Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft
File: 37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft (raw, json)
Hash identifier: icqqgBgTk/lvvIUQosoxprln4sCBC0u9QaOLV3iRAX0=
Subject key identifier: 0F:02:58:62:D6:E9:C7:CD:B4:37:42:D9:5B:F1:C8:4E:F8:E3:29:8B
Authority key identifier: 37:AA:EE:58:44:52:DD:AB:02:50:92:1C:4B:2D:84:74:F6:1F:F7:4D
Certificate issuer: /CN=37AAEE584452DDAB0250921C4B2D8474F61FF74D
Certificate serial: 60EF8DD4186F9DA74752F83E1F0C9D52FA715E41
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft
Manifest number: 5C
Signing time: Wed 01 Apr 2026 09:48:14 +0000
Manifest this update: Wed 01 Apr 2026 09:43:14 +0000
Manifest next update: Thu 02 Apr 2026 10:49:14 +0000
Files and hashes: 1: 37AAEE584452DDAB0250921C4B2D8474F61FF74D.crl (hash: 5bC7486oh9KY1Sz+mEtrSBYSGPIM1VvSCpnpDD8O54o=)
2: 326130663a316363353a323431313a3a2f34382d3438203d3e20323036303639.roa (hash: GgsS8q8v92ftDtmAINXb+jZxiQcNlTc0d1SR73H0Jss=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ef:8d:d4:18:6f:9d:a7:47:52:f8:3e:1f:0c:9d:52:fa:71:5e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37AAEE584452DDAB0250921C4B2D8474F61FF74D
Validity
Not Before: Apr 1 09:43:14 2026 GMT
Not After : Apr 2 10:49:14 2026 GMT
Subject: CN=0F025862D6E9C7CDB43742D95BF1C84EF8E3298B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b1:7c:57:e9:1f:aa:4e:47:86:42:e8:1e:c9:
5f:e5:71:5c:c7:44:f6:26:a2:7e:55:e7:18:09:de:
41:9c:e2:1c:26:c9:5b:cd:14:37:3c:82:27:83:72:
81:41:76:3f:4a:40:0f:74:80:20:8d:89:d6:b0:3f:
7f:38:50:fd:20:70:2a:24:af:57:df:66:49:96:0d:
b8:22:0e:0f:b9:a9:33:b8:30:b0:61:3f:c0:60:8d:
55:4c:33:fa:83:48:ce:34:e0:02:c3:4f:5e:0b:7a:
9b:d6:4c:18:c2:87:75:f6:a9:aa:51:0f:f2:43:63:
98:91:f1:79:ed:fb:ba:c7:52:f7:97:3d:20:b9:1d:
8b:35:cc:c8:95:5b:d7:20:02:84:c6:07:44:0e:a3:
69:fc:3a:d1:3b:c0:47:dd:46:ca:57:e1:07:17:11:
94:22:eb:00:b4:ec:0b:69:75:67:f1:e9:0a:8c:4e:
a1:f8:9c:ef:82:2b:12:28:74:1a:24:28:78:ae:4f:
c7:70:14:01:67:b2:7d:c4:b0:f6:e1:c7:39:d8:74:
27:88:7e:97:cb:a3:4f:0a:19:43:d7:5f:42:8e:72:
f2:bc:a2:40:25:1f:17:96:66:6a:7b:87:b4:e3:5e:
d3:5e:5a:fb:0f:6b:55:5e:db:ee:c3:37:6d:0f:d6:
f8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:02:58:62:D6:E9:C7:CD:B4:37:42:D9:5B:F1:C8:4E:F8:E3:29:8B
X509v3 Authority Key Identifier:
keyid:37:AA:EE:58:44:52:DD:AB:02:50:92:1C:4B:2D:84:74:F6:1F:F7:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/4/37AAEE584452DDAB0250921C4B2D8474F61FF74D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7d:fc:5f:2d:8f:20:a9:c9:83:c6:58:a4:aa:22:fb:2d:55:
78:de:a4:df:40:d1:cb:18:0c:35:1f:5f:32:b3:62:56:bd:99:
a6:18:d8:f4:8e:43:4b:88:8b:ca:e7:61:3f:d9:4b:02:94:21:
bf:6a:d4:b3:9b:d2:1b:c1:7a:41:0c:8f:79:9b:8d:7c:c0:e3:
3f:d2:07:47:d4:a1:e7:54:f9:0a:d1:99:96:2b:93:96:f8:59:
43:95:69:13:ac:86:0c:4e:51:a4:6a:5a:b1:ff:6b:7d:52:ef:
d2:0b:cf:63:ea:88:4e:1f:b0:c1:2a:7e:db:db:e1:4b:5d:9c:
41:09:97:56:7c:e8:de:74:c2:01:81:4f:19:c3:22:d0:75:25:
e5:25:5d:fa:94:31:a0:2a:e5:c4:da:61:ca:99:70:17:a1:10:
08:c9:1f:c4:72:e8:50:f5:85:58:84:fe:41:d7:ee:1d:2b:4f:
c9:05:12:7d:a2:a5:fe:a5:ae:32:80:fc:b3:8a:ea:61:dd:7b:
6b:03:37:3b:3e:c7:e3:73:cc:ca:5e:a3:22:63:70:d8:30:99:
e1:f1:1f:4c:6d:54:5d:c3:e9:06:dd:ab:59:bb:8f:34:aa:e2:
f1:0d:2f:d3:17:d8:91:8d:63:53:4d:4b:df:c8:11:48:23:48:
dc:4a:8c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:26 2026 by rpki-client