Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier: CruflhZJOSZPScwsKBiFtPJlLzNL0u8URJS2rJi5LZ4=
Subject key identifier: 28:1A:DA:BC:C0:0D:B2:5A:49:D7:0C:1C:1E:99:A9:64:38:C9:9E:3F
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial: 7906CECAF65AE5DED2667D02392124DF4E5485A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number: 03C2
Signing time: Sat 11 Apr 2026 07:00:55 +0000
Manifest this update: Sat 11 Apr 2026 06:55:55 +0000
Manifest next update: Sun 12 Apr 2026 09:44:55 +0000
Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: 7TTu0p2tNJv1m3J4CTVwWkNBrOVGBdyTASH9hBjgIJU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:06:ce:ca:f6:5a:e5:de:d2:66:7d:02:39:21:24:df:4e:54:85:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
Validity
Not Before: Apr 11 06:55:55 2026 GMT
Not After : Apr 12 09:44:55 2026 GMT
Subject: CN=281ADABCC00DB25A49D70C1C1E99A96438C99E3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:45:66:f9:6e:6c:dd:82:be:0c:a7:6e:26:
0a:7f:6d:bc:63:8c:06:d3:d3:65:02:ed:ec:38:c0:
d5:d4:0e:a2:71:2c:75:da:e4:78:bf:df:f6:fb:be:
4f:25:0d:24:3d:12:bc:b4:ad:3e:9e:e1:8b:4b:ad:
8d:07:6a:9e:eb:98:42:e0:47:05:4e:44:95:3f:47:
f6:3b:0f:c4:1c:a7:d2:3c:38:c9:37:c6:fd:2b:23:
b1:cc:c6:49:7d:76:d8:bf:74:f8:22:a4:1c:63:3b:
3a:eb:a1:d6:01:82:06:dc:78:00:35:50:94:84:87:
01:d2:fe:da:a8:78:a9:8b:11:1d:e2:1a:0d:b5:e4:
d2:23:6b:80:a9:6a:17:16:ea:82:f9:b5:bf:d0:fa:
22:55:60:92:0f:7e:6f:cc:88:76:c9:64:f0:ed:d2:
ef:c4:b1:79:55:83:7b:48:35:c2:c8:44:99:bb:5e:
9f:d0:20:e8:6f:f0:ef:b1:0c:9c:ed:78:00:b4:c1:
49:e6:4d:71:2b:5a:92:46:40:5c:c4:d4:0c:51:55:
5d:c5:e4:5a:09:95:c0:50:01:ba:ee:62:a0:74:56:
e1:08:bd:fc:b5:32:ca:ff:42:14:71:3b:2d:5b:92:
8d:2b:c1:13:e4:6c:25:ed:4e:48:4c:fc:31:33:d3:
10:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1A:DA:BC:C0:0D:B2:5A:49:D7:0C:1C:1E:99:A9:64:38:C9:9E:3F
X509v3 Authority Key Identifier:
keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a9:fa:2c:64:9b:b3:99:89:b7:af:c5:07:d0:58:1e:52:eb:
08:27:c6:60:bc:6a:60:dd:56:fa:a6:ff:a2:08:c3:49:3d:fb:
86:06:cf:41:1b:b0:be:f9:89:fd:e7:f9:99:00:b5:66:35:49:
51:48:59:d9:a6:78:06:98:0f:d5:8c:89:76:3d:5c:a4:3b:f5:
12:2b:82:b8:bf:37:80:57:e7:ad:df:41:23:1e:3e:5d:5e:8c:
07:61:d6:7c:a0:fc:45:9a:c1:de:ea:8e:47:d0:3b:8c:8d:02:
30:33:72:35:a3:50:00:ba:64:8a:ba:ac:4c:53:e3:18:b7:fd:
8c:5e:6b:a4:9f:ae:77:a8:77:52:5c:6f:15:5e:37:63:d2:bb:
2d:2b:6b:04:63:45:64:82:91:ad:ce:86:75:e8:b9:33:30:31:
cb:da:9c:88:d0:aa:0a:d3:42:98:93:93:23:ad:84:96:6e:d0:
7b:72:d1:0d:16:f9:87:93:5d:19:ab:45:1d:a6:62:13:57:6b:
6d:bb:42:2f:bc:85:12:a3:4b:13:77:a6:0d:d5:83:f1:f5:4e:
f8:f6:ff:fb:75:dd:a6:ce:50:7b:df:4b:e7:16:46:39:3c:52:
7b:37:d2:1d:9d:70:3d:ab:da:da:fb:04:f4:f9:84:4f:d9:3a:
81:24:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:50 2026 by rpki-client