Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier: 9oKoQzHO4F2Vojd8ypO5WY+/GdLZq0gVbRfZuRXOg7Q=
Subject key identifier: DD:36:7E:8F:53:B7:7D:12:15:79:94:03:78:AC:AA:89:C5:8F:CF:61
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer: /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial: 4AE346D8E929EE6829CB5D31EFD4A4179EA904CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number: 0295
Signing time: Mon 06 Apr 2026 07:02:48 +0000
Manifest this update: Mon 06 Apr 2026 06:57:48 +0000
Manifest next update: Tue 07 Apr 2026 10:48:48 +0000
Files and hashes: 1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: YaxflvFUqhfvr63Fev6kjdmxVWJl0nAnQHjJXO1EcSI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e3:46:d8:e9:29:ee:68:29:cb:5d:31:ef:d4:a4:17:9e:a9:04:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Validity
Not Before: Apr 6 06:57:48 2026 GMT
Not After : Apr 7 10:48:48 2026 GMT
Subject: CN=DD367E8F53B77D121579940378ACAA89C58FCF61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:f8:4f:f8:59:4c:06:c1:74:78:4c:71:89:
1b:02:2b:c5:0f:16:80:5e:a2:41:a3:87:e6:b6:64:
df:53:b4:69:3e:b3:8c:ee:c8:62:27:5a:e2:60:fd:
19:d2:93:91:74:48:c7:a3:85:a0:1e:69:96:c3:03:
fc:71:8c:e9:2c:48:e7:40:c6:34:88:24:2d:ba:53:
9a:81:cc:b9:c7:90:32:d2:da:4d:a5:83:ca:4c:ce:
4e:e0:79:61:a4:48:fa:c0:4d:d4:6f:ea:53:ac:6f:
43:94:16:9d:b2:fd:9f:07:3e:9b:f6:4b:34:bb:e7:
52:c0:d2:66:3e:9b:17:35:b4:ec:7c:64:99:58:a3:
87:4a:f1:01:65:aa:d2:98:1d:04:e5:e4:cc:c7:cb:
48:ab:a4:5e:c8:1e:65:d6:69:84:2c:cc:bb:ad:80:
24:e4:c1:fd:90:17:f7:fe:b2:f0:3f:e3:69:1d:5c:
bb:ca:fc:e0:33:0d:36:dc:01:51:13:4b:4b:32:af:
3d:51:7d:5b:73:80:09:c2:87:b8:35:75:52:5f:c3:
c4:a6:e1:be:c3:3e:05:26:fb:6f:ff:9a:f8:cb:f1:
c5:fc:f3:f1:3f:03:91:80:51:d0:6e:a0:21:5e:ef:
14:fd:8e:66:90:93:e1:b7:89:77:c0:78:61:6d:5f:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:36:7E:8F:53:B7:7D:12:15:79:94:03:78:AC:AA:89:C5:8F:CF:61
X509v3 Authority Key Identifier:
keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:13:45:44:fe:58:ee:b4:fe:18:2b:9b:b7:c3:e3:72:6c:ca:
a8:b9:d8:14:09:69:c1:00:11:62:02:68:ff:68:79:a2:c5:65:
02:5f:c8:1d:1b:93:9a:4b:5c:80:03:7a:04:4e:37:2a:63:bc:
ee:06:8a:b1:04:03:f4:d1:f5:6f:e1:c0:96:3b:12:49:be:b6:
ec:af:c9:b3:9c:e7:2f:61:4e:c3:3f:cd:be:01:ec:1e:82:50:
f5:84:84:18:d4:f8:22:78:41:e2:43:84:b2:2f:91:d2:a7:07:
65:41:2d:28:0f:0e:e5:8d:9b:26:4f:69:aa:b1:de:82:13:5c:
32:ab:ac:f1:ac:25:44:25:aa:bb:3e:b3:f4:c5:db:9b:2d:a2:
9b:6f:29:c1:79:27:88:c5:85:4d:b7:7f:fe:98:59:9c:11:da:
9f:91:97:9c:4f:b5:6c:53:87:cf:6a:f6:ad:16:5f:17:15:86:
2c:7f:ea:14:60:07:54:a6:3f:10:a9:89:d2:7b:e9:cd:98:5e:
1e:65:77:3b:93:84:71:58:f2:eb:12:4b:b4:58:72:01:8f:38:
83:d6:e7:43:52:3c:fd:19:a6:b7:2e:a5:9c:58:fb:4c:96:d3:
9c:ae:3f:cd:d0:50:87:85:f7:76:37:a9:33:54:98:b8:9a:f6:
7e:e7:22:8a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSuNG2Okp7mgpy10x79SkF56pBMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZkMWRkNTIyZjYxMzRmMDcwMTk1YzVjMGUyZDRjMTFj
ZmE2YTk3ZDAeFw0yNjA0MDYwNjU3NDhaFw0yNjA0MDcxMDQ4NDhaMDMxMTAvBgNV
BAMTKEREMzY3RThGNTNCNzdEMTIxNTc5OTQwMzc4QUNBQTg5QzU4RkNGNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCte/hP+FlMBsF0eExxiRsCK8UP
FoBeokGjh+a2ZN9TtGk+s4zuyGInWuJg/RnSk5F0SMejhaAeaZbDA/xxjOksSOdA
xjSIJC26U5qBzLnHkDLS2k2lg8pMzk7geWGkSPrATdRv6lOsb0OUFp2y/Z8HPpv2
SzS751LA0mY+mxc1tOx8ZJlYo4dK8QFlqtKYHQTl5MzHy0irpF7IHmXWaYQszLut
gCTkwf2QF/f+svA/42kdXLvK/OAzDTbcAVETS0syrz1RfVtzgAnCh7g1dVJfw8Sm
4b7DPgUm+2//mvjL8cX88/E/A5GAUdBuoCFe7xT9jmaQk+G3iXfAeGFtX/BDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU3TZ+j1O3fRIVeZQDeKyqicWPz2EwHwYDVR0j
BBgwFoAUf9HdUi9hNPBwGVxcDi1MEc+mqX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy
MWI3LzAvN0ZEMURENTIyRjYxMzRGMDcwMTk1QzVDMEUyRDRDMTFDRkE2QTk3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5SGRVaTloTlBCd0dWeGNEaTFNRWMt
bXFYMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jODZiNjViMS00
NWU5LTRmYjItYWRjNS04N2JhNzExZTIxYjcvMC83RkQxREQ1MjJGNjEzNEYwNzAx
OTVDNUMwRTJENEMxMUNGQTZBOTdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxNFRP5Y7rT+GCubt8Pj
cmzKqLnYFAlpwQARYgJo/2h5osVlAl/IHRuTmktcgAN6BE43KmO87gaKsQQD9NH1
b+HAljsSSb627K/Js5znL2FOwz/NvgHsHoJQ9YSEGNT4InhB4kOEsi+R0qcHZUEt
KA8O5Y2bJk9pqrHeghNcMqus8awlRCWquz6z9MXbmy2im28pwXkniMWFTbd//phZ
nBHan5GXnE+1bFOHz2r2rRZfFxWGLH/qFGAHVKY/EKmJ0nvpzZheHmV3O5OEcVjy
6xJLtFhyAY84g9bnQ1I8/Rmmty6lnFj7TJbTnK4/zdBQh4X3djepM1SYuJr2fuci
ig==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:57:25 2026 by rpki-client