Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft
File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.mft (raw, json)
Hash identifier: 8ku0NibUS8jyIoMU2NncN7qFQIHwyHCJWmS9l2aolCo=
Subject key identifier: 82:71:00:37:5C:71:84:BC:10:70:45:C1:DF:D0:DA:2E:C6:E2:46:CE
Authority key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90
Certificate issuer: /CN=473F2085BBDEE25875BDA78FE4469ABD64842C90
Certificate serial: 69D8C322965AD0D0616EAC293A28B5209CE202DE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft
Manifest number: 010E
Signing time: Thu 17 Sep 2026 11:00:26 +0000
Manifest this update: Thu 17 Sep 2026 10:55:26 +0000
Manifest next update: Fri 18 Sep 2026 14:19:26 +0000
Files and hashes: 1: 326130663a316363353a6330303a3a2f34302d3430203d3e203136353039.roa (hash: /pjSdo6P5ObrblgcKEBLlIUUBG/7q/P+4j9pwr7w/AA=)
2: 326130663a316363353a6331303a3a2f34382d3438203d3e203136353039.roa (hash: 4SYTgrOCG2FYpag6C+ppMxCCvZpu0RbhjyZuGqevVqM=)
3: 326130663a316363353a6331303a3a2f34342d3434203d3e203136353039.roa (hash: ATedQ+3zQziEY8U3qucxBIEqTX/EAoCEJyo6U7SVoEs=)
4: 326130663a316363353a6330313a3a2f34382d3438203d3e20323038373534.roa (hash: JkPR+6DL2BF+IXmgtcu5Xr/cIcwDqQ5FmBNhSSiWfvU=)
5: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: 7R/AqvSPd+mjbQXVUntn+5w6+Rg2rnPKWKoHVT2xT+M=)
6: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: 4dmGplxsB4MdWDNWjWF0Dx41BrwXk8ckrpCB2PWeI6E=)
7: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: CeuYfTbMRgfjzuFv0VeMFMIF0V2bsX3gw5vHgqx/z/I=)
8: 473F2085BBDEE25875BDA78FE4469ABD64842C90.crl (hash: 3njah+XK3Oy0hufHkli1lRGlAAUexgBj5Zbxg35y/K8=)
9: 326130663a316363353a6330313a3a2f34382d3438203d3e203136353039.roa (hash: Yvt5YX4c4Xx6kQpxqVwm8jklLdlOCY10EsleESIkzFQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d8:c3:22:96:5a:d0:d0:61:6e:ac:29:3a:28:b5:20:9c:e2:02:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90
Validity
Not Before: Sep 17 10:55:26 2026 GMT
Not After : Sep 18 14:19:26 2026 GMT
Subject: CN=827100375C7184BC107045C1DFD0DA2EC6E246CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0c:cd:ca:7c:56:5c:1e:f3:e8:82:59:d5:fe:
7c:ad:f0:61:4f:c7:1b:c1:5d:1c:c5:b0:d5:99:0f:
ea:b5:09:2d:dc:dc:c1:06:b2:ce:5a:a5:c7:2d:01:
37:60:32:34:7a:03:86:4b:16:b0:6e:1a:b6:c2:80:
05:94:3d:ad:37:cc:67:9a:85:e5:71:21:38:4b:ee:
33:55:64:02:ec:76:81:b2:5f:d0:fb:53:e4:fc:78:
48:8c:5c:86:01:b2:08:37:86:94:3b:75:4d:24:a1:
7a:a8:00:e7:c3:2c:05:de:87:72:3c:51:81:11:3f:
1f:f5:22:b0:ca:30:b8:ad:0a:c0:22:8c:b6:b7:ee:
61:8f:ff:58:49:35:b6:9d:0b:1c:1f:f6:42:84:e7:
4d:5a:4d:54:74:26:c0:16:77:5f:18:04:7b:df:a9:
e1:03:8c:48:21:36:67:71:38:47:38:7b:44:0a:9a:
e0:f6:7e:50:18:2d:3e:e1:41:2b:fa:2e:14:67:b6:
af:a1:1b:c8:0b:5c:b0:18:78:c0:c1:c4:df:00:c4:
78:1e:d2:34:d9:f0:6b:f0:6e:ad:de:e4:af:ca:74:
bc:51:2e:33:d9:42:75:6a:a9:49:fe:95:c7:5c:c4:
5d:99:7a:31:58:03:6e:fc:dd:1c:66:d2:0a:10:a4:
4d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:71:00:37:5C:71:84:BC:10:70:45:C1:DF:D0:DA:2E:C6:E2:46:CE
X509v3 Authority Key Identifier:
keyid:47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b6:35:0a:c0:bb:6a:6a:71:ff:9b:d7:d3:17:40:df:ae:98:
3e:0c:83:12:d0:ce:d7:d7:96:88:23:e5:98:9f:78:72:e3:34:
b6:77:2a:d0:d5:e0:65:2b:16:be:95:05:4e:b7:4b:85:ed:6e:
4c:b2:e4:06:d7:b2:98:36:fa:58:1d:32:ca:5e:69:98:53:b4:
ba:02:f3:d3:c3:0b:5e:5e:4d:92:84:8e:68:d5:4f:8b:ad:ba:
a2:36:19:3a:f1:38:92:4e:f9:b7:64:95:8c:b5:ff:e0:43:df:
2c:83:a1:03:0e:44:ac:d2:6d:49:26:97:a4:8c:ab:71:10:f1:
ca:f6:f2:9c:86:0c:20:2c:55:e3:45:1b:a9:00:3c:c6:ea:bf:
d4:c7:1a:12:c1:74:af:f6:fb:4a:dc:cb:17:4b:0f:ff:c0:f4:
9a:e3:76:91:1b:77:a8:5f:82:a7:c2:45:0e:94:ff:53:dd:63:
58:82:c0:30:38:37:56:20:18:88:3e:d5:4b:14:ab:9c:43:2b:
ef:53:11:f5:b5:26:5e:45:ae:af:ce:28:15:89:a3:bf:4d:61:
ee:2b:80:13:9c:76:de:1f:10:b4:0b:52:5f:cf:d5:30:b4:5d:
98:81:9c:dc:75:4e:23:b2:27:6b:dc:65:5f:5c:94:30:ae:dd:
f4:53:30:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:58:33 2026 by rpki-client