Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: I5sOUBVts065l3u/uELfvy2Pq0fxebhl41042IMNnVc=
Subject key identifier: C6:BD:8B:30:E5:8C:FE:B1:85:DF:98:71:95:06:39:32:70:3E:36:13
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 2E0F68DC15653370BA40816B5CCD165F6FE48223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 035E
Signing time: Sat 16 May 2026 11:10:16 +0000
Manifest this update: Sat 16 May 2026 11:05:16 +0000
Manifest next update: Sun 17 May 2026 14:03:16 +0000
Files and hashes: 1: AS215085.asa (hash: 7a341G7Gffj4oyeRnUz7yyrxEMobRVGoAA9D3EAfXXU=)
2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: b1cOOFB0S5FLhQkEVrXXMzUHFE5sdEtDpjOfJTEIfvc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:0f:68:dc:15:65:33:70:ba:40:81:6b:5c:cd:16:5f:6f:e4:82:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: May 16 11:05:16 2026 GMT
Not After : May 17 14:03:16 2026 GMT
Subject: CN=C6BD8B30E58CFEB185DF987195063932703E3613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:95:96:20:65:ba:f8:80:10:44:06:16:83:
ac:d1:b0:ba:3b:a6:87:52:0e:77:31:3c:65:dd:aa:
4c:5c:21:76:6f:cd:a4:ff:72:7f:d2:25:9d:ec:50:
72:cd:73:66:57:18:0b:3b:cf:59:7e:b6:09:85:ad:
a9:4e:ac:03:e5:47:6a:89:dc:59:02:ec:ab:a7:d0:
ce:91:49:28:85:83:ef:db:11:3d:00:a4:78:5c:ec:
f4:16:e2:a5:eb:8b:85:52:88:12:c4:e0:ce:f2:4c:
7e:6d:db:76:ab:3b:e9:43:7a:ba:49:c1:65:61:f5:
ab:d4:0b:1c:87:07:90:83:4e:ac:73:54:86:69:6a:
9d:30:a8:bd:51:fd:58:c4:68:9c:63:f8:26:11:db:
46:d8:1e:5e:32:ee:d9:5b:42:c4:c1:8a:38:89:43:
a7:8d:c5:5a:ff:80:45:6d:b4:34:41:bb:7e:b6:3c:
89:27:97:f1:62:10:8b:a2:0e:19:35:01:0a:1f:07:
cd:15:d4:28:1b:17:fe:de:7a:52:bd:7f:35:dc:84:
9d:7e:53:1d:96:fe:87:98:b2:6d:c0:69:c5:d1:4f:
6c:d9:8e:38:e0:94:16:36:5b:0b:5d:41:0a:d4:af:
ec:7b:2c:d0:85:58:40:89:04:f3:7b:06:6f:cc:fc:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BD:8B:30:E5:8C:FE:B1:85:DF:98:71:95:06:39:32:70:3E:36:13
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:54:b5:e2:70:0f:bd:47:3d:93:2b:1c:41:45:15:76:c5:b7:
7e:41:fa:d4:78:be:48:d0:77:ae:8a:c3:b2:1b:e6:d8:ab:d6:
90:7e:7d:31:4a:98:4c:65:1b:a2:4f:4f:cb:6f:09:8b:22:df:
34:81:d0:b2:44:6e:ea:67:4f:2b:4d:1e:d0:29:36:bd:af:3c:
72:5a:8e:10:ba:d3:ae:61:7b:12:33:3c:4d:08:62:c5:da:0b:
f4:10:1e:cf:8c:25:e7:70:78:60:d6:21:a2:e1:53:98:6a:62:
2c:bf:64:8e:f1:79:32:28:2b:00:26:79:bb:3e:b7:48:3d:84:
17:0e:a0:08:31:46:6a:fb:01:62:eb:b4:63:ba:d0:b1:b9:3f:
24:53:cb:6c:5f:36:58:b9:00:7f:78:ca:ee:ee:32:14:07:cd:
8c:59:69:bf:a8:71:b9:bd:e0:47:73:1e:01:c2:b4:21:63:43:
af:82:a1:b2:7d:87:06:90:c5:ca:5f:e9:13:1a:bc:a2:c9:3c:
ff:72:15:7e:2d:92:82:f7:ba:7d:43:02:d7:eb:bb:7e:78:d0:
90:cc:18:0b:f8:b7:73:8a:ee:0f:ba:fa:33:25:35:0c:33:5f:
fc:2c:ea:05:a9:e9:97:ad:41:99:ae:0a:48:2e:97:8c:d8:90:
e6:e7:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:24 2026 by rpki-client