Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier: i+cJeN5iyNINOWcrGysiUwOhNhBbDqcSPLgU0Ngvkkk=
Subject key identifier: 95:FD:9C:A6:BD:5B:E7:CB:47:0E:5F:C8:05:85:80:C0:12:95:35:62
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer: /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial: 045FEE9C9CD6E0B3643A9BEC65C14AFD864F0F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number: 0538
Signing time: Sun 01 Mar 2026 17:53:14 +0000
Manifest this update: Sun 01 Mar 2026 17:48:14 +0000
Manifest next update: Mon 02 Mar 2026 21:30:14 +0000
Files and hashes: 1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: iFwNFYIzrO+taYvVX/ZKW1x7Zp3fXhYPWANQFNMigtI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:5f:ee:9c:9c:d6:e0:b3:64:3a:9b:ec:65:c1:4a:fd:86:4f:0f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Validity
Not Before: Mar 1 17:48:14 2026 GMT
Not After : Mar 2 21:30:14 2026 GMT
Subject: CN=95FD9CA6BD5BE7CB470E5FC8058580C012953562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:fb:b3:f1:b6:1a:b4:47:ae:a8:25:4d:9e:
77:c2:e0:53:f0:c1:43:d6:f0:d7:eb:94:2c:db:11:
7e:ad:ef:10:23:32:ea:17:b9:d4:61:36:ca:58:83:
bc:3d:4e:a3:9b:61:93:5d:be:4e:f4:7a:78:99:49:
03:b9:3b:cc:d9:a7:44:83:a4:0a:26:7a:38:32:b2:
90:1d:fe:30:13:66:b4:ba:ab:4a:47:28:cc:4e:d9:
67:34:c4:16:22:b3:27:1d:a6:7d:df:a1:fb:79:77:
34:a2:75:0e:39:b0:25:cb:ea:37:a6:af:43:bb:f1:
03:86:3d:cd:be:29:53:66:00:80:33:c4:1a:e9:5f:
69:cd:82:5f:46:b2:ce:0c:56:44:b1:8f:24:c5:f8:
8e:42:4f:5f:1b:6f:7c:ca:99:e7:c3:2c:2c:f1:4d:
78:94:7d:93:b6:db:e6:21:24:be:bb:aa:4e:ec:ef:
03:c5:38:8d:d8:89:ee:36:88:9d:2e:5d:19:0b:0a:
13:ed:ff:27:7a:53:f1:15:fb:06:a8:1c:22:b8:c4:
b7:4d:4b:db:a8:6f:97:23:5a:0d:8a:4f:a3:78:ac:
bd:5a:21:ca:a0:23:96:12:12:9e:f4:08:b5:fe:3a:
4f:02:77:26:58:c9:e4:d6:6f:12:c0:88:b2:b6:f0:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FD:9C:A6:BD:5B:E7:CB:47:0E:5F:C8:05:85:80:C0:12:95:35:62
X509v3 Authority Key Identifier:
keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8b:b0:85:66:a0:5b:96:27:a1:72:80:2d:90:8b:d2:02:ec:
a1:ea:75:92:7f:89:9f:65:0b:98:5a:51:f8:8e:d5:fe:84:81:
16:2f:d4:15:78:d9:8e:14:38:84:5f:11:af:ac:69:41:68:99:
69:ee:6b:13:49:4c:01:d5:d1:96:42:96:01:6f:78:84:ef:fe:
71:fd:b5:78:54:77:0f:f7:aa:14:e2:64:21:fc:b0:3c:02:0d:
d4:e9:74:63:47:81:69:0c:9a:dc:ab:d6:5b:b9:1e:2a:57:51:
2a:b8:ef:8e:ac:0f:87:ea:9e:53:82:22:7e:cd:97:6b:46:a2:
92:01:48:cc:cb:1a:15:49:0a:b1:67:db:a0:0e:25:b8:d2:69:
15:0b:18:2e:3f:ed:36:bb:90:b7:68:7f:cf:25:90:7c:80:22:
1b:6f:1d:bc:32:bc:9f:a9:8d:ef:c2:bb:31:71:ee:d3:78:90:
88:c9:7e:26:b7:a1:be:8b:34:a6:3e:97:9f:1c:9c:69:9b:4a:
3f:e3:60:a8:03:30:85:00:0a:ca:01:2d:62:58:ca:c8:e8:af:
72:1b:04:e1:ab:bb:a3:80:29:29:32:c5:08:92:82:7b:10:f1:
8b:0a:d3:95:02:a3:0d:5f:1b:ca:fb:4e:97:ce:e9:60:e8:cb:
c0:d4:85:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:58 2026 by rpki-client