Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
File: E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft (raw, json)
Hash identifier: 9Jo3Ymd82PE7b60+kyoqdAEa7JDSI9Jar7TEFg0u7HY=
Subject key identifier: DB:AC:3C:8C:21:9A:21:62:9D:5F:8C:7A:E5:1C:48:A0:9E:DA:9D:C5
Authority key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Certificate issuer: /CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Certificate serial: 2F11321FCFDA0BA2D713F66D0729CFAC73A8FEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
Manifest number: 02DE
Signing time: Wed 26 Nov 2025 23:54:17 +0000
Manifest this update: Wed 26 Nov 2025 23:49:17 +0000
Manifest next update: Fri 28 Nov 2025 03:20:17 +0000
Files and hashes: 1: E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl (hash: nAYOE0EWqtTFbVJoqsAKQEHymohxN0DLriFZzSdGwhg=)
2: AS215131.asa (hash: /Ig9Y9j+GErTcuTTgHxL2iaOhUZXWZH+p25xdO/uCfk=)
3: 323030313a3637633a6535633a3a2f34382d3438203d3e20323135313331.roa (hash: /8lHhKIuzTcsmBKH0ioYgR3QJ/GmZe2e/TKZ5GWlTv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:11:32:1f:cf:da:0b:a2:d7:13:f6:6d:07:29:cf:ac:73:a8:fe:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Validity
Not Before: Nov 26 23:49:17 2025 GMT
Not After : Nov 28 03:20:17 2025 GMT
Subject: CN=DBAC3C8C219A21629D5F8C7AE51C48A09EDA9DC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:d9:b7:b3:0f:52:14:ca:f1:40:b1:2b:0d:
ea:6b:8d:1a:df:77:79:85:f1:c5:da:6b:06:b5:26:
30:07:8c:dd:9a:25:5a:60:67:8a:8c:e4:f8:af:18:
44:2b:3f:ef:3b:74:e3:0e:49:42:e4:3e:86:15:6b:
93:0a:7e:ae:5f:45:a3:9e:61:95:39:67:b8:c0:df:
46:a7:01:19:1d:a1:c4:17:e5:aa:9f:3d:b1:a0:ad:
08:a9:cb:c3:85:28:b0:8b:a9:ef:a2:1e:8e:f3:9d:
d8:89:69:de:5c:82:0e:a9:00:71:ca:61:c2:a7:03:
db:3d:1e:e3:f9:a8:04:8c:5e:17:9d:9c:af:1f:89:
cc:7d:64:4e:af:e1:b8:49:b4:37:b3:4d:14:0e:76:
88:78:95:db:64:e3:2e:ed:78:e8:db:64:73:89:36:
29:6a:85:48:7a:11:ce:35:d4:2c:dc:c0:95:30:e4:
04:0b:d9:2a:ac:6f:c3:03:d3:cd:84:fa:da:44:36:
cd:0c:17:0c:cf:93:36:b6:b1:f1:75:82:41:43:58:
ff:51:bf:51:03:a7:8e:d0:37:bc:3d:96:07:a7:b7:
ff:26:fd:0e:da:43:cf:c4:64:2a:ba:c1:db:94:73:
99:05:21:61:21:96:54:1c:bd:f8:80:e0:e9:83:54:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AC:3C:8C:21:9A:21:62:9D:5F:8C:7A:E5:1C:48:A0:9E:DA:9D:C5
X509v3 Authority Key Identifier:
keyid:E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8e:25:b0:bd:d3:78:97:7f:56:33:4d:2c:f9:14:be:27:e9:
af:c5:c9:d1:7c:b3:30:d9:1a:93:6a:60:c6:e6:67:e8:94:08:
14:81:d0:ae:c5:f2:fd:2e:87:c3:3e:4b:38:dd:a3:20:67:c9:
39:2f:d5:fb:e4:58:0d:f5:78:b8:d5:29:ff:09:23:81:6c:66:
eb:51:cf:6d:09:cd:c4:18:cb:ac:ff:37:f1:27:3b:65:d2:bb:
e4:5a:7b:00:d8:6d:a2:0d:05:8f:c2:80:dc:41:ee:c0:49:cd:
90:2f:11:d6:74:94:b8:59:7e:cc:30:05:79:9b:ef:0c:f8:af:
f8:f8:3c:39:72:b7:a9:66:26:14:84:a7:ee:e3:8b:42:4c:e1:
fa:3a:59:4f:3e:17:05:78:3d:e1:ec:77:f2:58:42:b5:d8:63:
5f:ef:1a:24:4a:cd:40:8b:0d:d5:35:b1:62:1c:5e:d9:7d:50:
1a:8e:ff:8e:15:33:27:e9:03:4d:66:d2:29:ba:43:c3:62:bf:
c5:70:fd:52:50:d6:35:56:0f:1f:7f:06:70:b0:9d:ae:40:c3:
b7:44:18:6d:50:0c:77:ac:a3:8a:42:31:d6:e7:99:14:92:d0:
9b:5b:84:8a:a2:ed:55:6f:7b:e6:2f:50:79:7c:75:a3:7c:c8:
e9:c1:d7:a1
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULxEyH8/aC6LXE/ZtBynPrHOo/uswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTRiYTk4ZmMzZWJlODA2Yzc4MmU1ODlmYWY1Mjk1YzMy
NTkyMTJhODAeFw0yNTExMjYyMzQ5MTdaFw0yNTExMjgwMzIwMTdaMDMxMTAvBgNV
BAMTKERCQUMzQzhDMjE5QTIxNjI5RDVGOEM3QUU1MUM0OEEwOUVEQTlEQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXSNm3sw9SFMrxQLErDeprjRrf
d3mF8cXaawa1JjAHjN2aJVpgZ4qM5PivGEQrP+87dOMOSULkPoYVa5MKfq5fRaOe
YZU5Z7jA30anARkdocQX5aqfPbGgrQipy8OFKLCLqe+iHo7zndiJad5cgg6pAHHK
YcKnA9s9HuP5qASMXhednK8ficx9ZE6v4bhJtDezTRQOdoh4ldtk4y7teOjbZHOJ
NilqhUh6Ec411CzcwJUw5AQL2Sqsb8MD082E+tpENs0MFwzPkza2sfF1gkFDWP9R
v1EDp47QN7w9lgent/8m/Q7aQ8/EZCq6wduUc5kFIWEhllQcvfiA4OmDVAGrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU26w8jCGaIWKdX4x65RxIoJ7ancUwHwYDVR0j
BBgwFoAU5LqY/D6+gGx4Llifr1KVwyWSEqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjY0MjE5MDgtNzVkYy00MzBiLThmYjktNzQ4Yzc1YmIw
MmMyLzAvRTRCQTk4RkMzRUJFODA2Qzc4MkU1ODlGQUY1Mjk1QzMyNTkyMTJBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVMcVlfRDYtZ0d4NExsaWZyMUtWd3lX
U0VxZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iNjQyMTkwOC03
NWRjLTQzMGItOGZiOS03NDhjNzViYjAyYzIvMC9FNEJBOThGQzNFQkU4MDZDNzgy
RTU4OUZBRjUyOTVDMzI1OTIxMkE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj44lsL3TeJd/VjNNLPkU
vifpr8XJ0XyzMNkak2pgxuZn6JQIFIHQrsXy/S6Hwz5LON2jIGfJOS/V++RYDfV4
uNUp/wkjgWxm61HPbQnNxBjLrP838Sc7ZdK75Fp7ANhtog0Fj8KA3EHuwEnNkC8R
1nSUuFl+zDAFeZvvDPiv+Pg8OXK3qWYmFISn7uOLQkzh+jpZTz4XBXg94ex38lhC
tdhjX+8aJErNQIsN1TWxYhxe2X1QGo7/jhUzJ+kDTWbSKbpDw2K/xXD9UlDWNVYP
H38GcLCdrkDDt0QYbVAMd6yjikIx1ueZFJLQm1uEiqLtVW975i9QeXx1o3zI6cHX
oQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:20 2026 by rpki-client