Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
File: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft (raw, json)
Hash identifier: 0dg5BsqqxaJ/SQuMvuoMz0gLi6LCme33BsI2zELOFUY=
Subject key identifier: CD:4D:16:C3:F8:84:FD:3E:7A:0A:BA:78:B9:F5:0F:88:9D:83:06:B1
Authority key identifier: 63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
Certificate issuer: /CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Certificate serial: 33ADFA3D7388EAE2428BE7B182CA36B98AA84E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
Manifest number: 03BB
Signing time: Sat 11 Apr 2026 06:00:55 +0000
Manifest this update: Sat 11 Apr 2026 05:55:55 +0000
Manifest next update: Sun 12 Apr 2026 09:42:55 +0000
Files and hashes: 1: 63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl (hash: ISUekdZFIbv+qencMw9vpsSsGBIzKSUwLkkcu0dvkaE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ad:fa:3d:73:88:ea:e2:42:8b:e7:b1:82:ca:36:b9:8a:a8:4e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f7b29371e814336c52d9c43d1af4f9fa33e855
Validity
Not Before: Apr 11 05:55:55 2026 GMT
Not After : Apr 12 09:42:55 2026 GMT
Subject: CN=CD4D16C3F884FD3E7A0ABA78B9F50F889D8306B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e9:d0:46:68:57:e4:9f:a3:92:35:9f:6e:7b:
4f:8b:51:5f:d2:ec:e7:86:6e:1d:d3:a8:b6:b2:f4:
b9:09:66:95:82:1a:9b:62:5b:7e:e6:c2:ec:a0:17:
21:a0:49:4a:59:08:80:ca:f8:a6:21:0a:33:2b:9a:
9c:10:c3:d6:75:5d:34:a6:4d:e9:65:fe:9d:d1:46:
47:f5:f7:e6:ec:e3:d5:f7:ad:62:36:9e:62:e0:38:
ed:04:c9:f0:29:fa:7f:02:63:12:7f:6c:10:89:67:
b9:0f:66:91:e8:2c:ca:0d:c5:d8:e9:70:1b:5f:93:
ec:c6:29:0b:86:74:dc:70:a8:53:1b:70:c7:82:ea:
7d:0d:e3:e6:5e:ad:bd:97:b3:1a:92:a0:06:cd:e0:
f8:86:6f:78:16:14:40:bb:56:dc:4c:d6:0a:9e:a4:
3a:2b:e2:5d:3d:11:38:cb:ba:43:a9:e5:30:8a:92:
04:82:11:d2:82:a7:42:65:36:b7:a1:51:c8:a5:f3:
1b:b9:05:b2:c2:aa:7b:f5:14:72:79:30:6a:9c:9e:
28:57:99:22:e3:e9:00:5b:bb:75:ef:f1:d0:7b:5b:
7c:4d:39:a2:2c:4e:df:f0:90:6c:c5:83:c9:76:c8:
dc:ad:40:3c:ec:16:34:bb:d4:47:64:fa:b2:d0:dd:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4D:16:C3:F8:84:FD:3E:7A:0A:BA:78:B9:F5:0F:88:9D:83:06:B1
X509v3 Authority Key Identifier:
keyid:63:F7:B2:93:71:E8:14:33:6C:52:D9:C4:3D:1A:F4:F9:FA:33:E8:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_eyk3HoFDNsUtnEPRr0-foz6FU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/3/63F7B29371E814336C52D9C43D1AF4F9FA33E855.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7d:6b:94:5d:08:b6:eb:68:2a:82:75:21:fc:d9:99:d2:94:
fe:85:7e:af:fc:86:48:df:b8:1e:60:4d:d5:d2:b6:5a:84:94:
a3:71:44:39:95:24:54:a2:30:9b:d6:5f:e5:cf:ea:60:9d:e9:
82:b4:24:87:a9:41:3a:28:aa:13:1c:fe:0f:02:01:95:64:51:
8b:94:9c:0f:d6:6d:72:f0:37:52:7f:30:30:5e:b7:95:cc:73:
b6:46:a4:3a:7c:b2:50:a8:5f:31:33:95:2c:d7:20:79:1d:ab:
a6:32:6f:3c:13:b6:08:6b:00:3f:3b:9d:b9:a9:b7:b4:18:b7:
cc:04:89:84:67:ba:e1:a8:7e:3e:f5:0a:d4:1a:26:90:bf:7a:
be:2e:25:45:1d:43:42:2b:ad:38:0b:f5:77:33:59:05:d3:c3:
1d:d2:f2:31:df:db:92:39:b1:86:54:f4:dd:28:e9:4d:b9:87:
28:a5:4c:6f:7a:b0:c1:65:d7:2d:2c:ed:f7:65:b1:fe:32:79:
3e:07:88:6e:d3:ba:d5:17:81:5c:72:ae:cf:d0:ca:05:f4:cd:
f3:ee:14:a3:b8:9c:b5:48:9f:ae:20:e8:b5:4e:a8:46:5f:08:
d8:ad:3d:93:c7:8c:65:48:9d:1b:cd:c5:c3:dc:3f:d7:5f:5c:
0a:c0:a3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:14 2026 by rpki-client