Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
File: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft (raw, json)
Hash identifier: ZPrL7zYB6DLV8DnUBx0decppFJ5YVN0gKWWQTEbspTI=
Subject key identifier: AA:82:69:98:C1:AC:4A:73:7C:45:95:4D:1C:0F:CA:21:D0:5D:2F:0D
Authority key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Certificate issuer: /CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Certificate serial: 52B003240D819AEF84AC3C102D72C9E5D32A8816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
Manifest number: 01E2
Signing time: Fri 14 Aug 2026 15:25:25 +0000
Manifest this update: Fri 14 Aug 2026 15:20:25 +0000
Manifest next update: Sat 15 Aug 2026 18:47:25 +0000
Files and hashes: 1: AS215216.asa (hash: 0S0UZXwUh8izwqjeqSWK8dmeJh+jfpdEMtPa5HnqZwE=)
2: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl (hash: /F4oMlo4WoHDMmXdQf6f7KtGSKsuoUgl2N+qGX4e034=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b0:03:24:0d:81:9a:ef:84:ac:3c:10:2d:72:c9:e5:d3:2a:88:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Validity
Not Before: Aug 14 15:20:25 2026 GMT
Not After : Aug 15 18:47:25 2026 GMT
Subject: CN=AA826998C1AC4A737C45954D1C0FCA21D05D2F0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:0f:ae:53:fa:8e:56:55:80:98:09:cd:28:
a0:fc:91:3c:98:54:a5:db:e9:bf:0f:98:d0:47:3a:
02:8a:58:04:d3:90:bb:9e:98:8f:a4:14:37:c7:8c:
0a:86:12:5d:62:1b:b1:7e:00:d9:82:ea:04:b2:99:
3c:c4:15:29:b2:6a:62:60:9d:19:1f:9c:a2:62:07:
7e:e3:3c:0f:e9:93:4a:c8:50:1e:33:53:eb:a1:59:
6d:eb:a5:b5:f7:73:df:fa:70:ed:09:2e:e1:34:7a:
eb:8d:45:71:e0:0e:27:97:b6:46:05:b6:46:31:c9:
3f:12:2f:e1:67:05:b7:02:97:d6:31:e2:48:90:05:
d2:23:56:e4:2f:13:98:bb:f5:76:ef:2b:23:9b:74:
1c:41:af:23:21:f9:20:75:8e:b2:b5:f3:e0:65:06:
9f:ce:ee:4e:01:f2:90:41:84:59:39:f9:7d:2a:95:
99:ea:fb:72:39:4d:e3:c6:34:cc:6c:41:cf:1d:68:
47:f1:7f:8f:f7:d1:4b:65:9b:e1:e1:e4:39:35:fd:
70:7c:5b:72:39:93:c2:80:ea:b8:2a:0b:47:fb:7c:
21:81:b4:d2:76:bd:b5:28:9a:29:94:7a:90:9f:79:
07:a9:02:f5:b7:c6:ea:e4:9e:f8:cf:74:c3:59:ff:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:82:69:98:C1:AC:4A:73:7C:45:95:4D:1C:0F:CA:21:D0:5D:2F:0D
X509v3 Authority Key Identifier:
keyid:A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:55:a2:ff:f6:96:56:c2:0e:fb:9d:bb:54:24:48:57:ba:0b:
c7:fb:c2:3f:86:aa:74:a8:65:2f:e0:23:8f:ce:e5:83:24:14:
fd:55:e1:c5:ed:84:33:91:32:31:9b:24:12:12:f4:22:63:f4:
38:a4:12:86:f2:79:86:b6:aa:35:98:23:46:59:59:af:92:d5:
53:d7:46:2a:e9:ce:eb:cf:53:8b:c2:e6:65:41:7d:a7:b3:7d:
d4:0a:2b:30:0d:66:ed:2c:2b:dc:aa:ad:c7:02:db:25:64:c7:
e1:38:e4:99:0d:60:11:44:bb:d8:2c:bf:a7:ed:9e:68:1b:94:
41:b8:ac:ee:12:fe:13:d7:95:82:49:77:99:42:50:d3:87:1d:
bc:08:2c:ee:5f:08:83:9d:00:6d:e7:20:60:44:dc:94:d1:22:
85:d8:ab:61:9d:9d:f7:b6:b3:81:4c:1b:cc:06:f6:dd:b2:9d:
24:e7:48:09:f6:f6:9f:db:41:df:2d:b4:74:59:37:31:f7:23:
e5:25:9f:56:34:8d:18:9c:5b:62:27:7c:bf:bd:0e:1b:f7:25:
42:53:56:b8:84:a5:e1:5b:2d:83:4f:ca:19:c7:e5:ad:59:27:
ad:7d:d4:fe:23:1c:7b:a4:7f:0b:5a:46:c5:f3:3d:e1:4a:c9:
de:9a:e1:a9
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUrADJA2Bmu+ErDwQLXLJ5dMqiBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTlkZDlmNmI2NTQ5MWQ5MGM0ZTE5ZTljOTYwMjUyNDY2
YzJjOWQxMjAeFw0yNjA4MTQxNTIwMjVaFw0yNjA4MTUxODQ3MjVaMDMxMTAvBgNV
BAMTKEFBODI2OTk4QzFBQzRBNzM3QzQ1OTU0RDFDMEZDQTIxRDA1RDJGMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfTw+uU/qOVlWAmAnNKKD8kTyY
VKXb6b8PmNBHOgKKWATTkLuemI+kFDfHjAqGEl1iG7F+ANmC6gSymTzEFSmyamJg
nRkfnKJiB37jPA/pk0rIUB4zU+uhWW3rpbX3c9/6cO0JLuE0euuNRXHgDieXtkYF
tkYxyT8SL+FnBbcCl9Yx4kiQBdIjVuQvE5i79XbvKyObdBxBryMh+SB1jrK18+Bl
Bp/O7k4B8pBBhFk5+X0qlZnq+3I5TePGNMxsQc8daEfxf4/30Utlm+Hh5Dk1/XB8
W3I5k8KA6rgqC0f7fCGBtNJ2vbUomimUepCfeQepAvW3xurknvjPdMNZ/x5XAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUqoJpmMGsSnN8RZVNHA/KIdBdLw0wHwYDVR0j
BBgwFoAUqd2fa2VJHZDE4Z6clgJSRmwsnRIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjRkYjZlMGUtNjk2Yy00Zjg5LThkNDgtMjc0NTU5NzAw
YWY1LzEvQTlERDlGNkI2NTQ5MUQ5MEM0RTE5RTlDOTYwMjUyNDY2QzJDOUQxMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FkMmZhMlZKSFpERTRaNmNsZ0pTUm13
c25SSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yNGRiNmUwZS02
OTZjLTRmODktOGQ0OC0yNzQ1NTk3MDBhZjUvMS9BOUREOUY2QjY1NDkxRDkwQzRF
MTlFOUM5NjAyNTI0NjZDMkM5RDEyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1Wi//aWVsIO+527VCRI
V7oLx/vCP4aqdKhlL+Ajj87lgyQU/VXhxe2EM5EyMZskEhL0ImP0OKQShvJ5hraq
NZgjRllZr5LVU9dGKunO689Ti8LmZUF9p7N91AorMA1m7Swr3KqtxwLbJWTH4Tjk
mQ1gEUS72Cy/p+2eaBuUQbis7hL+E9eVgkl3mUJQ04cdvAgs7l8Ig50AbecgYETc
lNEihdirYZ2d97azgUwbzAb23bKdJOdICfb2n9tB3y20dFk3Mfcj5SWfVjSNGJxb
Yid8v70OG/clQlNWuISl4Vstg0/KGcflrVknrX3U/iMce6R/C1pGxfM94UrJ3prh
qQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 11:17:37 2026 by rpki-client