
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: wazS8V15OEsgJeb9CqgmmjX4OehrhEK9MeYFIU5IQm4=
Subject key identifier: C2:55:92:8C:09:E7:09:B3:A1:7A:90:2E:E3:95:13:34:82:2D:87:C9
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 1266F071FBD0B2FF0F2230DACE76795F15067FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 03E1
Signing time: Tue 04 Aug 2026 12:46:55 +0000
Manifest this update: Tue 04 Aug 2026 12:41:55 +0000
Manifest next update: Wed 05 Aug 2026 13:37:55 +0000
Files and hashes: 1: AS215085.asa (hash: U3O4zRuQeb7MG2IwgLoOGYNSGnZPEXOar9EBCzjvh3o=)
2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: GWzBwczosrw0wDD/n2SeIMcPIHjuIXWF6C1E8I+Wsck=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 13:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:66:f0:71:fb:d0:b2:ff:0f:22:30:da:ce:76:79:5f:15:06:7f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Aug 4 12:41:55 2026 GMT
Not After : Aug 5 13:37:55 2026 GMT
Subject: CN=C255928C09E709B3A17A902EE3951334822D87C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:9f:a8:d9:ca:ea:f8:9b:4c:00:55:49:72:
1c:b4:d9:15:dc:79:a9:d8:73:b8:96:65:ee:93:15:
58:b7:3d:69:d0:c4:7c:bf:9c:aa:54:80:a7:33:9c:
70:ba:a2:c5:75:3a:fd:9f:3e:71:08:58:4c:31:65:
87:dd:4c:95:63:5d:2e:ab:08:00:13:84:2b:b3:05:
c6:14:02:f0:82:69:99:81:4b:ea:31:69:f6:78:cb:
e2:01:26:66:91:df:c6:91:ec:72:0e:e2:16:7b:c7:
74:8c:cf:30:1e:ae:79:22:f7:c2:bb:7e:34:7a:6b:
f8:9b:68:ad:96:56:59:31:34:83:74:8f:82:c8:ad:
a1:e2:c8:3c:5b:46:a4:6f:6e:67:09:ca:47:7d:15:
4e:25:11:94:52:c3:6f:63:31:fc:6a:49:72:37:7f:
07:c8:64:e4:6f:5f:ca:07:ad:c5:15:34:ca:7b:4b:
2b:25:00:fd:62:c9:7a:f5:73:a1:4d:ba:8d:3a:bc:
55:ab:36:48:af:f0:ed:21:84:c4:d9:0b:71:52:6c:
45:09:7e:ce:d7:bf:f8:6b:8b:e1:8b:93:aa:0c:13:
3e:ad:b1:27:a0:8a:4c:fc:58:f3:71:d4:60:51:0e:
ac:c5:cf:a3:ef:9e:08:31:25:b0:6e:f9:8f:36:e4:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:55:92:8C:09:E7:09:B3:A1:7A:90:2E:E3:95:13:34:82:2D:87:C9
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:94:c9:17:9a:cf:2d:57:0f:37:5a:bd:c2:36:f1:49:50:ea:
be:44:19:61:f9:41:2f:52:94:3f:84:79:df:d4:e4:0f:01:c8:
93:a5:61:86:86:b3:70:b6:30:05:f5:5a:71:7c:56:cb:2e:1c:
b0:2f:ce:d6:7b:ef:c0:44:eb:8b:ae:04:02:06:f0:36:a3:87:
7f:c6:26:c3:0d:e1:a2:bc:2a:94:42:c1:1a:14:bb:b0:52:65:
dc:68:0f:cd:a5:b1:7e:09:72:30:dd:c6:95:98:34:0c:d8:c7:
86:90:09:b5:66:9b:40:91:85:03:0c:d4:c9:e1:cf:d7:34:8c:
59:72:5a:e4:14:55:71:b6:da:14:c1:3d:71:9c:2b:85:0c:0e:
7c:22:94:6d:e9:90:97:16:e1:4e:c5:79:f3:1b:ad:05:22:ed:
ba:d5:f9:c1:5d:29:84:49:35:11:66:35:b7:8e:2a:03:30:0e:
18:26:74:5d:6c:59:9a:1c:5b:5f:02:0e:cd:67:80:33:cf:06:
5b:c8:50:b9:4f:87:d5:4a:ef:30:ad:f4:0b:f5:cc:6a:16:2a:
c5:2e:de:98:03:5b:90:01:72:68:af:4b:5e:3f:91:cc:75:f7:
e9:5c:ef:43:11:c4:45:d1:1c:3d:19:55:40:f1:8e:b8:d5:76:
80:53:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 23:47:23 2026 by rpki-client