Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft
File: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft (raw, json)
Hash identifier: 1bfJXKYBByGVwwIuQPB50v7gLvBbCbeqNJvyFHKSknI=
Subject key identifier: 21:F7:DB:53:59:3E:52:DD:10:CB:9E:62:44:CD:06:92:A0:85:66:2C
Authority key identifier: 4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA
Certificate issuer: /CN=4B7AFD45B30392C9F4665CE2A7692D56E755DCEA
Certificate serial: 4DD497E9ECF59D9CE20424E47B323605C4CD6740
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft
Manifest number: 68
Signing time: Wed 01 Apr 2026 09:48:14 +0000
Manifest this update: Wed 01 Apr 2026 09:43:14 +0000
Manifest next update: Thu 02 Apr 2026 11:32:14 +0000
Files and hashes: 1: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl (hash: VOgaZ0wyN7tpA1nrG+sRfEgOqWg6yswBnWWC9JXZWEc=)
2: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (hash: a5s0weSMSVAZOPtcCLRRCAjoiXiAH1m3fzt4R/LeqXA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d4:97:e9:ec:f5:9d:9c:e2:04:24:e4:7b:32:36:05:c4:cd:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B7AFD45B30392C9F4665CE2A7692D56E755DCEA
Validity
Not Before: Apr 1 09:43:14 2026 GMT
Not After : Apr 2 11:32:14 2026 GMT
Subject: CN=21F7DB53593E52DD10CB9E6244CD0692A085662C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:b4:4f:cd:65:68:1d:82:ef:8c:7f:1b:6c:
f7:ce:43:d0:83:e5:85:5b:fc:71:e2:d1:3c:34:68:
57:20:6b:6b:3e:1a:52:0c:94:26:fe:b0:09:5d:8b:
10:f1:b6:04:32:f2:ac:c9:ad:c1:a4:94:35:13:22:
b7:3c:f7:66:ad:51:fa:39:6a:c1:80:03:10:64:bd:
ad:a9:a5:52:bf:22:04:f8:ec:b2:42:82:15:c0:2d:
09:36:9d:27:1a:5b:6f:18:6a:6a:50:a5:2d:b6:80:
b0:1d:fc:80:1f:41:62:f9:d6:a4:95:80:e7:6d:24:
8e:d7:0d:f2:52:e0:9d:bc:cb:54:00:c6:ea:8c:cb:
f1:8b:0b:d1:62:aa:c2:f4:a6:b9:e7:5c:d8:53:8f:
7f:d9:83:ba:fe:b0:c5:ea:94:e7:be:6c:3c:e5:2a:
15:ad:fd:8d:86:84:3c:e8:77:76:23:c8:12:b0:72:
5f:df:3a:74:fa:53:d4:57:60:1d:3f:27:4a:24:e7:
65:0d:a4:70:0e:f9:88:c7:fa:be:db:02:4b:57:f7:
44:14:7c:5d:56:f4:f6:24:56:36:d8:86:cc:e9:c0:
cc:84:b8:22:d9:1d:45:e8:f4:a1:63:f3:4f:f8:0f:
c9:2c:8b:53:0a:5b:59:33:df:22:2c:ce:d0:fb:89:
9e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F7:DB:53:59:3E:52:DD:10:CB:9E:62:44:CD:06:92:A0:85:66:2C
X509v3 Authority Key Identifier:
keyid:4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:92:14:3f:a0:da:e3:3f:84:fa:be:6f:a8:45:26:86:d7:bd:
fb:23:15:32:e9:4a:00:b8:1a:00:71:3d:a7:1a:73:94:aa:2a:
62:3b:02:39:6b:36:c1:fa:23:6b:24:74:97:b1:a6:ce:54:27:
47:e4:3a:8d:3d:25:94:d9:c0:88:dc:91:75:0d:c7:ee:9e:24:
8a:ba:10:5b:de:3d:65:f5:9f:ca:13:66:a0:48:66:fc:99:c7:
83:18:3d:aa:ce:e0:53:c7:ae:93:79:05:ac:07:02:e8:8d:b8:
46:cc:98:ef:f3:03:81:8d:f9:05:c1:eb:66:ee:1b:5e:bf:9c:
ed:a0:24:aa:ea:a4:50:03:d2:7a:5a:eb:1e:e4:31:55:3b:4a:
b1:57:ec:e8:a7:0f:1a:d3:27:a1:68:dd:3e:5c:97:14:2f:69:
76:33:b3:e0:0a:13:09:7f:b2:4f:fc:8b:97:d3:c3:e0:90:01:
b9:8a:87:4e:9c:7f:ea:fb:97:86:bc:32:62:eb:6d:98:86:8b:
64:84:32:6a:a3:c8:f9:93:2a:62:4f:3c:bc:23:8f:c1:c2:cb:
03:f2:c2:93:50:82:64:bd:90:58:98:c3:c8:65:b4:ad:44:76:
67:d1:52:ef:3f:e1:b4:ee:b3:06:a3:eb:03:e3:e3:20:fe:97:
a1:fe:9c:12
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUTdSX6ez1nZziBCTkezI2BcTNZ0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI3QUZENDVCMzAzOTJDOUY0NjY1Q0UyQTc2OTJENTZF
NzU1RENFQTAeFw0yNjA0MDEwOTQzMTRaFw0yNjA0MDIxMTMyMTRaMDMxMTAvBgNV
BAMTKDIxRjdEQjUzNTkzRTUyREQxMENCOUU2MjQ0Q0QwNjkyQTA4NTY2MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq6rRPzWVoHYLvjH8bbPfOQ9CD
5YVb/HHi0Tw0aFcga2s+GlIMlCb+sAldixDxtgQy8qzJrcGklDUTIrc892atUfo5
asGAAxBkva2ppVK/IgT47LJCghXALQk2nScaW28YampQpS22gLAd/IAfQWL51qSV
gOdtJI7XDfJS4J28y1QAxuqMy/GLC9FiqsL0prnnXNhTj3/Zg7r+sMXqlOe+bDzl
KhWt/Y2GhDzod3YjyBKwcl/fOnT6U9RXYB0/J0ok52UNpHAO+YjH+r7bAktX90QU
fF1W9PYkVjbYhszpwMyEuCLZHUXo9KFj80/4D8ksi1MKW1kz3yIsztD7iZ7TAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUIffbU1k+Ut0Qy55iRM0GkqCFZiwwHwYDVR0j
BBgwFoAUS3r9RbMDksn0Zlzip2ktVudV3OowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTA4MjE4OTktNzdhNi00M2E3LTlhODItMGEzOGZmM2I0
YWQwLzIvNEI3QUZENDVCMzAzOTJDOUY0NjY1Q0UyQTc2OTJENTZFNzU1RENFQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4
YTgtOTc5My0zM2VlYzA2N2NlMzkvMy80QjdBRkQ0NUIzMDM5MkM5RjQ2NjVDRTJB
NzY5MkQ1NkU3NTVEQ0VBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzkwODIxODk5LTc3YTYtNDNhNy05YTgyLTBhMzhmZjNiNGFkMC8yLzRCN0FGRDQ1
QjMwMzkyQzlGNDY2NUNFMkE3NjkyRDU2RTc1NURDRUEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4khQ/
oNrjP4T6vm+oRSaG1737IxUy6UoAuBoAcT2nGnOUqipiOwI5azbB+iNrJHSXsabO
VCdH5DqNPSWU2cCI3JF1DcfuniSKuhBb3j1l9Z/KE2agSGb8mceDGD2qzuBTx66T
eQWsBwLojbhGzJjv8wOBjfkFwetm7htev5ztoCSq6qRQA9J6Wuse5DFVO0qxV+zo
pw8a0yehaN0+XJcUL2l2M7PgChMJf7JP/IuX08PgkAG5iodOnH/q+5eGvDJi622Y
hotkhDJqo8j5kypiTzy8I4/BwssD8sKTUIJkvZBYmMPIZbStRHZn0VLvP+G07rMG
o+sD4+Mg/peh/pwS
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:51 2026 by rpki-client