
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
File: 883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json)
Hash identifier: XvmRaHw9C2B8wH3L7Y8DHU5p7g0RBLu4+ZdKQuFbPLU=
Subject key identifier: D7:10:63:DC:01:30:6B:07:F5:0B:5A:96:C0:18:E8:66:D8:E0:16:AC
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Certificate issuer: /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial: 204EF577C2ACA2F76C3ABDB2DF7F922B0F1526C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
Manifest number: 6A
Signing time: Thu 12 Mar 2026 05:48:31 +0000
Manifest this update: Thu 12 Mar 2026 05:43:31 +0000
Manifest next update: Fri 13 Mar 2026 05:48:31 +0000
Files and hashes: 1: AS213605.asa (hash: B68nuYOmBkr1PN0uV5jrjgUKWdkDbfDhxV5SNj6JuWc=)
2: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: kOYRYjSf0EUGtI/DEJQyJdIrBNYFlMwP/JoFj2jkvMM=)
3: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 05:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:4e:f5:77:c2:ac:a2:f7:6c:3a:bd:b2:df:7f:92:2b:0f:15:26:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
Validity
Not Before: Mar 12 05:43:31 2026 GMT
Not After : Mar 13 05:48:31 2026 GMT
Subject: CN=D71063DC01306B07F50B5A96C018E866D8E016AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:45:a5:d2:04:11:5c:da:f1:f2:56:7c:90:
68:ac:ca:56:50:68:02:fd:0b:56:68:b6:77:6e:f0:
10:fc:76:b9:22:6e:5c:60:52:b0:7b:6d:9f:23:2f:
81:3e:dc:b2:7a:7b:68:9b:a9:90:d9:4b:b1:8c:15:
11:4a:7c:51:2e:60:70:10:63:b4:11:f6:72:b1:ed:
57:8a:46:bb:a7:ed:4a:7c:67:48:e6:f1:6d:c8:b6:
97:e4:8b:f6:0c:85:66:16:e1:f0:6a:9c:e1:e7:15:
55:58:32:5d:41:f4:2e:7f:5f:d4:5c:27:5b:5e:cd:
65:40:e5:36:09:dc:91:af:35:b3:d5:24:90:66:02:
71:e5:25:5e:34:27:e1:2e:da:05:06:73:d8:0c:ae:
2f:d3:f3:91:09:cd:df:b8:d7:a2:46:cd:fa:aa:e0:
21:cc:28:d4:56:0c:98:72:28:90:f3:b2:b0:26:cc:
e2:ae:5c:30:6f:9a:e6:25:e7:ef:27:5d:a3:c1:b1:
60:d8:f3:a0:d6:00:34:09:35:3a:ae:fe:13:70:37:
c0:71:41:34:36:a2:88:ce:a3:06:b0:17:cd:f6:ee:
87:a7:09:aa:95:dd:7e:30:59:58:9e:db:74:bf:51:
df:b2:83:1f:c0:5f:51:78:50:f6:94:80:b2:29:58:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:10:63:DC:01:30:6B:07:F5:0B:5A:96:C0:18:E8:66:D8:E0:16:AC
X509v3 Authority Key Identifier:
keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:aa:65:a9:46:a8:e3:99:a7:94:86:04:56:d8:d3:1f:6d:e2:
8f:5d:ee:0e:ab:72:05:86:3f:25:4e:96:f4:45:63:38:b3:b3:
df:76:3e:b4:18:48:8e:84:1a:f6:fb:29:5a:0b:f8:80:c9:7a:
28:2d:02:41:6e:c8:9c:4b:c4:d5:cb:27:bb:0f:a6:df:90:ce:
c2:32:30:71:5c:f9:33:ba:6b:af:5b:60:9e:74:a5:f6:a9:17:
6c:90:a1:7b:a7:4b:ae:84:90:56:f4:1f:e1:3b:ed:cc:4c:d0:
e2:b9:0f:0c:c4:95:bf:fb:92:94:ec:a0:9a:bd:16:19:f8:d5:
5d:be:a5:7f:24:76:f7:1e:f3:e9:cd:04:73:af:4a:7e:50:ab:
c5:f0:06:58:ef:8e:cf:55:fb:4a:6a:2a:c6:db:bf:d2:d0:51:
ac:a1:3c:5e:0f:64:ff:6a:ba:ec:10:c4:e4:35:26:43:91:21:
f4:a9:24:52:53:fe:00:e2:ce:f0:17:74:c3:ec:8d:7d:f7:4e:
34:c8:26:66:80:e2:6d:77:19:e9:85:b8:4a:f4:69:32:74:a0:
32:c1:17:5c:cb:2c:1f:56:84:a5:9d:32:3f:06:7f:61:8f:cf:
06:c2:fa:c2:83:c9:e7:e4:e3:de:4e:1e:67:4a:97:1d:08:59:
88:18:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:40:23 2026 by rpki-client