Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier: mdIYcus1WoDVU+szB4w6v1pZXYcRzTnLh31mKj+W8j8=
Subject key identifier: A6:44:39:26:5E:BE:E7:D9:0F:B0:24:E9:34:F4:7A:2F:0B:B4:D5:75
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial: 318975769B9C1940C871EC887DBF3BCA47BC6318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number: 038C
Signing time: Sun 01 Mar 2026 17:06:42 +0000
Manifest this update: Sun 01 Mar 2026 17:01:42 +0000
Manifest next update: Mon 02 Mar 2026 20:45:42 +0000
Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: UaLz5GN8rrJuCjLiEOuqo2awMw/40+kpGHS+NvKOmTk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:89:75:76:9b:9c:19:40:c8:71:ec:88:7d:bf:3b:ca:47:bc:63:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
Validity
Not Before: Mar 1 17:01:42 2026 GMT
Not After : Mar 2 20:45:42 2026 GMT
Subject: CN=A64439265EBEE7D90FB024E934F47A2F0BB4D575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:9d:72:b2:b4:e4:31:8e:c3:be:f4:ab:b3:
b5:76:79:24:66:d5:c1:c7:17:3a:e9:f4:d6:12:1b:
14:b2:21:50:eb:9e:2c:d5:e9:d5:1e:e2:31:f5:b2:
ba:2f:5f:af:b8:3e:b5:60:a4:cd:49:92:53:50:39:
cc:8f:c6:56:99:3e:54:33:48:a4:e3:08:03:a5:1b:
70:29:db:b4:df:b0:1c:c3:15:e2:28:00:6d:c5:58:
f0:a9:c2:ca:73:cf:24:6c:80:90:c3:ff:0a:3d:9f:
0a:da:c4:7e:05:69:ca:a6:64:fa:3a:7a:74:19:88:
f3:30:04:67:86:cd:9a:7c:06:70:5a:ed:51:ea:e2:
be:dd:a6:92:e5:72:3e:52:f8:84:d0:ef:fb:95:e2:
af:6c:64:92:e1:05:76:41:86:82:50:55:f7:ac:70:
23:ff:ba:a9:23:69:e5:6a:2f:81:92:05:e8:0c:85:
c5:6d:59:73:e1:b8:9e:9f:1b:57:31:95:b9:7b:86:
26:47:fb:32:f1:d5:5f:06:71:5d:62:85:cc:ad:d7:
29:3b:e1:e8:9d:e4:c0:f0:f5:c6:1a:d7:8f:d0:12:
53:10:53:88:88:54:63:9c:dc:0e:73:74:53:c5:a2:
14:11:32:e8:e3:63:d8:1d:12:3d:ba:c3:5f:53:a7:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:44:39:26:5E:BE:E7:D9:0F:B0:24:E9:34:F4:7A:2F:0B:B4:D5:75
X509v3 Authority Key Identifier:
keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b7:0f:3c:89:15:2f:2a:af:37:13:9f:08:03:60:e2:85:fc:
4a:cd:f0:a5:84:f7:18:54:aa:65:0c:3c:50:df:45:f6:38:ee:
3e:d4:7e:95:1c:bf:f1:3e:d9:71:36:02:76:86:d8:a5:20:b5:
5a:05:66:0c:27:b8:82:68:ee:10:6a:c6:d0:88:df:38:26:98:
41:98:04:e5:40:f6:9d:34:4b:57:b9:30:75:ec:03:d9:45:40:
1a:17:82:bb:9a:2c:84:3d:dd:cf:24:01:e5:3d:7b:b4:ae:3d:
cc:7f:05:06:a5:0c:14:56:82:43:6a:65:b0:21:82:19:c3:ba:
5c:3b:e0:de:18:58:47:da:88:32:dc:1a:ef:2c:4d:1b:da:32:
e1:12:52:d6:5b:14:ec:0b:2a:12:00:38:9b:0e:92:46:99:4e:
51:93:ba:f3:21:05:ae:1d:92:17:05:52:e9:4c:78:74:2e:32:
90:ab:95:47:ed:1b:6b:e2:83:15:b9:76:08:7c:83:19:19:93:
88:98:ad:7e:d7:dc:b8:db:fa:39:55:f5:d9:3f:57:54:0d:60:
53:de:d1:af:84:f8:77:2a:18:b6:aa:76:cb:3b:59:8b:59:08:
64:81:1d:4f:8a:5e:36:15:e1:e7:81:12:f0:8a:23:b7:2a:c0:
5c:98:08:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:45 2026 by rpki-client