Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft
File: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft (raw, json)
Hash identifier: ll4Nkjc6w5um6wGDX8FWqTO98f9I4Jl5kbwqTXhVbR8=
Subject key identifier: 28:D1:55:DE:5F:3C:E3:4C:0A:A0:4B:96:39:FF:1D:4C:44:A3:34:E7
Authority key identifier: A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD
Certificate issuer: /CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD
Certificate serial: 0D9E8D2851CA5C3761C6886030FEC02256BADB87
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft
Manifest number: 59
Signing time: Sun 07 Jun 2026 06:28:26 +0000
Manifest this update: Sun 07 Jun 2026 06:23:26 +0000
Manifest next update: Mon 08 Jun 2026 08:58:26 +0000
Files and hashes: 1: A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl (hash: Y7eAvFxh99N8rZK3Y5ct6OnYLxRNCgNn/Yb1zOnUxhA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9e:8d:28:51:ca:5c:37:61:c6:88:60:30:fe:c0:22:56:ba:db:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2E41C84D8F8CF51B5BB1E385683790FE620FEAD
Validity
Not Before: Jun 7 06:23:26 2026 GMT
Not After : Jun 8 08:58:26 2026 GMT
Subject: CN=28D155DE5F3CE34C0AA04B9639FF1D4C44A334E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:28:0f:93:39:20:ce:42:4e:2c:27:8f:f2:
2e:6d:03:f7:41:86:5b:4a:a4:30:4b:c7:3a:27:cf:
a0:14:8e:92:2d:76:17:ae:91:c5:0c:6c:db:d4:d9:
15:83:f9:02:8b:eb:ee:ca:24:33:ee:c6:2a:ff:7a:
1a:bc:75:89:e4:e8:ed:96:00:de:29:24:cd:91:16:
49:98:b8:17:fa:7c:44:b2:8c:5b:87:f4:56:f7:6d:
96:53:89:6e:72:dc:bc:dd:5d:33:2d:0e:73:c2:92:
a1:e0:4e:db:73:6a:ff:d8:45:3f:f5:cf:a4:48:44:
0d:23:ed:fd:13:a9:7a:4b:07:cc:67:16:5e:60:10:
c6:ef:e2:c1:b5:70:e6:53:0c:8d:37:cc:9d:01:f3:
3c:01:63:81:b7:64:dc:86:99:a6:83:a3:0d:9d:4a:
80:99:45:89:e8:f4:9a:e9:5e:39:0b:71:ed:b1:1c:
78:54:8e:b4:86:20:af:6e:ff:86:db:5e:c4:4e:58:
4a:1e:ad:af:5e:50:bf:71:ff:ec:68:30:e9:bc:be:
48:05:93:a3:75:5a:2a:67:87:8a:61:11:fe:61:bc:
68:0f:f1:26:11:c9:5f:e3:c5:61:07:46:a9:78:be:
be:4b:21:ac:93:c1:2f:7e:4f:c5:ba:23:a1:8a:6d:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D1:55:DE:5F:3C:E3:4C:0A:A0:4B:96:39:FF:1D:4C:44:A3:34:E7
X509v3 Authority Key Identifier:
keyid:A2:E4:1C:84:D8:F8:CF:51:B5:BB:1E:38:56:83:79:0F:E6:20:FE:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/0/A2E41C84D8F8CF51B5BB1E385683790FE620FEAD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0e:6d:93:f6:01:87:64:4e:6b:c3:8c:6a:14:0c:51:0a:91:
38:4d:86:2b:e0:3b:c6:7d:40:b9:5e:92:95:26:0d:c9:97:6d:
ec:00:5a:df:d1:0d:cc:7e:f9:68:5e:b8:67:7d:3d:8a:ca:cc:
69:89:4e:1b:4d:c5:2c:51:d3:c6:84:d3:c4:b4:ab:7d:8b:e7:
33:1e:23:09:1f:83:10:73:1e:30:98:91:55:00:12:05:ce:e8:
33:5d:84:67:f2:b6:cb:42:f9:18:2f:b7:a0:44:f7:27:9c:3e:
9a:f9:9f:ac:06:25:2b:a9:6b:9c:d4:59:bd:16:b2:b7:6a:6c:
53:cc:2a:dd:d5:c6:15:00:c2:75:9a:73:b0:f6:90:aa:de:37:
ef:e1:03:db:0b:61:1a:06:94:e0:ac:d7:a5:71:2a:bc:49:cb:
1c:dc:f8:e0:6f:73:55:fe:d0:04:54:ed:98:e5:9f:5a:57:55:
88:c8:e3:48:24:57:ba:f7:05:ce:00:95:12:c8:bc:2a:de:e5:
b5:1d:62:11:48:a3:5e:19:0f:60:50:1c:93:db:20:88:46:65:
ff:c5:e7:b6:8a:16:62:5a:52:cc:fd:07:c9:8b:88:a0:5b:aa:
d0:3f:22:c5:08:91:97:4c:18:44:97:32:29:b2:83:65:ca:25:
19:23:d4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:54:03 2026 by rpki-client