Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: wMQ3DUG9JcGDJdwE3hprlbRa4hvxbQdPLzRK6khD/Z4=
Subject key identifier: 20:7E:9C:C2:F9:75:C9:C7:07:24:E4:BE:44:9A:C7:DC:E9:AD:96:60
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 7725AAA6A04F816A77659F00A381A3B04C9E3A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 0319
Signing time: Sun 29 Mar 2026 04:44:56 +0000
Manifest this update: Sun 29 Mar 2026 04:39:56 +0000
Manifest next update: Mon 30 Mar 2026 05:27:56 +0000
Files and hashes: 1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: QJWt/2qy4BsjxEDkqeGs4ZP+K2XcmOotCvyKogf//js=)
2: AS215085.asa (hash: 7a341G7Gffj4oyeRnUz7yyrxEMobRVGoAA9D3EAfXXU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:25:aa:a6:a0:4f:81:6a:77:65:9f:00:a3:81:a3:b0:4c:9e:3a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Mar 29 04:39:56 2026 GMT
Not After : Mar 30 05:27:56 2026 GMT
Subject: CN=207E9CC2F975C9C70724E4BE449AC7DCE9AD9660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:d8:0f:bf:49:fa:b8:fc:41:a2:94:37:ae:
af:5f:88:4c:1e:c1:c0:15:c6:4f:7c:30:ac:f5:4b:
38:eb:15:66:16:6f:ec:bf:09:c2:83:3d:73:91:98:
da:8a:b4:fb:2a:23:60:dc:d5:61:d8:fb:fb:6b:16:
ea:11:76:05:9c:ef:1c:8e:e7:71:30:80:6b:57:a4:
28:7b:17:37:2b:3b:e3:e5:29:d5:61:3e:6d:7b:20:
99:13:99:08:10:29:b0:c3:68:a2:5c:a8:40:1b:bb:
fd:49:c2:8b:e8:3e:8c:33:81:00:cb:b0:e9:28:83:
21:3e:b3:56:7e:64:19:8d:f1:f6:05:75:d1:f7:9e:
38:bb:e0:51:c1:47:83:d9:44:8b:f3:6e:57:81:6e:
0b:7c:aa:70:cd:be:bf:ca:bc:51:2a:de:0a:9e:e2:
97:52:18:53:f6:90:f5:48:da:04:0a:3d:a5:30:c9:
f1:70:ee:b3:aa:be:7d:35:3a:ac:a1:93:ed:7e:e6:
aa:1a:7d:69:e7:d4:bc:b8:dd:cb:11:1e:20:d8:5f:
ac:66:2d:aa:57:a6:a5:7b:57:f6:6e:45:23:37:02:
9f:8c:14:8b:8f:61:87:42:4b:f3:57:92:47:b5:7b:
cf:e2:bd:12:af:1d:09:29:b8:21:d0:be:c7:c3:e1:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7E:9C:C2:F9:75:C9:C7:07:24:E4:BE:44:9A:C7:DC:E9:AD:96:60
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:70:b1:26:5c:71:c4:3a:95:54:1c:b6:ac:d1:bb:25:8c:59:
48:13:71:38:fc:2e:f0:3d:e3:97:00:65:32:9c:f1:5f:34:a7:
84:0e:3e:94:7d:cf:41:8b:a0:5e:dd:7c:05:0b:47:cb:df:3e:
a7:70:8c:e5:1e:13:b6:95:12:e9:e0:5d:37:83:45:7b:fb:b0:
c8:0a:e0:f9:a5:ee:33:46:32:e9:cc:6e:f9:c5:98:e3:92:86:
96:6b:b4:18:c8:d8:9d:b7:2d:77:23:47:f4:13:e0:ed:44:11:
53:47:79:8f:68:20:df:3b:11:f6:04:5a:6d:c9:e5:64:8e:66:
d4:e2:ab:59:0e:dd:79:7c:77:06:a2:7f:5b:2a:96:08:79:d4:
db:9b:31:e5:1f:94:a8:91:ed:6f:2b:96:a9:d6:df:f6:0d:92:
2b:36:ff:09:fb:ff:8b:02:c2:42:d6:fb:8c:47:6e:14:fb:ff:
53:1c:46:9f:5d:b2:bc:5f:28:70:57:47:58:38:c1:f6:8c:2a:
c1:24:65:1d:f4:7f:bb:d7:a6:c8:d9:ff:02:ed:6e:41:3c:e3:
e6:83:1c:20:f5:23:62:b4:b2:06:ee:60:ee:e6:b1:66:3f:11:
94:db:26:eb:e6:70:ca:72:53:84:9e:b6:7b:a7:27:88:89:12:
db:09:82:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:54 2026 by rpki-client