Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
File: 883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json)
Hash identifier: 7eeoSQjRNIl6VSmS7o63oCoZxfWFG3JKHmDT2lODxhY=
Subject key identifier: D8:AE:8C:EC:F6:8E:D0:05:1C:4B:E2:52:40:4E:AD:47:8D:99:5A:6E
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Certificate issuer: /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial: 533A9770297CB227A6F8A38A2133CEBCD7AEC4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
Manifest number: AA
Signing time: Sun 26 Apr 2026 17:46:50 +0000
Manifest this update: Sun 26 Apr 2026 17:41:50 +0000
Manifest next update: Mon 27 Apr 2026 21:20:50 +0000
Files and hashes: 1: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=)
2: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: hRK7ro59MYISXMuv8NtmfuvTJwmmepCu3lIQlB5Jy+g=)
3: AS213605.asa (hash: B68nuYOmBkr1PN0uV5jrjgUKWdkDbfDhxV5SNj6JuWc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 21:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:3a:97:70:29:7c:b2:27:a6:f8:a3:8a:21:33:ce:bc:d7:ae:c4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
Validity
Not Before: Apr 26 17:41:50 2026 GMT
Not After : Apr 27 21:20:50 2026 GMT
Subject: CN=D8AE8CECF68ED0051C4BE252404EAD478D995A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ae:5e:25:1e:24:d5:97:33:70:9a:5e:bd:55:
c0:d1:0d:98:5c:d6:c3:47:92:05:db:1e:dd:47:74:
c8:bf:12:28:db:37:94:6c:c0:7c:30:cb:09:ab:a3:
b5:d7:69:0c:74:fc:f4:94:1f:e9:5b:e6:bc:4b:45:
b0:e1:35:84:09:60:56:08:35:30:8b:f5:40:98:c1:
b1:d6:da:9f:d6:ef:1c:35:c7:c0:5a:d5:38:26:6e:
bd:4e:8b:37:69:80:76:79:a6:73:be:d6:b3:bc:fc:
d7:0d:a4:a8:c8:da:84:1b:e6:84:fb:f3:b7:c9:8b:
6f:f2:93:1e:87:a4:5d:80:73:60:18:ab:4b:9a:7b:
b0:6a:9c:30:40:66:fb:e1:09:d9:9f:51:4c:0b:01:
d9:d0:d3:3e:88:b2:c8:64:93:3d:98:97:9a:2c:35:
5b:4e:23:e1:b4:9c:04:69:22:2f:5d:b9:f1:9d:a0:
f1:31:6c:1b:18:7d:dd:df:75:cc:4e:b4:04:60:7c:
ad:5d:8b:e2:0a:d2:e7:f3:4a:b6:d2:f8:36:a0:38:
28:81:ae:52:53:d3:28:ca:e2:ff:e3:12:94:2c:49:
da:cb:93:14:02:ad:4c:a2:8e:1a:28:ce:cf:f4:c9:
09:3f:5d:3b:f8:7c:10:27:2c:fd:33:4c:c5:1b:6a:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AE:8C:EC:F6:8E:D0:05:1C:4B:E2:52:40:4E:AD:47:8D:99:5A:6E
X509v3 Authority Key Identifier:
keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:5e:9d:bc:78:7f:c8:ce:6e:f8:de:bb:ef:83:d5:02:4f:0c:
0d:71:0a:02:bc:73:fa:94:63:12:90:70:5d:67:cb:9a:2c:74:
e3:02:fe:35:07:bc:00:a7:b6:cb:5d:c1:33:e4:54:f4:41:69:
45:d9:26:56:8d:f2:eb:da:fb:73:30:5b:f0:3a:50:e1:78:8e:
bc:17:38:f0:6f:dc:6e:4f:c1:35:e9:e5:45:9e:7e:a8:26:74:
39:fd:45:f6:96:4d:20:78:e8:5e:5d:43:81:5a:54:bb:31:09:
67:20:23:c3:b4:59:51:b4:a6:e8:17:07:59:9b:57:fb:5a:6f:
ae:2f:1a:50:5e:6b:74:bb:36:9f:fe:51:34:67:d7:eb:d1:f0:
6e:2e:bb:16:04:84:f7:75:96:9c:61:9b:ff:6b:35:99:e7:fb:
d5:b2:18:a3:07:86:a9:cd:17:a9:3d:18:66:65:68:76:ea:10:
d0:6f:3b:5e:b8:68:78:55:ef:b8:9a:48:ef:5e:08:d8:3b:9d:
9b:1c:e7:4d:b8:b5:8a:ea:30:83:ea:fc:44:8c:b8:e6:28:49:
79:f6:db:dd:1f:17:09:97:f5:e9:88:28:48:ba:4f:f3:32:c5:
cb:25:c6:43:4d:07:96:39:0f:8e:43:fc:3a:06:50:b9:d8:49:
a3:ff:16:53
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUzqXcCl8siem+KOKITPOvNeuxN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgzOTMxYWFiOGIxMzYzMDE1YmM4ZmRkZjBiNTgyMzIx
NzY3NDQwYTAeFw0yNjA0MjYxNzQxNTBaFw0yNjA0MjcyMTIwNTBaMDMxMTAvBgNV
BAMTKEQ4QUU4Q0VDRjY4RUQwMDUxQzRCRTI1MjQwNEVBRDQ3OEQ5OTVBNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrl4lHiTVlzNwml69VcDRDZhc
1sNHkgXbHt1HdMi/EijbN5RswHwwywmro7XXaQx0/PSUH+lb5rxLRbDhNYQJYFYI
NTCL9UCYwbHW2p/W7xw1x8Ba1Tgmbr1OizdpgHZ5pnO+1rO8/NcNpKjI2oQb5oT7
87fJi2/ykx6HpF2Ac2AYq0uae7BqnDBAZvvhCdmfUUwLAdnQ0z6Isshkkz2Yl5os
NVtOI+G0nARpIi9dufGdoPExbBsYfd3fdcxOtARgfK1di+IK0ufzSrbS+DagOCiB
rlJT0yjK4v/jEpQsSdrLkxQCrUyijhoozs/0yQk/XTv4fBAnLP0zTMUbat/fAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU2K6M7PaO0AUcS+JSQE6tR42ZWm4wHwYDVR0j
BBgwFoAUiDkxqrixNjAVvI/d8LWCMhdnRAowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx
MTA2LzAvODgzOTMxQUFCOEIxMzYzMDE1QkM4RkRERjBCNTgyMzIxNzY3NDQwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lEa3hxcml4TmpBVnZJX2Q4TFdDTWhk
blJBby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wOTJkMTZmMi05
YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMC84ODM5MzFBQUI4QjEzNjMwMTVC
QzhGRERGMEI1ODIzMjE3Njc0NDBBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz16dvHh/yM5u+N6774PV
Ak8MDXEKArxz+pRjEpBwXWfLmix04wL+NQe8AKe2y13BM+RU9EFpRdkmVo3y69r7
czBb8DpQ4XiOvBc48G/cbk/BNenlRZ5+qCZ0Of1F9pZNIHjoXl1DgVpUuzEJZyAj
w7RZUbSm6BcHWZtX+1pvri8aUF5rdLs2n/5RNGfX69Hwbi67FgSE93WWnGGb/2s1
mef71bIYoweGqc0XqT0YZmVoduoQ0G87XrhoeFXvuJpI714I2DudmxznTbi1iuow
g+r8RIy45ihJefbb3R8XCZf16YgoSLpP8zLFyyXGQ00HljkPjkP8OgZQudhJo/8W
Uw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:03:20 2026 by rpki-client