Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: QnKY5uWk3kV1hNjou92Awrf9mxgrOILWF9LbguTPGdM=
Subject key identifier: 17:D9:34:E2:6A:1F:A7:29:1B:C4:1A:15:80:1C:2E:FD:BD:66:6B:5B
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 01293899EA793A472CB61B914E3A8CB327AB9284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 04BC
Signing time: Sun 29 Mar 2026 01:04:39 +0000
Manifest this update: Sun 29 Mar 2026 00:59:39 +0000
Manifest next update: Mon 30 Mar 2026 03:53:39 +0000
Files and hashes: 1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: VSheXplaNxRb2OI3KLt6UXtm4+fihAIqWcxSXDHECHw=)
2: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:29:38:99:ea:79:3a:47:2c:b6:1b:91:4e:3a:8c:b3:27:ab:92:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Mar 29 00:59:39 2026 GMT
Not After : Mar 30 03:53:39 2026 GMT
Subject: CN=17D934E26A1FA7291BC41A15801C2EFDBD666B5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:23:58:f4:ea:59:b1:0b:d4:78:94:10:dc:
4b:18:a9:0a:70:54:d2:08:be:b4:8e:b2:d0:5d:6a:
04:03:24:42:99:1f:3d:cf:a1:e3:eb:a2:ba:ff:9a:
2b:e7:20:4f:8e:bd:0f:ab:42:15:d5:ed:c0:4a:2e:
b8:aa:ce:89:13:e8:e4:45:df:21:40:e0:8f:a9:8a:
14:1b:62:7b:c3:0b:5e:d2:37:81:25:8f:47:29:ff:
b0:f9:69:78:48:81:00:f3:78:5d:56:b8:f7:7e:79:
84:21:cf:61:22:0e:29:f3:5d:09:4a:1f:e9:f5:6d:
6c:42:dc:b8:4b:27:11:c9:ac:a0:29:9b:c5:24:84:
8d:d0:e6:7d:15:df:db:03:1f:f1:14:f1:59:3b:48:
cc:2c:2c:a3:5b:84:08:a2:a5:b3:47:e0:32:78:22:
f0:67:f0:6f:9c:1c:98:b1:a0:86:e5:ee:e9:f4:55:
8d:9a:c5:b2:76:de:48:2e:82:b7:35:3e:33:ea:38:
0d:b6:8a:1a:95:80:33:8a:b2:9e:01:47:95:0a:70:
88:23:4a:14:93:7f:a7:b8:01:9a:81:ac:88:c1:7c:
6b:50:31:b6:5e:ca:9d:a0:76:b3:85:68:91:4f:74:
90:85:03:4a:39:ec:80:d9:38:a7:96:4b:de:2f:5e:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D9:34:E2:6A:1F:A7:29:1B:C4:1A:15:80:1C:2E:FD:BD:66:6B:5B
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:94:60:44:2b:3a:16:b9:88:27:b4:e0:66:67:16:f1:45:e7:
85:03:d3:83:ae:08:9c:7e:ab:59:79:11:8b:08:eb:73:16:9c:
b7:96:9f:53:31:83:f7:7a:01:d1:72:a2:fc:67:bc:72:b3:33:
a0:9d:c9:d6:de:d8:85:10:8a:e2:7e:66:55:16:2c:3c:13:7a:
d9:b3:ce:9e:80:57:38:ae:d1:4c:c6:e1:55:ed:c8:77:fc:5b:
21:d9:8f:95:3a:24:55:de:b2:2c:75:9d:a7:38:89:2d:04:78:
7d:91:38:b1:e0:b9:82:4b:2c:07:42:47:c6:e3:3c:8d:73:b4:
11:99:bf:d2:8d:6f:0c:65:b8:87:88:51:58:64:9c:d1:26:21:
0c:b9:c8:98:dd:e9:d2:76:8e:30:72:31:fd:c9:c3:2c:75:51:
3f:be:26:f0:56:0e:b6:30:75:ab:8d:b1:b5:a2:10:02:1c:40:
81:fc:c2:c2:b5:b5:3b:97:e7:94:13:3b:f3:2d:a4:f9:1e:7f:
0d:08:97:ea:f7:5d:9f:60:50:74:1b:e5:39:a7:f5:b4:a7:61:
0d:55:1b:73:3b:60:48:0a:14:03:ed:97:4c:31:07:a9:72:a9:
8f:15:bc:0d:fc:62:26:7a:99:61:71:76:c8:d3:a3:84:30:84:
b0:b3:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:58 2026 by rpki-client