Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
File: EC342ADD81633658330112D2BF8B1DE3EE19F684.mft (raw, json)
Hash identifier: 02aV211pos2oS89exCXC3S982AEOPvRSqN445rxApYY=
Subject key identifier: E4:99:B9:BA:0B:BD:F4:92:BD:3C:4C:73:9E:29:F0:AE:F2:83:8D:FF
Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
Certificate issuer: /CN=ec342add81633658330112d2bf8b1de3ee19f684
Certificate serial: 2B2A2F946FB437705CE87B7E1D73D9BCE1495352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
Manifest number: 3E
Signing time: Sun 01 Mar 2026 00:49:00 +0000
Manifest this update: Sun 01 Mar 2026 00:44:00 +0000
Manifest next update: Mon 02 Mar 2026 03:13:00 +0000
Files and hashes: 1: EC342ADD81633658330112D2BF8B1DE3EE19F684.crl (hash: 1YvONKKMfxOFL6anYbJXn99kt6FJASNRH1l+3KLgLew=)
2: AS214420.asa (hash: MczXavcoFqrsha9L+Hh49riliuuFNzDzJSVv7yMgKN0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 03:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:2a:2f:94:6f:b4:37:70:5c:e8:7b:7e:1d:73:d9:bc:e1:49:53:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684
Validity
Not Before: Mar 1 00:44:00 2026 GMT
Not After : Mar 2 03:13:00 2026 GMT
Subject: CN=E499B9BA0BBDF492BD3C4C739E29F0AEF2838DFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:8a:98:70:c2:0a:9f:54:ae:2d:71:3b:12:
97:b3:9b:5d:f1:cd:92:79:4e:45:82:e1:e6:1a:cc:
0e:84:74:fb:98:33:af:e4:c4:39:78:62:94:0e:1d:
ca:0b:3c:46:d1:c9:7c:28:71:e6:39:a6:c3:a9:18:
cf:88:77:2b:1d:81:b6:99:a0:02:e0:00:06:37:c1:
de:52:65:9a:67:23:91:a9:ac:d4:d7:2a:d0:1a:84:
79:ce:e7:91:25:0c:86:61:4f:09:9f:b2:94:4c:f9:
87:28:fd:0a:a4:ff:de:0b:6b:d0:ad:cc:c2:68:f0:
ee:8c:dc:a0:85:6f:5b:44:fc:df:6e:25:57:50:ea:
1b:de:af:de:a3:9a:74:0c:08:18:83:21:08:e6:ed:
9d:7e:94:60:13:65:eb:ee:88:3d:85:85:2a:6c:21:
9d:b2:18:75:78:33:dd:52:c9:b9:38:0d:51:d6:d2:
7a:6e:fc:be:30:dc:e3:18:4c:e5:77:12:95:2b:c8:
98:cb:08:d8:48:d3:96:bd:bd:ef:05:07:3c:65:53:
bb:aa:6a:ca:f9:60:ab:c6:5d:16:b4:ac:09:c6:c5:
08:08:9c:9c:7e:b4:70:e8:a7:f9:cb:99:7a:6f:62:
63:1f:32:67:da:5b:d0:26:5f:40:db:81:ab:b8:43:
76:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:99:B9:BA:0B:BD:F4:92:BD:3C:4C:73:9E:29:F0:AE:F2:83:8D:FF
X509v3 Authority Key Identifier:
keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c0:ee:ec:9b:41:c2:a4:65:22:b4:10:d2:f8:52:91:cd:9b:
3a:ad:ff:a3:8d:c6:3b:98:00:fc:b0:d6:b3:4c:29:e6:f9:83:
89:00:23:03:75:fb:4f:72:58:af:46:97:5d:19:17:16:e5:7f:
ae:c3:d6:e7:99:5a:7b:a7:96:72:d6:26:f0:f2:31:cf:b1:db:
16:07:18:f9:73:06:4b:b0:80:6c:6b:73:bc:3f:a9:74:ca:f6:
15:34:27:2f:d6:a0:9b:c1:99:7f:23:25:59:44:af:50:4a:86:
ed:8c:6e:2c:67:c5:5d:03:ce:1e:88:5f:15:e6:35:6f:1e:06:
66:f9:4f:01:75:0f:ac:fd:67:00:76:ae:7e:d3:22:45:2a:a5:
64:49:19:18:23:d1:3b:59:f2:01:ad:4d:a0:43:a5:a7:c2:4f:
58:04:96:8e:bd:60:b9:68:7f:25:e4:9b:42:15:81:6f:77:33:
97:6c:a4:94:28:a4:7b:58:85:2e:2d:c7:38:a6:03:1b:36:72:
74:a2:0e:8c:a0:38:28:d5:d3:28:46:eb:31:9f:fa:4f:d9:5c:
da:24:cd:f8:11:56:0c:89:84:b3:96:5c:5b:ec:58:e4:5e:0b:
9f:f6:17:e3:38:03:cf:37:a3:a7:9f:f9:87:5c:4e:d5:46:3e:
6c:2b:0c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:43 2026 by rpki-client