Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
File: FB64D48D941F2F324279CF863188D26D2056D11D.mft (raw, json)
Hash identifier: ytW1urdU5P8jA4h99Lb/Yeiql5yuS3ErT6PmduWEoEU=
Subject key identifier: 40:DF:F6:D2:2B:8D:E2:E0:04:5B:79:6A:1E:3B:26:DA:50:EA:51:32
Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
Certificate issuer: /CN=fb64d48d941f2f324279cf863188d26d2056d11d
Certificate serial: 020DA30B0C2E730CBA063A5E730C792A45619D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
Manifest number: 042C
Signing time: Fri 20 Mar 2026 16:15:07 +0000
Manifest this update: Fri 20 Mar 2026 16:10:07 +0000
Manifest next update: Sat 21 Mar 2026 19:04:07 +0000
Files and hashes: 1: FB64D48D941F2F324279CF863188D26D2056D11D.crl (hash: OWTmGfgcYYvXGdXqx/3PacBg5KCSTjHIsJtyTkYSqEA=)
2: AS216375.asa (hash: Is18bo2gvq7cfPyUjZtt2qFIiddFBmM/O7y3HvC32i0=)
3: AS44817.asa (hash: TksAuZIALC6QJijLSEyaZHd5acOZblz7LjHZG52qDUI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 19:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0d:a3:0b:0c:2e:73:0c:ba:06:3a:5e:73:0c:79:2a:45:61:9d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d
Validity
Not Before: Mar 20 16:10:07 2026 GMT
Not After : Mar 21 19:04:07 2026 GMT
Subject: CN=40DFF6D22B8DE2E0045B796A1E3B26DA50EA5132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:0e:a2:fb:bc:d2:64:e6:7e:86:17:21:03:
e9:82:44:53:02:86:58:7d:b2:d4:60:16:11:a7:0c:
77:be:b6:94:10:22:6d:24:f6:59:49:15:1b:ca:84:
42:cb:1e:20:97:0c:42:71:e9:c3:72:b0:65:98:61:
47:02:7a:70:78:f5:6b:dc:68:94:f5:53:56:d4:21:
ac:ae:2e:75:89:27:a3:df:4b:ef:2a:7b:42:36:53:
66:dc:55:83:4f:89:36:20:6e:92:dd:62:ee:89:75:
ab:1e:5b:ed:7a:85:0c:1f:f4:9b:75:10:de:bd:eb:
9c:3e:38:c1:00:0d:9b:93:eb:ff:54:70:1f:4d:ad:
30:b6:ac:28:7e:43:82:19:ec:77:4d:b1:ca:5a:a5:
a8:bf:1b:03:a9:3a:6b:3d:c7:83:79:1b:d9:6f:05:
f3:a8:a4:48:33:63:b5:01:63:57:66:85:17:05:71:
e6:e8:0b:31:95:d4:c1:55:42:8c:da:15:2d:56:be:
39:7e:1f:56:0f:99:05:18:8b:cf:1e:4e:49:e3:3f:
6b:b3:f5:22:de:5e:be:e2:5d:f8:6e:07:0d:19:83:
3c:50:d1:eb:d4:8b:cc:3c:7b:0b:03:5a:93:53:97:
19:79:1a:0e:52:dc:83:85:f1:18:47:38:69:37:9e:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DF:F6:D2:2B:8D:E2:E0:04:5B:79:6A:1E:3B:26:DA:50:EA:51:32
X509v3 Authority Key Identifier:
keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c1:73:32:f0:22:a2:22:0b:40:b4:86:57:65:44:50:65:81:
6d:83:96:1e:49:57:f7:5c:c0:05:cc:86:78:de:97:c1:1f:58:
bd:07:39:9f:6e:43:b4:be:dd:2b:e8:5a:96:72:0b:42:38:cf:
cb:23:09:9e:13:65:ce:58:49:77:19:4e:97:b6:a7:6f:b1:8b:
ca:a2:3b:51:20:43:65:ff:cd:05:03:3c:ef:6f:22:63:59:f7:
06:44:89:08:26:32:4f:07:23:03:1f:b4:c2:2f:8d:48:ef:93:
57:33:1a:9b:f9:7d:e5:a5:9e:10:a2:5e:67:01:dc:66:48:b0:
f6:c6:56:ac:1b:a4:97:de:77:f4:86:40:01:8c:e7:1b:28:43:
38:82:ca:2c:d0:1c:fd:46:0c:19:db:b2:4b:90:8a:f7:f2:fb:
ac:c0:af:42:68:b7:fd:29:49:9e:99:e1:b8:f5:2a:11:72:31:
eb:5c:b0:66:13:6d:a0:52:85:85:c1:2a:30:fb:84:ee:cf:8b:
ae:78:c7:ee:74:49:e5:de:ad:2c:e0:3c:c7:29:11:50:05:76:
ea:0d:fc:80:da:ad:d0:b6:51:eb:f3:86:66:d3:59:ee:f5:5b:
d6:b9:24:f7:ec:c9:5d:78:98:e3:50:48:9f:b9:66:fe:8a:b0:
d6:9d:12:a4
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUAg2jCwwucwy6Bjpecwx5KkVhnSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmI2NGQ0OGQ5NDFmMmYzMjQyNzljZjg2MzE4OGQyNmQy
MDU2ZDExZDAeFw0yNjAzMjAxNjEwMDdaFw0yNjAzMjExOTA0MDdaMDMxMTAvBgNV
BAMTKDQwREZGNkQyMkI4REUyRTAwNDVCNzk2QTFFM0IyNkRBNTBFQTUxMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMA6i+7zSZOZ+hhchA+mCRFMC
hlh9stRgFhGnDHe+tpQQIm0k9llJFRvKhELLHiCXDEJx6cNysGWYYUcCenB49Wvc
aJT1U1bUIayuLnWJJ6PfS+8qe0I2U2bcVYNPiTYgbpLdYu6JdaseW+16hQwf9Jt1
EN6965w+OMEADZuT6/9UcB9NrTC2rCh+Q4IZ7HdNscpapai/GwOpOms9x4N5G9lv
BfOopEgzY7UBY1dmhRcFceboCzGV1MFVQozaFS1Wvjl+H1YPmQUYi88eTknjP2uz
9SLeXr7iXfhuBw0ZgzxQ0evUi8w8ewsDWpNTlxl5Gg5S3IOF8RhHOGk3njYrAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUQN/20iuN4uAEW3lqHjsm2lDqUTIwHwYDVR0j
BBgwFoAU+2TUjZQfLzJCec+GMYjSbSBW0R0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4
NzU1LzAvRkI2NEQ0OEQ5NDFGMkYzMjQyNzlDRjg2MzE4OEQyNkQyMDU2RDExRC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtMlRValpRZkx6SkNlYy1HTVlqU2JT
QlcwUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQt
MDJmMC00NjU3LTkwMjItZDJiODNjZmY4NzU1LzAvRkI2NEQ0OEQ5NDFGMkYzMjQy
NzlDRjg2MzE4OEQyNkQyMDU2RDExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF3BczLwIqIiC0C0hldl
RFBlgW2Dlh5JV/dcwAXMhnjel8EfWL0HOZ9uQ7S+3SvoWpZyC0I4z8sjCZ4TZc5Y
SXcZTpe2p2+xi8qiO1EgQ2X/zQUDPO9vImNZ9wZEiQgmMk8HIwMftMIvjUjvk1cz
Gpv5feWlnhCiXmcB3GZIsPbGVqwbpJfed/SGQAGM5xsoQziCyizQHP1GDBnbskuQ
ivfy+6zAr0Jot/0pSZ6Z4bj1KhFyMetcsGYTbaBShYXBKjD7hO7Pi654x+50SeXe
rSzgPMcpEVAFduoN/IDardC2UevzhmbTWe71W9a5JPfsyV14mONQSJ+5Zv6KsNad
EqQ=
-----END CERTIFICATE-----
Generated at Sat Mar 21 10:57:59 2026 by rpki-client