Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft
File: 8ABC3240DDFB03E0CCAA63975F272973E713952B.mft (raw, json)
Hash identifier: r2FULa4WK8HiU6+bi1TWDZrPSwDM8Mj23qGUzncOJKM=
Subject key identifier: 8B:EB:3F:12:C7:44:41:AA:E5:54:8B:8F:64:19:78:A1:E0:D2:F3:83
Authority key identifier: 8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B
Certificate issuer: /CN=8abc3240ddfb03e0ccaa63975f272973e713952b
Certificate serial: 690C9A597C1E24DCA0C082462A6F4180555EF15B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft
Manifest number: 5B
Signing time: Sat 07 Mar 2026 02:09:30 +0000
Manifest this update: Sat 07 Mar 2026 02:04:30 +0000
Manifest next update: Sun 08 Mar 2026 03:15:30 +0000
Files and hashes: 1: AS214223.asa (hash: 7UegyXDHhe1XI9lGimc4evL2pldMV+cdrQzvvjsht9k=)
2: 8ABC3240DDFB03E0CCAA63975F272973E713952B.crl (hash: eKVQ1QGwoGEiG3b/kGAMeQyBFvqPKGmg4aNHP10BVWQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.crl
rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft
rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 03:15:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:0c:9a:59:7c:1e:24:dc:a0:c0:82:46:2a:6f:41:80:55:5e:f1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abc3240ddfb03e0ccaa63975f272973e713952b
Validity
Not Before: Mar 7 02:04:30 2026 GMT
Not After : Mar 8 03:15:30 2026 GMT
Subject: CN=8BEB3F12C74441AAE5548B8F641978A1E0D2F383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:e3:e0:de:8b:2f:e6:12:3d:8f:54:ea:2e:
ba:b3:2f:d0:31:cd:24:76:39:b7:f4:03:eb:a5:38:
89:e3:b9:5d:e5:37:cb:d2:bc:1a:99:53:f4:20:bc:
46:01:97:39:cb:4a:b0:01:5f:04:fc:4d:24:bf:73:
71:15:de:86:e9:ae:b0:eb:04:78:85:9e:d8:e3:3b:
0c:1e:f9:80:98:40:80:71:18:d8:af:4d:c5:2a:66:
f1:e4:04:87:80:70:b4:e5:83:ce:57:28:26:17:4c:
c1:57:3d:49:1d:b5:05:1c:91:1e:fa:66:6b:3c:01:
1e:f5:71:a6:95:bb:0f:4a:c9:83:61:58:76:aa:90:
42:11:f8:b1:a6:95:ad:c7:7d:ab:b6:52:d6:98:6c:
5e:e2:55:ee:69:84:b6:bb:6b:26:6a:75:e7:b1:53:
f6:8b:91:f4:b8:c3:0b:51:0d:09:15:c3:ca:3a:4d:
b4:75:f3:76:4b:4a:0e:0a:22:ab:38:64:35:23:c0:
6e:30:d4:65:cb:81:b0:58:8e:d9:ed:6f:b8:f4:bb:
80:c9:80:f4:15:8f:53:0b:01:c9:e0:59:20:2c:6e:
d8:ed:6d:b9:ff:f5:4f:ac:34:03:a1:f2:03:81:e2:
d9:70:ad:8b:db:a7:e4:16:2d:0d:50:3a:92:0b:23:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EB:3F:12:C7:44:41:AA:E5:54:8B:8F:64:19:78:A1:E0:D2:F3:83
X509v3 Authority Key Identifier:
keyid:8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0a:43:b2:ee:1c:31:fb:99:f5:15:63:27:8f:ca:11:a9:0f:
5f:5e:ee:16:e0:97:24:fa:61:14:dc:17:92:47:e7:2b:fc:39:
fe:0c:33:a0:3f:3a:05:03:0b:cf:93:86:c2:2f:2b:3c:d4:d4:
f8:df:96:8b:28:f4:6c:85:05:61:42:f4:bc:5f:cd:10:73:2b:
b9:e2:76:e3:06:0b:41:06:0f:5b:d7:4d:b7:2d:e9:6e:64:1f:
49:64:7b:14:1a:81:8d:28:f8:f6:82:47:fe:d6:dd:e4:0f:e3:
9a:f2:0f:10:76:ae:03:9a:f9:71:05:fb:a9:13:3e:cb:bc:cd:
0a:21:d1:40:2d:c9:af:97:c5:87:9f:0c:64:c3:03:f5:da:f6:
5a:0e:50:40:d3:dd:e7:bd:dc:77:66:91:8d:2d:da:85:f6:63:
3b:40:a2:1b:51:cf:cb:46:ad:e6:65:da:b9:88:d2:5a:12:70:
42:86:0d:43:10:99:e2:33:9e:78:ed:c1:b5:bd:59:55:4e:79:
e1:d3:d6:a2:a0:3c:5c:73:c7:60:70:5a:3e:4f:ad:c6:07:89:
45:dc:29:af:78:08:45:2c:20:93:0a:df:67:40:bf:a4:30:2a:
ca:3f:ed:11:23:3d:f9:bf:b4:e0:88:1c:c9:c3:74:36:ba:54:
4e:a3:f0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:36:58 2026 by rpki-client