
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File: 600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier: qkfEox1cWRmA9zAizUzb+WUvAkRRNNEqUdvSd9Jf5+8=
Subject key identifier: 21:C5:12:9E:3F:DB:55:62:D8:03:0A:11:43:11:A8:F0:20:57:E1:0A
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial: 66DCE70C5CC2ABBFDAF86D5AE2BCB9EBB74E29F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number: 0407
Signing time: Fri 29 May 2026 10:05:12 +0000
Manifest this update: Fri 29 May 2026 10:00:12 +0000
Manifest next update: Sat 30 May 2026 12:23:12 +0000
Files and hashes: 1: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
2: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
3: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
4: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: YrqpJHiDKhvUfFitv0sxkQek5QZozaHjPgkuzbLWyT0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:dc:e7:0c:5c:c2:ab:bf:da:f8:6d:5a:e2:bc:b9:eb:b7:4e:29:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Validity
Not Before: May 29 10:00:12 2026 GMT
Not After : May 30 12:23:12 2026 GMT
Subject: CN=21C5129E3FDB5562D8030A114311A8F02057E10A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:9c:14:20:02:c3:ca:6f:f1:b0:d1:70:bf:
72:93:ea:09:78:25:2b:9a:57:20:05:62:12:88:aa:
dd:8e:e7:dc:37:80:c6:12:a8:74:bd:d9:87:7f:7b:
33:82:04:40:87:db:37:fc:a6:ec:65:f5:90:8f:76:
9c:6b:ff:9a:20:f8:bf:42:b5:d4:13:76:8e:d7:b8:
c1:93:bc:85:0e:4f:1d:de:8a:fb:8f:1e:9b:2e:f9:
8f:db:40:5e:fa:40:b1:75:93:0d:86:e2:e0:83:ff:
39:fd:66:66:3f:9f:2e:65:34:3b:1f:79:44:b8:b0:
c4:bb:41:5d:eb:f4:32:06:6e:48:33:62:35:98:05:
23:fb:2b:d7:41:fb:22:fc:9d:30:7c:da:cb:2d:73:
d0:e2:9f:20:75:a2:b1:7f:9f:cc:cb:c6:79:54:18:
73:66:c1:d0:ec:51:c1:0b:d5:61:d9:d5:92:a4:aa:
bf:e7:86:c5:5c:01:70:3e:53:f6:0e:54:37:77:8f:
7d:7d:b8:9c:1f:d5:dd:d0:49:2b:27:d4:b9:e0:b7:
7e:80:f1:15:44:11:18:e4:84:3d:f2:2d:88:96:73:
8b:6b:66:33:02:d5:be:4d:7f:f8:ec:d4:90:20:22:
8f:a1:4f:c8:f6:de:9e:ab:ff:4f:6b:0f:cf:f2:a4:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C5:12:9E:3F:DB:55:62:D8:03:0A:11:43:11:A8:F0:20:57:E1:0A
X509v3 Authority Key Identifier:
keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:10:79:e1:71:4f:f8:56:84:0c:74:66:a6:62:2e:7f:ec:8a:
94:8e:2b:74:71:fa:36:8c:6c:c6:d3:7a:10:56:bd:d1:7b:c3:
02:1d:70:15:67:35:82:1d:09:d4:90:58:ed:68:ab:15:44:ed:
42:d4:c3:a9:92:e1:d4:60:01:60:f3:fb:46:1c:af:aa:d3:6e:
35:d1:5b:e7:34:17:89:b7:a5:e9:20:aa:d0:ce:61:b7:57:4d:
01:99:a9:cb:db:96:bb:ad:61:12:9c:a7:cc:91:e3:e5:79:25:
eb:b2:46:f7:03:7d:db:41:3f:49:ad:22:19:95:e9:59:f5:df:
8d:57:89:5f:73:cf:87:16:cf:b7:1f:8c:ac:a0:98:30:bc:af:
e9:80:39:bc:ca:d0:57:05:a4:f9:a4:42:d4:2d:cd:e8:2e:47:
c1:5c:08:da:a3:55:d3:79:cf:03:36:67:c2:ea:83:96:68:c7:
f5:de:b5:d4:bb:c5:e3:80:3c:5f:2a:35:18:77:a5:da:fa:a8:
9d:bf:57:73:1a:5b:a2:e1:67:7e:a6:7c:df:10:80:f1:54:55:
2e:3f:1b:99:f5:41:e3:a3:98:5b:df:0d:2f:3b:91:02:96:63:
8d:92:59:fa:32:13:47:93:56:8b:31:c4:de:33:39:68:a0:83:
63:22:de:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 16:11:22 2026 by rpki-client