Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: FnwYjcnPh++uJ5Yc9tDfNtOF4FZrj7sa0xcMkLaiej8=
Subject key identifier: 6D:B9:76:A0:CD:09:C7:5B:1E:D3:93:94:C0:E5:6D:31:42:2E:B3:A6
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 7CC22436435CFADA67DE7C3F58420AA43C1A73F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: 020B
Signing time: Sun 18 Oct 2026 18:53:33 +0000
Manifest this update: Sun 18 Oct 2026 18:48:33 +0000
Manifest next update: Mon 19 Oct 2026 22:20:33 +0000
Files and hashes: 1: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: XTrRc7BvhR1v4bi5yv/rUwu+Cr89uiOaZylHW/FtRgY=)
2: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: qGmpNNYRNvmfL9Yxb5wl9tHo84/vffpK/ItIjnNIfEE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c2:24:36:43:5c:fa:da:67:de:7c:3f:58:42:0a:a4:3c:1a:73:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Oct 18 18:48:33 2026 GMT
Not After : Oct 19 22:20:33 2026 GMT
Subject: CN=6DB976A0CD09C75B1ED39394C0E56D31422EB3A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:6b:f9:58:45:40:c6:95:ef:fa:b6:5a:0b:
a0:54:7f:03:86:45:37:bf:f9:ea:ea:d7:a8:e4:58:
6f:f1:73:6c:f6:31:db:ed:ff:cf:05:53:95:68:53:
8a:31:e5:dc:b9:2a:e7:c9:c3:3e:8e:cf:69:ec:6f:
c4:4c:7d:34:26:f6:2e:7d:2c:d5:85:64:2d:0a:42:
61:0f:f2:d4:a6:29:9e:a3:04:5c:bc:74:fd:c5:03:
0d:23:3b:ec:38:7c:65:fb:c1:57:1f:d4:1f:ee:4a:
f6:41:39:ba:31:d2:bb:50:78:0f:7f:8b:c6:56:ea:
3a:48:53:e6:e9:dc:0b:7d:dc:25:ec:a9:0a:6b:de:
b6:3f:8d:82:05:e6:95:db:c5:dc:cc:4d:66:5e:eb:
74:bb:c4:03:f1:0d:8f:fe:78:ef:6a:44:a1:d9:bd:
48:22:69:63:e8:dc:50:f3:b9:83:98:1f:b8:47:6a:
9f:1c:e6:34:3b:17:c3:a3:2b:73:20:b9:9d:38:50:
29:bb:7f:99:09:5e:09:f2:28:fb:c1:15:bd:85:a3:
70:ab:5a:a6:3b:80:ac:32:2f:fe:f2:bc:83:a5:e9:
31:d5:f3:f5:28:c6:0e:f0:d7:02:43:89:f0:e0:3b:
c9:69:35:67:ca:a3:2b:db:fb:2b:92:96:7e:7d:3d:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B9:76:A0:CD:09:C7:5B:1E:D3:93:94:C0:E5:6D:31:42:2E:B3:A6
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e1:68:b7:c2:53:0b:78:bd:d4:0c:ca:3e:74:a6:1d:f9:db:
85:13:4d:1a:70:85:1e:87:e5:5e:e5:55:d4:f8:e3:15:9a:6e:
2a:f0:03:75:0e:c4:5b:f0:fe:70:57:2b:be:de:d3:eb:ec:a0:
3b:3a:51:9a:81:82:0e:40:bc:e6:77:c8:fa:65:ff:eb:cb:39:
92:72:20:a1:32:2c:98:9d:d9:20:f0:40:f7:da:0b:93:31:27:
db:3d:9c:91:09:af:5f:06:5b:db:22:73:4c:17:73:85:a1:75:
3d:fe:e8:73:60:85:b8:59:48:8d:06:14:89:64:67:22:e8:52:
ca:2f:20:a0:82:39:b4:7c:25:2c:1c:84:92:76:6e:77:2f:10:
fa:d0:50:44:92:b8:5c:78:4f:5f:11:39:94:13:4c:f9:83:1a:
2f:a2:44:dc:e9:c7:4e:ad:25:43:53:27:26:5f:60:53:f6:d2:
df:89:af:2e:46:12:be:4f:f5:97:b9:d3:5b:ca:3c:2f:76:16:
98:64:8d:23:27:ba:83:71:d2:b5:ac:71:a9:b8:a0:82:ba:79:
13:9d:44:bf:1a:9e:eb:79:30:f0:da:02:1e:ef:00:be:16:06:
7a:73:34:26:fa:2b:b0:af:3f:2f:24:35:df:d1:8c:e0:12:c6:
8a:bf:21:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:38:34 2026 by rpki-client