Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
File: 883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json)
Hash identifier: avce+j0jm3HePiMgWsHff/WBxUzQYp6yDSPQqko3/F4=
Subject key identifier: D2:2D:2C:7C:65:B1:25:F9:1A:21:8B:A1:EA:A5:3E:F9:7C:C7:6E:2C
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Certificate issuer: /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial: 437D72E139EAB90633D1E01BE9108928398642F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
Manifest number: EA
Signing time: Thu 11 Jun 2026 01:33:44 +0000
Manifest this update: Thu 11 Jun 2026 01:28:44 +0000
Manifest next update: Fri 12 Jun 2026 03:02:44 +0000
Files and hashes: 1: AS213605.asa (hash: /VNMUci42IHQGokYnePPu+nWfjn6z+W+mTSXWO4Akec=)
2: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=)
3: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: vX8FFCxsZ46Hn5c2O7m1HhXHAwZEV0wYoiOhSIOvq2Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 03:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:7d:72:e1:39:ea:b9:06:33:d1:e0:1b:e9:10:89:28:39:86:42:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
Validity
Not Before: Jun 11 01:28:44 2026 GMT
Not After : Jun 12 03:02:44 2026 GMT
Subject: CN=D22D2C7C65B125F91A218BA1EAA53EF97CC76E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:73:8a:6e:22:be:7a:d8:34:bd:a1:1e:75:
b4:a6:21:3f:6c:cb:3e:f6:f5:25:e7:76:94:8e:5f:
ec:55:13:eb:29:b4:5c:b8:d2:8b:b2:0d:39:49:af:
2e:2f:a1:05:ee:20:3a:e4:b2:6a:d5:b4:24:a9:cf:
6d:0a:2a:9d:c8:61:95:b9:7d:71:06:a8:4a:6e:a0:
65:27:fe:35:e7:74:84:ad:19:67:f3:a1:7a:6a:e8:
59:30:da:d9:be:25:73:e1:cd:64:5a:42:b5:e1:a4:
7d:7a:73:89:ba:f5:40:2e:07:fa:36:ef:94:d6:26:
b6:2b:e9:73:93:a8:78:b3:34:b9:2a:8f:8c:0c:ac:
73:b2:6e:5e:b8:8e:d6:6d:97:e0:e8:f4:c7:36:9f:
6f:b4:ab:be:4b:cf:81:5d:fd:45:9b:f2:82:a0:57:
aa:06:01:18:f0:56:1c:5d:f0:9c:af:d8:70:8d:6d:
72:92:d6:4a:b3:68:90:d4:53:3a:60:c9:0c:99:0c:
41:ee:46:ca:96:f3:c5:a2:d6:f4:25:ed:5e:e4:89:
12:35:1c:1b:aa:4c:a5:2d:cb:3e:f3:0f:70:fb:16:
6b:42:f0:40:68:7e:bc:24:8a:50:f0:91:ea:4f:35:
89:e9:e1:f6:83:bf:38:ae:c3:ac:9f:6f:ef:02:62:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2D:2C:7C:65:B1:25:F9:1A:21:8B:A1:EA:A5:3E:F9:7C:C7:6E:2C
X509v3 Authority Key Identifier:
keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:36:4a:b1:ee:b5:87:c4:d4:74:64:63:04:81:2e:18:f0:32:
7f:28:c8:28:bc:13:5f:e3:ac:77:d2:fd:19:36:2d:4e:fc:c8:
0a:ab:bc:53:6d:aa:6d:45:4f:b8:a9:3a:1a:51:3a:8a:06:f0:
3a:40:18:e3:66:85:a4:d7:8d:77:3e:b7:f5:8a:75:ca:3a:8e:
f7:7a:71:94:f7:5f:37:a9:47:a0:02:1c:17:68:0d:9d:ea:d3:
ff:b1:5d:51:6a:ac:2e:f9:ce:6b:42:d7:d9:ce:0d:ab:04:41:
9d:34:90:76:da:7d:df:bf:91:67:d7:68:4e:c2:54:25:39:2f:
ea:43:ed:2b:a8:69:6a:b9:7b:6b:d4:d6:2a:8f:74:0d:b8:e5:
42:f3:f9:ca:8f:47:c0:b5:c6:2a:d4:aa:2d:d8:30:db:43:07:
85:83:c5:c2:a2:76:8b:7a:71:be:9a:b5:9b:3a:89:25:7b:87:
64:08:19:4d:e9:22:95:c9:4b:2d:7b:83:38:df:a9:b9:21:da:
42:b1:ce:89:6a:8f:71:f0:b3:ff:bd:42:e3:64:5a:2b:65:47:
90:f8:f7:48:0e:07:33:01:3d:d3:74:c5:0f:1a:59:9f:b4:1a:
b4:e4:23:a2:67:df:78:f5:97:b1:c0:03:0f:df:7e:8f:21:1d:
98:fa:96:37
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQ31y4TnquQYz0eAb6RCJKDmGQvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgzOTMxYWFiOGIxMzYzMDE1YmM4ZmRkZjBiNTgyMzIx
NzY3NDQwYTAeFw0yNjA2MTEwMTI4NDRaFw0yNjA2MTIwMzAyNDRaMDMxMTAvBgNV
BAMTKEQyMkQyQzdDNjVCMTI1RjkxQTIxOEJBMUVBQTUzRUY5N0NDNzZFMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/f3OKbiK+etg0vaEedbSmIT9s
yz729SXndpSOX+xVE+sptFy40ouyDTlJry4voQXuIDrksmrVtCSpz20KKp3IYZW5
fXEGqEpuoGUn/jXndIStGWfzoXpq6Fkw2tm+JXPhzWRaQrXhpH16c4m69UAuB/o2
75TWJrYr6XOTqHizNLkqj4wMrHOybl64jtZtl+Do9Mc2n2+0q75Lz4Fd/UWb8oKg
V6oGARjwVhxd8Jyv2HCNbXKS1kqzaJDUUzpgyQyZDEHuRsqW88Wi1vQl7V7kiRI1
HBuqTKUtyz7zD3D7FmtC8EBofrwkilDwkepPNYnp4faDvziuw6yfb+8CYo4NAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU0i0sfGWxJfkaIYuh6qU++XzHbiwwHwYDVR0j
BBgwFoAUiDkxqrixNjAVvI/d8LWCMhdnRAowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUx
MTA2LzAvODgzOTMxQUFCOEIxMzYzMDE1QkM4RkRERjBCNTgyMzIxNzY3NDQwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lEa3hxcml4TmpBVnZJX2Q4TFdDTWhk
blJBby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wOTJkMTZmMi05
YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYvMC84ODM5MzFBQUI4QjEzNjMwMTVC
QzhGRERGMEI1ODIzMjE3Njc0NDBBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDZKse61h8TUdGRjBIEu
GPAyfyjIKLwTX+Osd9L9GTYtTvzICqu8U22qbUVPuKk6GlE6igbwOkAY42aFpNeN
dz639Yp1yjqO93pxlPdfN6lHoAIcF2gNnerT/7FdUWqsLvnOa0LX2c4NqwRBnTSQ
dtp937+RZ9doTsJUJTkv6kPtK6hparl7a9TWKo90DbjlQvP5yo9HwLXGKtSqLdgw
20MHhYPFwqJ2i3pxvpq1mzqJJXuHZAgZTekilclLLXuDON+puSHaQrHOiWqPcfCz
/71C42RaK2VHkPj3SA4HMwE903TFDxpZn7QatOQjomffePWXscADD99+jyEdmPqW
Nw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 20:50:08 2026 by rpki-client