Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
File: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft (raw, json)
Hash identifier: AYtSU2ZwQyODCwCf3fC8Ac5Owuew/UgH28oVZ/wsbXQ=
Subject key identifier: 66:D0:E5:B0:10:5D:75:29:ED:8D:55:E7:F4:A7:92:60:DF:01:14:E8
Authority key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Certificate issuer: /CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Certificate serial: 722341E2A040398D68F3FFEE25FE4BC7F18238A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
Manifest number: 022D
Signing time: Sat 10 Oct 2026 05:35:32 +0000
Manifest this update: Sat 10 Oct 2026 05:30:32 +0000
Manifest next update: Sun 11 Oct 2026 06:38:32 +0000
Files and hashes: 1: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl (hash: 45Hbhu2Uq13fZwu54kLF4EKOVx5X3gS4sqAZ+ginq38=)
2: AS215216.asa (hash: 0S0UZXwUh8izwqjeqSWK8dmeJh+jfpdEMtPa5HnqZwE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 06:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:23:41:e2:a0:40:39:8d:68:f3:ff:ee:25:fe:4b:c7:f1:82:38:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Validity
Not Before: Oct 10 05:30:32 2026 GMT
Not After : Oct 11 06:38:32 2026 GMT
Subject: CN=66D0E5B0105D7529ED8D55E7F4A79260DF0114E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:b0:e1:a8:39:67:80:fa:50:75:49:83:83:
2d:44:a6:50:d9:37:22:72:a5:11:b5:06:80:e9:18:
a7:21:b1:00:b7:6b:6a:0e:de:de:1f:b8:b8:d9:0b:
59:26:a9:e7:a3:71:39:de:15:74:a4:d7:3b:62:83:
55:fc:31:17:b3:e0:30:90:29:e0:81:ce:45:c4:da:
24:a6:5f:82:3d:48:81:8c:ac:da:87:5e:d1:05:53:
c9:67:9c:76:ab:1e:e1:f4:e3:dd:f9:b6:83:3d:13:
5f:a8:38:bc:f2:67:c7:de:dd:c5:f9:1e:35:66:8e:
9e:e8:76:03:e0:6f:ff:a0:93:e7:ea:19:5b:1f:9c:
8b:a9:3a:c6:67:99:35:e6:50:a6:be:bc:61:63:da:
9e:2c:37:44:40:83:11:85:be:fa:61:83:04:4e:f3:
ad:6d:b2:35:4f:21:c6:ea:94:ef:6c:0d:d8:ae:a0:
9a:c7:35:cb:28:eb:05:58:5f:ec:9b:f7:d9:42:dd:
b0:e9:3f:84:c0:13:e0:07:04:46:95:c0:aa:13:6c:
e1:70:d8:08:f3:8e:06:c0:dc:cc:b6:34:d3:08:45:
7a:30:02:76:19:4c:73:1c:9b:33:b9:c8:a4:ae:7d:
36:84:13:b8:bc:7b:90:99:55:ee:a4:a5:86:b6:d2:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D0:E5:B0:10:5D:75:29:ED:8D:55:E7:F4:A7:92:60:DF:01:14:E8
X509v3 Authority Key Identifier:
keyid:A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8e:e1:4e:ec:d4:09:93:0d:e7:34:d2:f8:26:f4:44:b3:e5:
2b:3e:ac:16:75:d6:41:e5:db:54:b1:3c:5d:df:0d:df:79:b2:
86:61:6d:52:6f:77:16:e2:8a:05:92:e6:24:6b:e9:63:bf:31:
1f:da:9d:3c:43:e7:66:e6:8c:f7:ae:1d:2d:dc:51:5b:8b:76:
70:33:c6:fc:b6:b1:7f:6d:11:ce:74:2b:5d:92:d9:44:46:88:
89:97:72:0b:74:82:11:f2:c2:94:37:46:a5:17:76:71:b7:53:
0f:0f:00:6c:fe:76:fa:3f:d7:08:17:c3:b6:e7:41:2f:7e:4f:
b1:a6:ad:9f:8a:e0:8c:9c:95:6c:57:e4:39:b9:f5:3f:38:8f:
6e:33:28:31:94:71:4c:1f:f0:09:f1:c2:a8:2e:74:1c:95:07:
9a:a7:f6:01:83:9f:1a:e1:79:32:93:41:d7:02:ce:22:b8:39:
a0:ee:e8:24:91:cb:3b:bb:2a:11:c1:fe:ba:31:c9:51:28:4d:
21:5a:da:b9:e9:02:b3:be:39:64:80:e1:1e:a8:12:79:ed:16:
cc:99:0f:b1:86:17:c5:a1:82:ac:51:16:71:b6:9d:2c:69:ff:
16:2b:2b:58:9f:65:d9:0d:04:cd:2a:08:21:7b:9a:da:a4:27:
09:c7:9f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:16:35 2026 by rpki-client