
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
File: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft (raw, json)
Hash identifier: PXKKg6warSNTuyftk7kq2kTWqIRkkwco2PmoWdW4lK4=
Subject key identifier: 3E:B2:11:3F:1F:A0:02:55:9B:04:13:1B:1C:B7:48:1F:B7:DB:14:4C
Authority key identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
Certificate issuer: /CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Certificate serial: 5DE516415E1C8E7B525BE95F763B6E175A6A526E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
Manifest number: 0385
Signing time: Sun 01 Mar 2026 22:46:42 +0000
Manifest this update: Sun 01 Mar 2026 22:41:42 +0000
Manifest next update: Tue 03 Mar 2026 00:37:42 +0000
Files and hashes: 1: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl (hash: coyG67GZsyFtd3RvLHz1nx5zUO8wwp6055caf0ejrEg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e5:16:41:5e:1c:8e:7b:52:5b:e9:5f:76:3b:6e:17:5a:6a:52:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Validity
Not Before: Mar 1 22:41:42 2026 GMT
Not After : Mar 3 00:37:42 2026 GMT
Subject: CN=3EB2113F1FA002559B04131B1CB7481FB7DB144C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:a0:fe:21:45:fa:6e:55:20:ac:13:c6:f9:
04:e0:62:72:e3:c4:a3:e1:05:50:df:24:95:c9:b4:
f7:a1:34:d5:19:ce:e0:2f:e8:fa:a8:de:72:cb:fc:
6b:f1:a5:80:93:8f:0d:14:b9:a7:1b:18:0b:be:fb:
98:c5:f0:3c:a0:42:49:20:c5:4d:1c:d1:77:24:22:
67:69:80:d4:21:d5:7e:ab:3a:35:0e:2c:6e:f3:1e:
e0:2d:bf:40:79:e3:ab:26:45:4c:ba:de:19:d5:c6:
64:85:e7:2c:e6:41:f5:47:13:ba:a6:61:1a:82:50:
4e:4e:8e:ba:d0:a1:95:06:8f:b6:5f:ed:ea:eb:32:
1d:ff:0b:b5:79:cb:12:32:cb:58:a7:2c:82:90:34:
ca:af:63:31:ce:ad:8d:db:b3:69:c2:36:59:87:25:
ba:ab:79:ba:14:88:c3:60:af:52:8f:91:0c:81:a3:
c5:25:f3:2f:f7:46:47:1c:01:a4:f4:5f:49:f7:51:
ff:5f:de:07:cb:71:2e:1b:8d:1a:75:bf:43:fe:43:
43:4a:6e:f1:45:e4:f5:8f:eb:21:50:ac:29:da:0c:
1a:94:ce:f2:bf:8e:af:4e:c9:1c:7a:1f:a3:e7:18:
c2:93:ca:65:3b:99:3f:d5:1e:98:94:38:90:3b:2f:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B2:11:3F:1F:A0:02:55:9B:04:13:1B:1C:B7:48:1F:B7:DB:14:4C
X509v3 Authority Key Identifier:
keyid:63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:a5:45:76:0d:40:bf:77:3e:75:73:7a:48:2e:1c:9b:3a:76:
f5:08:f7:65:08:f0:75:7d:bb:dd:1e:c5:e2:8f:63:d5:0c:23:
02:15:2a:86:50:0f:0a:5d:b2:2a:bc:f2:b0:f7:07:5d:de:62:
0f:95:46:75:4d:6d:23:19:1d:6b:96:42:fd:1d:63:c0:d6:0b:
cf:9a:80:c6:88:17:18:bf:57:8a:c2:d3:5e:8b:d8:a2:4e:b3:
53:c7:fc:68:4e:67:9a:c7:77:f1:30:9f:4d:ea:29:f4:98:65:
90:13:56:fa:9f:0c:c9:58:dc:46:2d:d1:3f:63:41:97:8b:8f:
c8:7c:9c:08:f5:e9:db:3c:14:a0:27:95:a4:1c:6a:60:87:92:
57:5d:75:0c:2d:09:ca:d6:23:b2:9d:77:6a:77:d1:4e:d0:e8:
29:e6:79:d3:5b:15:d7:c2:db:f9:22:4c:cb:d4:44:a3:9a:a9:
19:95:0c:d1:83:b6:7c:d1:e1:56:85:92:00:53:73:97:0d:50:
ef:11:b0:20:48:8b:21:46:37:7c:31:11:ff:35:f6:09:ed:20:
59:cd:b7:be:84:73:06:22:21:bf:64:da:3e:98:01:cf:15:cf:
60:2b:2d:c6:3f:2f:80:03:ed:3b:72:ed:8a:e1:f3:ab:47:a0:
ce:b1:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:26 2026 by rpki-client