Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft
File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json)
Hash identifier: LIH+AWCpVWs3FRobeT3Gg77YHpIeBwyxmEmDxVBKJGE=
Subject key identifier: EE:84:42:F8:74:F6:03:E1:21:EA:5F:17:79:A0:45:2F:B8:10:1C:91
Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6
Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6
Certificate serial: 0BA016EA072B577792C670E294ED21036A6109C1
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft
Manifest number: 0296
Signing time: Mon 06 Apr 2026 03:22:48 +0000
Manifest this update: Mon 06 Apr 2026 03:17:48 +0000
Manifest next update: Tue 07 Apr 2026 06:32:48 +0000
Files and hashes: 1: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: Si3nvIvR6vlJSP9N899TEpLNTv8CH8Xf9C307NCghTQ=)
2: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: p2OhW0toPgnEVU2NIrG7vqzq6UnzFu1E0LSqFm8JN4A=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a0:16:ea:07:2b:57:77:92:c6:70:e2:94:ed:21:03:6a:61:09:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6
Validity
Not Before: Apr 6 03:17:48 2026 GMT
Not After : Apr 7 06:32:48 2026 GMT
Subject: CN=EE8442F874F603E121EA5F1779A0452FB8101C91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:24:6f:5d:86:30:8d:6c:bb:bb:fe:95:49:25:
52:48:a8:af:28:6f:c5:42:2c:b5:59:a9:f1:a7:3f:
81:d3:c4:33:d2:e7:03:7a:f5:2c:6c:ee:f9:28:20:
be:04:c6:9c:00:9c:fb:fa:63:d6:01:a6:a9:d9:8c:
26:3b:ca:83:07:69:dc:2d:9c:c6:df:76:ff:68:8a:
12:48:ae:6e:9e:da:9a:90:64:fb:20:98:f9:34:34:
6b:b4:72:e6:3c:a4:e2:87:c6:9b:0e:dc:28:19:df:
fa:a1:e8:08:d5:da:98:3b:eb:b2:bf:89:9c:7b:5c:
91:3a:83:79:43:3d:e5:ee:92:96:f4:04:5c:9f:73:
60:1c:5a:d8:c1:71:9c:bb:23:2e:23:6c:7c:6c:3f:
09:1f:fc:8b:c2:24:74:38:89:d2:09:57:6b:23:18:
73:cb:40:51:49:8a:7b:44:a4:a7:59:b5:ad:2c:c8:
bb:21:3c:fb:e1:4b:a5:86:f4:a1:5b:2a:c1:7e:33:
05:c3:a8:0f:a0:9c:2c:c0:c4:1a:dd:70:63:74:ab:
a5:3d:c9:e2:fd:c3:89:02:aa:eb:2d:94:43:57:b2:
2a:e2:f6:f4:a9:4e:f0:0b:c9:7b:71:81:a5:b4:bd:
58:55:98:10:ac:10:24:c2:1a:9c:04:68:ec:2c:d6:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:84:42:F8:74:F6:03:E1:21:EA:5F:17:79:A0:45:2F:B8:10:1C:91
X509v3 Authority Key Identifier:
keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:df:4e:4f:61:96:b3:f7:24:c9:ba:02:14:47:bc:e4:dd:5f:
62:e8:4e:b2:ee:0a:48:7b:29:61:12:88:7c:52:b8:c4:0f:bc:
83:b8:45:3f:d3:f5:d6:1e:95:df:07:1f:98:81:f1:28:e1:ab:
43:6a:7e:c7:11:b7:1c:be:d1:6e:1e:15:d6:8c:73:f2:a3:c1:
16:fb:d5:95:16:43:3a:36:34:03:a8:bd:81:65:f0:1d:8f:df:
18:29:14:66:ac:c8:8f:d5:8b:13:6b:04:d6:9b:2c:cb:d8:3f:
de:e1:79:6f:26:d4:c7:15:87:18:c6:f9:14:74:78:ce:d9:f3:
c3:0f:83:93:21:59:a1:e6:32:ea:18:2c:c7:6a:fa:84:55:86:
8a:74:95:88:b5:cf:1c:20:93:3d:9e:a3:5e:06:2f:da:d6:71:
76:94:99:c3:9f:fc:f9:c4:0f:2a:9b:b8:05:12:01:9b:a2:67:
54:14:15:44:00:b3:60:8d:61:d3:75:72:2e:a3:60:45:9c:ff:
3a:01:93:80:2f:0e:8d:0b:be:41:a9:f5:e1:2b:77:31:34:7b:
7e:ba:11:45:5f:e2:e3:f0:8c:8f:99:1d:ff:44:f5:ec:93:4c:
9c:79:bf:7c:32:5a:4b:74:33:fe:31:38:23:80:ea:10:06:a5:
75:f4:79:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:32:52 2026 by rpki-client