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684
Validity
Not Before: Jun 13 09:55:41 2026 GMT
Not After : Jun 14 12:24:41 2026 GMT
Subject: CN=CE57BE402D6CBC006238AEA37877274A0EAF9151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:42:bc:48:a6:c7:b0:58:a1:d2:19:8c:d0:
69:32:ba:db:78:90:4a:45:c0:3a:82:5b:95:f5:88:
d7:f7:83:8a:08:b8:e5:6f:9d:78:d3:14:76:46:7e:
84:40:7b:55:4d:02:cf:41:e6:0a:94:a6:3d:0a:32:
e5:04:ba:4b:dd:25:21:1d:79:ea:4e:50:6a:0f:7b:
2f:ea:ff:75:36:fe:b8:e7:69:23:2f:01:16:66:d8:
48:dc:c9:02:92:be:42:b7:82:4f:59:fc:65:7c:4f:
ad:3d:7e:ca:2e:71:16:24:b3:39:4e:82:30:93:11:
cc:6e:2a:b1:54:55:7c:7a:e3:66:e5:e8:c3:ce:60:
24:f1:c3:a0:a0:ad:2b:e4:8b:b4:7d:ca:ea:97:3c:
47:c4:66:e0:7c:fd:e3:ba:02:33:e4:a8:7d:9c:66:
6b:a2:bd:be:d2:4e:ff:99:8c:46:7b:0d:90:b8:a3:
6f:63:bd:84:14:77:fb:5b:85:c6:04:54:58:35:3a:
7d:fb:c4:45:d5:23:b1:a8:6d:07:66:b5:cb:6a:6e:
41:d2:a3:fe:06:9d:a2:8a:90:61:18:17:18:01:f6:
10:4b:b3:a5:cf:e8:f6:9d:a5:b6:f9:2c:88:f2:fb:
12:01:6e:aa:85:9f:ac:3b:71:5d:08:da:d5:91:a9:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:57:BE:40:2D:6C:BC:00:62:38:AE:A3:78:77:27:4A:0E:AF:91:51
X509v3 Authority Key Identifier:
keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:aa:a4:25:f5:6f:c3:ba:5a:dc:21:72:64:d6:42:e5:47:0a:
9f:51:21:e7:a7:1b:3d:17:3b:63:c6:1f:d0:11:55:8e:56:18:
3c:ca:43:6b:69:e6:4d:bf:cd:05:c1:b9:54:97:e5:94:ad:af:
a4:75:53:91:1a:85:21:9d:a3:1d:42:74:64:38:11:81:9e:e8:
4b:c3:fa:3d:c7:2b:93:eb:31:7e:1d:bb:85:29:8d:7f:c6:49:
4d:93:01:1e:d3:3d:af:31:a1:e0:16:40:bb:e7:ed:23:67:3c:
e7:7d:2f:22:3c:73:fe:77:8e:8c:26:f7:0e:06:5f:27:98:25:
dd:80:1b:c7:fe:c9:5a:fa:52:58:aa:eb:98:0c:9b:bf:fd:19:
bf:7c:14:43:f9:8a:fc:eb:9b:5a:42:f7:dd:5c:73:9a:2a:51:
a7:6b:41:67:81:81:08:22:b1:75:b8:41:3c:54:c7:29:05:34:
32:76:eb:22:7f:61:a2:43:e3:b3:22:3d:f1:a7:2d:51:b3:be:
76:c2:8b:53:d8:3e:79:f9:07:08:52:46:05:ab:39:63:d8:52:
5a:1f:23:3e:9f:7b:f4:d9:7a:00:24:22:26:45:9f:ae:ce:6f:
3e:39:84:da:c3:7b:0a:fd:d5:c5:bf:57:fe:98:26:fc:08:1e:
fb:ee:f3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:30:05 2026 by rpki-client