Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
File: C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft (raw, json)
Hash identifier: 8iLQ+Rxe7YNXZBaRAZmW3RoHY4kX6kqJ/YmztrFYxEU=
Subject key identifier: 31:A6:36:31:3E:B9:13:30:88:9A:24:26:C7:40:3C:9B:DD:0F:41:89
Authority key identifier: C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB
Certificate issuer: /CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
Certificate serial: 6143ACFCAF59632E58ABF543EF3FC91A9E0E68D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
Manifest number: 4D
Signing time: Fri 30 Oct 2026 06:32:32 +0000
Manifest this update: Fri 30 Oct 2026 06:27:32 +0000
Manifest next update: Sat 31 Oct 2026 09:26:32 +0000
Files and hashes: 1: C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl (hash: oOJGAuRMJAkvbZEPyLe/XGPSJC9don9ifbV5ifEwwBU=)
2: AS201398.asa (hash: RZO4ieNHqVPcfn3XDiP+r+hyFXWvPYLfC8/YrW201iY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:43:ac:fc:af:59:63:2e:58:ab:f5:43:ef:3f:c9:1a:9e:0e:68:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
Validity
Not Before: Oct 30 06:27:32 2026 GMT
Not After : Oct 31 09:26:32 2026 GMT
Subject: CN=31A636313EB91330889A2426C7403C9BDD0F4189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:a9:b4:9f:67:2b:17:27:40:07:77:ca:51:
9b:f9:9f:f5:d6:f8:b3:c4:7d:d9:bc:f6:64:9e:6a:
f7:9c:ab:03:02:e6:03:74:dd:ba:e6:c3:1f:03:ff:
12:83:77:53:d6:45:e0:66:a6:0f:a8:03:0d:cf:75:
75:b2:fa:a1:96:05:4a:2f:cd:58:bb:2b:8f:73:84:
9b:ba:05:25:42:d4:ec:e4:70:9b:19:47:bc:0a:cb:
f9:0a:ac:ba:27:34:2d:eb:de:be:21:6e:93:c0:66:
cd:c9:e1:17:8d:ba:a3:5a:42:33:61:01:b2:40:0d:
70:5e:f4:6a:af:6f:5c:35:84:6a:eb:fc:11:64:31:
43:6c:13:b6:0f:ae:b5:4e:2f:23:6e:9c:49:95:e6:
31:38:a4:84:09:c3:53:4a:a0:cb:78:28:fa:88:d3:
f7:3c:28:d3:52:59:93:aa:62:2b:d0:87:b3:aa:ad:
33:5d:2d:42:78:70:ee:ce:16:14:45:01:d5:80:a3:
ff:2b:91:91:e1:55:7e:e1:82:0a:dd:0a:45:56:13:
8a:6d:0c:35:2a:0a:f4:5d:91:8d:30:13:b3:28:b6:
12:bc:05:ae:fb:38:2f:e8:bb:3c:fa:7f:ee:43:84:
03:f8:6b:4c:c7:94:c2:d0:b3:a0:82:b0:c3:ef:73:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A6:36:31:3E:B9:13:30:88:9A:24:26:C7:40:3C:9B:DD:0F:41:89
X509v3 Authority Key Identifier:
keyid:C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fd:49:32:39:eb:a4:46:99:13:89:d3:31:92:3e:0f:3f:16:
9d:c2:07:93:21:35:23:19:f8:73:85:99:dc:4e:f9:9d:d6:c4:
11:5b:b1:1b:a4:55:fe:20:c2:00:d2:71:49:e0:21:03:9d:09:
c2:3c:43:38:6a:07:de:af:fa:51:ce:70:95:d9:e3:83:45:1f:
dd:54:80:8f:ad:ff:a5:28:33:22:6e:c6:28:5e:4e:50:c7:04:
70:16:9b:85:1a:35:84:9e:b9:a8:f6:4d:03:dd:74:46:67:06:
c2:fe:53:4f:37:cd:1b:9f:c6:bd:0f:72:18:c1:6f:4d:75:9e:
5c:78:b8:76:53:3b:39:2b:84:f3:df:01:07:d7:31:a5:f9:e8:
fd:b3:7a:7e:74:e6:86:15:c5:15:5d:84:34:49:e5:40:0e:58:
f4:65:07:88:bd:a4:d5:ea:0a:88:07:ea:69:91:f5:a2:55:b8:
a1:ff:8c:7c:5d:21:22:79:90:9a:3f:df:39:05:d1:3e:a2:80:
2b:40:7a:43:66:6a:b2:0a:b6:32:32:3d:67:28:4b:c6:61:1d:
db:e1:d5:97:ec:c2:be:4b:71:8b:09:38:31:a9:e8:46:be:20:
bf:72:fa:19:cd:da:a6:2d:69:2d:b6:23:9b:67:4b:c3:43:8e:
30:a7:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:30:54 2026 by rpki-client