Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: U6B3ptzKKlSd6gpMaEi7HlvPXArAC7/ztCkkAy2YoSw=
Subject key identifier: E2:13:89:DF:6E:36:43:F0:1D:6D:62:6A:E7:A0:C0:FC:48:D5:00:B6
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 0324F855A76526ADD591298B66BAA3406B89062D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 0423
Signing time: Fri 18 Sep 2026 14:38:21 +0000
Manifest this update: Fri 18 Sep 2026 14:33:21 +0000
Manifest next update: Sat 19 Sep 2026 16:16:21 +0000
Files and hashes: 1: AS215085.asa (hash: H9lDTGKcl0CBBPreEFyuQCs9bvqxSyfGxBz82Rjt5hI=)
2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: hCQoMVoTAieYiOO/rJuMbB6TdoNrp1ZYjcWRQfWh+EY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:24:f8:55:a7:65:26:ad:d5:91:29:8b:66:ba:a3:40:6b:89:06:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Sep 18 14:33:21 2026 GMT
Not After : Sep 19 16:16:21 2026 GMT
Subject: CN=E21389DF6E3643F01D6D626AE7A0C0FC48D500B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:9c:5f:33:4b:ae:57:e5:c5:0b:d6:f8:8d:
90:51:28:33:7d:06:95:6e:87:98:c3:fe:85:55:22:
93:96:f5:40:8b:de:e0:4f:b7:2f:b4:15:05:b7:91:
21:4b:91:dc:fd:b9:e8:d1:25:f3:cc:09:58:b9:ac:
66:2c:1f:b3:bd:5a:66:7d:7a:7f:cb:79:a2:9a:82:
60:57:cc:5c:f2:8c:ba:35:c4:6a:05:9d:b8:8c:31:
21:93:2c:e4:1d:9e:9b:33:ba:c1:70:7a:dc:b1:86:
48:75:96:31:88:c8:5f:ec:52:4a:fa:c0:9b:4f:4c:
dd:28:3c:a2:25:59:2b:22:e3:25:ea:56:9b:6f:ba:
1d:ad:e9:b5:2e:29:7a:19:93:a6:e8:78:45:81:37:
3e:3f:df:09:d1:09:ab:a3:13:b1:99:59:bc:2a:f4:
bf:15:9d:2c:57:8d:dc:4e:cb:8a:1c:e4:d5:89:8d:
8a:f0:bb:95:b3:28:ed:74:11:e1:00:25:fa:64:59:
97:92:ed:0d:62:4c:e2:35:7b:ba:c4:bf:56:bd:3b:
48:39:59:43:c9:bd:03:f8:57:23:ae:c2:5b:f7:9b:
a7:a1:2d:4a:31:4b:99:29:6c:9d:05:5b:21:93:a9:
a5:98:ab:99:bd:97:40:3e:77:93:30:f3:46:a7:cd:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:13:89:DF:6E:36:43:F0:1D:6D:62:6A:E7:A0:C0:FC:48:D5:00:B6
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3d:31:51:f5:ec:84:d2:98:de:e7:a9:60:d4:02:8e:bd:35:
f1:59:3b:21:dd:2f:b8:b3:6b:44:c0:2f:1f:02:e3:30:91:a8:
fa:04:42:4a:c3:f0:1d:13:c9:03:31:65:63:5a:4d:ca:cf:6d:
13:4e:94:76:ca:b9:bb:97:15:90:51:f0:68:d8:f1:f7:7f:c5:
8e:9b:07:97:00:0d:b7:08:e8:ea:7c:97:75:9b:5a:d0:78:29:
76:29:9f:a7:e8:7f:c8:58:c9:f2:87:fa:0e:ce:34:20:56:94:
e3:7b:fa:cd:2d:e7:c0:20:ab:a5:21:b9:ce:72:c6:25:6a:49:
bd:f5:8b:6b:d2:9a:2b:a4:34:bb:ab:65:45:c6:46:c9:2e:df:
5d:c8:0f:94:7e:c1:b3:04:cb:94:03:25:ae:98:ac:54:0b:fb:
ea:83:23:f7:5d:e0:7a:45:16:0a:fd:2d:af:45:95:9f:62:d0:
f5:ea:61:01:f1:c1:54:66:ea:0a:34:1b:91:26:5c:f8:09:18:
fd:9b:1e:57:87:00:d3:ca:4e:ad:e8:d9:5c:24:25:97:34:68:
ad:1f:b5:47:3f:e5:39:97:3b:92:8c:a9:d7:a7:a7:70:16:86:
ab:1a:cf:3e:70:bb:71:5d:75:24:61:0a:b2:5a:de:89:39:ca:
45:2b:cc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:07:02 2026 by rpki-client