Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft
File: EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft (raw, json)
Hash identifier: 2TQeNOYK62CaeFUUutYb2ZLHZxvwTQ4j7pSGEcYLxPE=
Subject key identifier: 03:A5:D3:7A:94:4E:8A:BB:07:D2:DA:52:EF:0E:B6:14:A2:87:32:C9
Authority key identifier: EC:5F:57:9A:06:8C:E6:CF:BF:46:FD:A7:C3:EB:4D:D6:F9:46:53:F1
Certificate issuer: /CN=EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1
Certificate serial: 15E79F06044DC43C37F2348E19A728A86A31E668
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft
Manifest number: 68
Signing time: Wed 01 Apr 2026 10:38:14 +0000
Manifest this update: Wed 01 Apr 2026 10:33:14 +0000
Manifest next update: Thu 02 Apr 2026 13:40:14 +0000
Files and hashes: 1: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: r53+tlnjK7xAc5kJlxhFUell1c4S1jQNbSq/pievGCs=)
2: EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.crl (hash: fALIk0kUy4xYcVRn4EqOatpTi7Yfj2x0Xil9Ks+I4Fw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e7:9f:06:04:4d:c4:3c:37:f2:34:8e:19:a7:28:a8:6a:31:e6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1
Validity
Not Before: Apr 1 10:33:14 2026 GMT
Not After : Apr 2 13:40:14 2026 GMT
Subject: CN=03A5D37A944E8ABB07D2DA52EF0EB614A28732C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:80:ec:88:a4:5e:3b:2b:ef:b3:9c:d7:15:7b:
bc:68:bf:ac:36:96:fe:44:c9:3d:de:d5:4f:0d:27:
b2:2c:fc:38:65:51:b8:e6:ee:a8:69:44:e3:b6:0c:
16:cf:3b:7f:69:ff:0e:6d:be:b2:f4:41:42:79:75:
90:a7:15:ed:34:60:07:5c:9b:8f:83:5c:a2:79:38:
34:f2:b7:f3:06:6e:d9:7e:ae:79:b8:ee:3f:2f:4b:
a5:bf:bd:29:c1:33:4c:e4:ea:47:51:dd:47:f2:7a:
99:8c:0c:56:4c:83:74:df:20:18:7d:f2:52:f8:11:
3f:29:7a:9b:94:ae:10:ca:4d:22:2e:a2:57:5c:05:
29:e4:fe:82:a0:53:34:21:f7:b9:12:ef:e0:67:0c:
87:5a:52:76:e8:af:82:d0:a1:cf:1b:b2:de:df:73:
55:ed:2d:4c:86:41:dc:5a:02:1f:a2:c0:df:65:c3:
6e:2d:56:ee:e3:16:50:c2:5d:4c:fa:77:55:07:7a:
af:62:1e:78:54:74:76:1b:4c:35:ff:64:93:b4:03:
0f:0d:46:97:3f:a2:3b:5a:03:fc:e0:c8:7e:fc:72:
3c:d6:64:ed:a3:c4:d4:7d:c7:41:7a:e4:e2:fb:2f:
bf:1e:b5:8b:5f:7e:8b:ce:61:e8:46:0c:49:41:bd:
93:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A5:D3:7A:94:4E:8A:BB:07:D2:DA:52:EF:0E:B6:14:A2:87:32:C9
X509v3 Authority Key Identifier:
keyid:EC:5F:57:9A:06:8C:E6:CF:BF:46:FD:A7:C3:EB:4D:D6:F9:46:53:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c5:df:88:da:52:30:01:8f:e3:30:6c:4d:37:33:ad:3c:f0:
81:ec:0b:48:36:4f:4a:1e:ad:4a:08:fd:5e:1b:84:3e:e8:7a:
e6:92:f5:c0:a2:c2:4d:ad:4d:cc:78:48:d9:d4:65:fd:19:c3:
14:49:cb:c6:16:a2:eb:52:d8:e3:a0:6f:53:fe:51:2d:7b:27:
80:3d:23:95:6b:4e:7c:25:ee:9f:1a:1a:7e:87:a6:0d:2e:d0:
67:a4:c2:81:34:96:1f:89:a4:1d:d0:57:82:68:90:3a:86:00:
1f:c0:f1:92:5f:9c:be:a4:21:ee:7e:f3:4c:fd:dc:dd:b0:aa:
b9:c5:1e:72:e9:08:77:fc:a6:07:94:f0:05:82:59:af:9f:93:
72:99:92:9f:17:5b:e5:14:f2:e8:99:73:46:e4:88:25:b9:06:
9b:18:f3:24:c4:24:a3:31:25:56:98:fe:24:66:c4:59:5f:c6:
de:0b:4a:b1:4e:80:8d:3f:05:08:41:1c:50:5b:21:1d:01:71:
f5:83:f6:40:ae:ea:97:11:fd:af:f2:12:10:e4:70:9d:65:19:
19:24:cd:76:31:82:31:06:aa:33:00:38:d5:a1:a4:b8:e4:25:
b5:17:92:06:e6:da:b4:50:03:c6:61:1f:76:11:9f:54:5c:fa:
b9:fb:cb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:03 2026 by rpki-client