Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
File: EC342ADD81633658330112D2BF8B1DE3EE19F684.mft (raw, json)
Hash identifier: 4iCWjKs3NDJXQYnzkGtAMEaIJiBiUY9tBB9D1E1YJYM=
Subject key identifier: D8:83:DB:71:F5:D6:E2:BE:DC:1C:94:E4:0A:A8:2A:90:41:F5:7D:4B
Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
Certificate issuer: /CN=ec342add81633658330112d2bf8b1de3ee19f684
Certificate serial: 68955AB1BE76C4BD167FE7C95C724CB765821CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
Manifest number: C9
Signing time: Fri 12 Jun 2026 14:05:41 +0000
Manifest this update: Fri 12 Jun 2026 14:00:41 +0000
Manifest next update: Sat 13 Jun 2026 17:59:41 +0000
Files and hashes: 1: AS214420.asa (hash: rBhnv0fmIQ5QImIxVDZoRShVH2YY2qokZq71xdb7POM=)
2: EC342ADD81633658330112D2BF8B1DE3EE19F684.crl (hash: Ram47nuhbfKWQghWTpUFc5kaNgkgee5lqwH8D5sWHkk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:95:5a:b1:be:76:c4:bd:16:7f:e7:c9:5c:72:4c:b7:65:82:1c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684
Validity
Not Before: Jun 12 14:00:41 2026 GMT
Not After : Jun 13 17:59:41 2026 GMT
Subject: CN=D883DB71F5D6E2BEDC1C94E40AA82A9041F57D4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:54:b1:66:8d:d6:5f:b5:2f:7d:2c:ab:5c:
23:e0:c4:88:a5:1c:64:40:f7:72:29:e2:79:0d:cb:
81:eb:21:01:b0:2a:e2:5c:9d:2f:c8:e1:e9:8d:6c:
ac:ad:8d:2a:5b:c7:08:51:a0:fc:01:7c:08:ba:ac:
d0:25:be:9d:2f:a6:e2:0f:ef:34:36:2c:17:cc:ae:
bf:19:57:a3:ec:08:13:05:1f:57:d2:53:25:20:20:
81:f7:92:16:1d:60:72:49:05:0a:89:51:5c:39:76:
84:f3:11:84:4a:be:53:f6:de:66:62:28:4d:09:d1:
ba:a3:16:cb:bb:58:10:48:69:bb:55:17:c3:94:08:
ac:64:35:57:5d:cc:bf:93:98:45:78:ed:64:2e:3e:
40:1c:1c:70:c8:f4:2b:75:62:66:62:36:21:cb:e9:
de:51:ef:f2:4a:c5:66:b6:f0:1d:ef:d5:e2:8f:85:
ea:18:d6:d6:de:ac:62:30:6a:a4:f4:88:34:6e:e4:
72:2a:4c:41:74:51:b9:9f:3c:06:d9:63:0f:cc:2b:
94:28:ab:69:4b:8a:9a:c6:e8:23:db:fa:cb:0c:65:
72:50:e6:f3:51:70:18:0b:6c:3f:b5:6d:fe:b1:3e:
49:f6:d8:a6:46:41:b3:10:e5:1b:14:24:90:b4:53:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:83:DB:71:F5:D6:E2:BE:DC:1C:94:E4:0A:A8:2A:90:41:F5:7D:4B
X509v3 Authority Key Identifier:
keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f7:9d:2a:04:ac:db:35:68:4f:58:21:be:f7:ab:48:f8:fd:
d2:36:c8:93:96:9a:49:2a:04:86:40:cd:22:bf:f8:3e:a5:52:
07:a6:82:5f:b1:16:43:02:9c:6f:a1:74:c4:a9:f8:69:9b:e4:
96:f3:73:72:41:b2:2e:d7:f6:4c:7a:48:ac:d1:96:59:81:ba:
89:48:29:09:19:4f:46:35:a9:5d:9e:10:1a:6d:1c:16:95:b5:
d2:43:e8:19:9c:cb:ad:05:15:88:22:24:d8:a2:40:16:e4:68:
51:c4:e3:7c:d3:11:d7:d4:0c:89:dd:b1:f0:d4:bb:4d:06:17:
94:df:30:0b:f7:ad:22:04:39:15:7e:f8:f7:e3:14:31:11:90:
86:0a:a6:51:cc:27:6b:29:bb:7a:82:75:d2:71:98:59:9d:12:
67:5a:fd:7a:3d:a1:38:72:b9:db:46:10:d5:3d:cf:1c:02:fc:
42:6e:15:80:c0:b7:b9:05:1f:4c:a1:7a:98:61:01:23:c0:70:
f8:94:23:6b:cf:34:b3:df:e8:b0:49:99:bc:56:13:19:09:cf:
44:b5:59:d3:18:04:7a:1d:0d:80:17:02:01:af:48:56:61:75:
65:49:ba:0a:35:b0:81:3f:0b:d8:5e:f6:99:f3:48:0c:fa:62:
0e:c0:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:03 2026 by rpki-client