Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier: jaWNHXdtd2BJwrW7Xr2QP4hK+d6bM5EhRoIIaHM7bus=
Subject key identifier: A9:DD:C1:9B:C5:95:A1:D9:77:31:C5:93:16:99:F4:11:BF:3D:6C:52
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer: /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial: 12983E41A93AA5BB2C04184C21C9A6EC785F7760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number: 0344
Signing time: Fri 17 Apr 2026 07:35:39 +0000
Manifest this update: Fri 17 Apr 2026 07:30:39 +0000
Manifest next update: Sun 19 Apr 2026 08:01:39 +0000
Files and hashes: 1: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: MiZmMhMi0XAthmvCmlam+ti/BQs6U/nHDYgaarH4hoI=)
2: AS215368.asa (hash: WPjfLrYhLr3BbA/Kt1sBzS/Meq/kNQBVQgd3rtboPnI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:98:3e:41:a9:3a:a5:bb:2c:04:18:4c:21:c9:a6:ec:78:5f:77:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Validity
Not Before: Apr 17 07:30:39 2026 GMT
Not After : Apr 19 08:01:39 2026 GMT
Subject: CN=A9DDC19BC595A1D97731C5931699F411BF3D6C52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:22:49:07:14:00:68:40:2b:16:c8:a4:06:
f0:bf:51:a3:b0:5f:4b:d7:c7:5c:dc:41:b1:d6:7e:
db:6a:37:d9:fa:2d:8c:c7:bd:56:95:70:42:35:1a:
8e:3f:e3:26:40:68:43:7c:8d:d5:8a:77:ae:09:0d:
21:2e:e8:76:aa:b4:e5:57:b7:82:63:7b:27:52:78:
28:79:c2:c6:4a:40:e8:08:3c:5d:a4:4a:3e:20:42:
fa:71:03:ff:94:93:14:32:4e:cf:a1:84:fc:58:09:
8a:9f:0c:40:65:db:87:f6:90:af:3d:29:d9:a4:67:
d4:d1:8f:1a:da:ae:6b:6a:fd:3d:f8:d1:d4:e0:99:
19:a8:b2:a5:38:29:cd:1c:87:c1:5a:51:7c:31:7e:
e3:24:23:fa:b0:d6:cf:27:fe:0c:3c:a6:4c:7d:13:
82:9f:89:c0:45:61:0e:a0:1d:ec:bd:df:4b:f3:e2:
e4:d2:ca:a7:8b:8e:93:bd:88:c8:f8:c8:2e:cf:27:
3f:79:f0:dd:7a:7a:d9:21:b3:18:fc:d6:e5:41:2a:
d0:36:80:3b:86:1c:3f:cb:61:1b:28:12:39:70:64:
cb:bb:e2:9e:58:fb:19:a3:fe:8a:2e:0c:e9:13:4f:
a3:18:e9:a1:7c:44:0b:8b:d2:f0:9b:a0:a5:a7:ec:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DD:C1:9B:C5:95:A1:D9:77:31:C5:93:16:99:F4:11:BF:3D:6C:52
X509v3 Authority Key Identifier:
keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:25:dc:fd:4e:e6:c2:a1:dd:2c:34:12:52:c6:04:69:ce:49:
de:d5:f2:89:7b:16:ef:02:1e:26:e8:cc:57:d4:2f:42:a6:5b:
9c:06:cd:97:09:30:c7:ae:cc:60:b8:36:7d:e9:5e:5f:ae:2e:
82:1f:c0:13:08:72:3e:76:2b:d9:e6:3e:52:63:45:c5:3c:5a:
25:ca:a3:db:48:51:c8:49:bf:91:de:51:8b:90:b2:82:fc:c9:
22:e8:f1:13:57:79:87:bc:58:92:a0:60:4f:24:7a:9c:bd:72:
76:d4:a8:49:64:b5:4d:66:74:7f:0d:03:cf:81:b7:80:d4:f5:
c0:01:21:4d:41:d9:1b:d4:3f:cd:f1:19:39:71:45:d0:00:7c:
a0:4f:8d:3f:9f:6e:07:8f:6b:7a:24:ad:ec:0d:2b:af:16:be:
ca:02:e6:38:18:69:37:25:cb:35:9f:71:30:1a:57:2f:e7:66:
f2:23:a7:dc:92:7c:c8:3e:e2:06:d1:be:bc:f7:b0:d1:bc:20:
5d:fd:60:37:8d:b8:75:3f:46:96:b1:3f:53:d4:ca:33:8c:c1:
94:19:bb:0c:f5:d9:e1:9b:0d:20:9d:7a:bd:f8:ee:7f:71:13:
9d:6e:07:96:d6:fc:fe:8e:8d:c4:7f:a4:6f:3b:1a:0d:0d:0b:
0e:8b:93:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:23 2026 by rpki-client