Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File: 53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier: iUhvtVL7VdLEcfTjqPfaWhTdfPia2v7Vy7wKZGyDQrw=
Subject key identifier: 36:6F:C7:F7:D3:9D:D9:11:28:0A:9B:B2:79:A1:AA:A2:D8:6F:42:45
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer: /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial: 685FE6598373E001644FFC7567C1746A4C6AF6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number: 0411
Signing time: Fri 04 Sep 2026 13:47:17 +0000
Manifest this update: Fri 04 Sep 2026 13:42:17 +0000
Manifest next update: Sat 05 Sep 2026 17:35:17 +0000
Files and hashes: 1: AS215171.asa (hash: gdJa6WG2GERDZaDbnz7OAqIN3lLaJy+y5wFkZsKkjzo=)
2: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: jMpfRjgrNnrCKV6BuT/c0IYQTW+z1W+D0qJApsvuF28=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:5f:e6:59:83:73:e0:01:64:4f:fc:75:67:c1:74:6a:4c:6a:f6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Validity
Not Before: Sep 4 13:42:17 2026 GMT
Not After : Sep 5 17:35:17 2026 GMT
Subject: CN=366FC7F7D39DD911280A9BB279A1AAA2D86F4245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:cd:d8:52:8b:d9:fc:e6:f1:11:4f:7c:b4:
c7:71:17:8c:7b:db:c6:43:5f:51:13:3b:b3:32:27:
78:09:51:e8:f0:b1:ff:f4:f3:0e:5d:0c:bc:d8:22:
e2:44:a2:08:d3:8f:86:95:bf:c9:1f:d3:54:a0:7a:
d8:08:3e:d1:a7:fc:05:68:08:d9:43:86:e0:4b:02:
f5:b6:56:4c:44:e5:61:31:df:cf:2d:7e:95:3f:fb:
f7:30:f9:58:7a:58:da:07:be:ab:88:2c:48:2b:e8:
df:8a:9a:ea:74:b5:66:ce:f4:0d:68:cd:b8:6d:ba:
a8:a9:62:f7:7b:59:4f:f8:57:a5:72:c5:c1:11:13:
e8:45:5c:b4:a6:21:b9:e2:c3:76:20:74:d8:b4:c6:
48:57:6e:c2:27:a6:98:54:f9:a1:da:19:c8:14:4b:
ed:9b:6b:e5:8c:3f:c6:24:21:32:6e:05:6b:d7:e1:
b9:38:33:1e:4b:83:c0:c7:cb:45:d7:8b:8a:2d:29:
6c:a5:39:f7:c1:9f:b0:c4:61:de:5c:b0:1e:37:1c:
4f:d7:4b:55:c3:f6:d6:21:7d:70:16:5a:33:2a:18:
af:94:b0:e9:a7:de:18:2b:5b:91:5f:b7:49:4d:f9:
7d:09:f9:b6:e3:35:0f:32:d2:02:5f:65:d5:00:2c:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6F:C7:F7:D3:9D:D9:11:28:0A:9B:B2:79:A1:AA:A2:D8:6F:42:45
X509v3 Authority Key Identifier:
keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:48:74:8b:8d:ac:f5:8f:d0:79:b8:50:32:8d:81:ab:4f:3b:
e5:da:71:89:26:04:f0:cb:33:d5:99:96:e9:d6:93:cc:27:92:
c8:4d:dc:60:79:34:e8:48:8c:af:16:67:5e:e6:c6:00:ff:28:
8e:92:78:dd:e9:4f:8f:dd:d0:a0:40:91:40:75:0a:c3:24:a9:
2b:a7:51:89:24:b0:5f:71:52:1a:59:6c:24:d8:4a:98:d3:e0:
b8:16:f9:bb:90:7e:1f:64:b9:f3:9d:66:f7:b3:9b:15:a2:61:
40:73:79:bc:c0:97:f5:37:75:d1:b2:e3:c8:c3:11:5a:86:b1:
91:0f:0a:c5:c5:66:23:c5:49:af:cb:bd:54:49:35:73:ed:ab:
37:91:e9:85:cb:24:45:a2:6f:55:c1:b7:8d:bd:39:aa:e3:0f:
8c:5b:db:2c:2a:18:2b:c5:69:3e:35:f5:c9:85:01:67:f5:75:
5d:60:f9:ac:ba:57:e9:1a:08:52:5a:1f:84:01:be:0c:5c:85:
5e:cb:3c:d3:d5:07:e5:47:70:2f:85:6d:77:e6:f4:97:ae:78:
b7:94:98:e7:05:cb:d0:52:92:da:e4:ec:93:83:54:3d:a7:b6:
02:a4:ee:be:7e:65:e7:fe:cb:88:f7:fa:2a:76:53:c3:d5:25:
b1:f7:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:47:26 2026 by rpki-client