Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
File: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft (raw, json)
Hash identifier: w57VDcnBHMY+UBHO2fbKqkYvG8SOy6K+QPlcoENQM/w=
Subject key identifier: BC:55:C4:14:DB:28:A4:95:58:C4:F1:86:0C:A6:B7:40:EC:03:98:EE
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Certificate issuer: /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial: 3DE8EF81790941DC1316A455170AE9190F70A55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
Manifest number: 02CD
Signing time: Sat 28 Mar 2026 16:26:42 +0000
Manifest this update: Sat 28 Mar 2026 16:21:42 +0000
Manifest next update: Sun 29 Mar 2026 17:07:42 +0000
Files and hashes: 1: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl (hash: 6ewirgNWYOhWSz3G4XZsIav1raLXcpMiODp4pPDaDlc=)
2: AS211562.asa (hash: 8C3+cv4Ox/77O136RcP0jRWcrYpRs3rcK+fBYsAe678=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl
rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e8:ef:81:79:09:41:dc:13:16:a4:55:17:0a:e9:19:0f:70:a5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
Validity
Not Before: Mar 28 16:21:42 2026 GMT
Not After : Mar 29 17:07:42 2026 GMT
Subject: CN=BC55C414DB28A49558C4F1860CA6B740EC0398EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:a9:b8:73:4a:84:a2:30:87:d5:c0:86:51:
3c:72:57:18:57:e8:e5:46:86:bf:2a:62:09:f4:8e:
1a:7b:0c:66:23:3a:fd:9b:85:0a:0d:ad:b6:be:7d:
6d:60:96:6f:5a:e6:60:aa:e0:b3:ae:a8:79:1a:03:
0f:39:fb:e2:e3:2a:46:db:2d:80:b0:01:7f:79:6e:
11:71:e8:f1:11:a4:d2:72:fe:1e:52:ed:a5:0f:ff:
26:5c:9b:d6:29:b0:86:e6:6c:bd:70:96:37:98:0a:
00:e7:65:24:14:86:4d:fb:8d:a4:5e:1a:6c:90:fe:
8c:59:98:f4:70:fe:f9:88:ec:60:d6:91:82:34:aa:
54:41:cf:9d:cd:8e:7a:3c:5b:4f:11:9d:b0:de:71:
d0:9b:6e:f2:f9:ec:e4:d3:9e:55:ed:97:bc:bc:cb:
73:b2:3d:24:68:a6:2b:9f:01:2e:c8:5d:5c:d6:57:
9f:e4:45:23:b4:98:e4:b8:0b:1a:d0:87:8a:2e:43:
ce:62:a6:32:db:6c:ba:24:ce:68:2f:de:24:bc:82:
c1:6a:26:ff:12:86:7a:c3:6f:03:5d:9a:8f:71:e5:
e9:9a:6f:19:f6:57:15:1c:8c:0e:65:8b:d0:60:49:
4a:e4:ed:18:2b:61:68:24:84:3d:5b:0c:fd:b4:df:
35:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:C4:14:DB:28:A4:95:58:C4:F1:86:0C:A6:B7:40:EC:03:98:EE
X509v3 Authority Key Identifier:
keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7a:e0:12:b2:6c:a9:a5:40:eb:d2:41:12:ec:98:9e:e5:82:
8d:3b:dd:d9:e1:3e:13:32:8a:d7:1b:1a:b3:bf:24:cb:2b:a0:
02:da:23:74:4e:c6:49:a2:dc:38:20:d9:8b:91:7e:13:8d:73:
97:80:d0:5e:be:8f:db:a7:28:e0:49:60:e1:14:6e:3f:13:cd:
b1:a7:0c:89:05:c8:50:08:8b:4b:52:f2:f5:d3:46:6e:12:22:
83:a6:9d:6a:64:ef:61:b0:22:bf:56:9e:18:30:e8:30:8d:94:
f6:57:39:ce:ce:c3:57:a4:a2:ef:93:a5:a7:d0:8d:03:3d:aa:
1e:50:14:64:01:ee:a2:d4:62:ef:9f:30:e5:14:e6:2b:95:fc:
53:fb:f7:91:50:62:94:bb:c3:46:36:f6:93:2f:fd:82:07:ed:
9d:23:e3:65:36:b8:96:51:d7:d2:08:2c:28:50:e2:5a:c3:86:
59:3c:7a:bf:ee:8f:f1:48:d6:e4:66:01:3d:8e:eb:eb:b8:ab:
cb:1a:79:36:11:fc:46:28:d4:41:70:6c:61:f6:64:ad:ee:70:
4f:21:e6:a0:34:d3:6f:6a:57:e5:c8:c3:f3:84:97:59:aa:a3:
90:cd:06:03:a8:98:c5:11:17:3b:0e:38:f3:ea:25:18:7f:a8:
8e:f2:62:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 20:08:26 2026 by rpki-client