Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier: pg8reaOHoQ7/bdCandRJJIWwqTPlKusFQvSXD0OsT/M=
Subject key identifier: 00:4F:C9:B6:2C:33:60:61:B4:77:81:24:EA:2A:12:DE:CF:18:3F:09
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer: /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial: 576A9D07F64B8D4A1553164799757BF794A54D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number: 01C2
Signing time: Thu 14 May 2026 06:14:54 +0000
Manifest this update: Thu 14 May 2026 06:09:54 +0000
Manifest next update: Fri 15 May 2026 06:23:54 +0000
Files and hashes: 1: AS215375.asa (hash: e0esF+VqvtsleiiMJnSuBMND1Z/LxmcXfmjsUwN+NLI=)
2: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: MFT6AVJ4MgnlMG0PhWk7Q8uPPJqtRbzKGycVLDJ9gy0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 06:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6a:9d:07:f6:4b:8d:4a:15:53:16:47:99:75:7b:f7:94:a5:4d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Validity
Not Before: May 14 06:09:54 2026 GMT
Not After : May 15 06:23:54 2026 GMT
Subject: CN=004FC9B62C336061B4778124EA2A12DECF183F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:49:f9:2b:a4:50:82:2b:d6:ff:15:73:b4:
7d:99:ec:7d:e0:a9:2c:e9:7e:fa:a7:5e:7a:5e:b2:
0c:10:5a:de:15:48:af:73:3d:ae:c4:ec:16:a1:59:
70:2b:d8:5c:f4:96:65:e3:02:11:b0:2f:07:ee:c5:
82:29:c2:1c:9f:18:95:37:90:ef:c5:1f:69:3f:66:
e2:77:8b:6a:cd:78:d9:82:73:66:2b:57:7d:e0:3e:
e2:5d:8e:23:8e:66:f7:f1:05:56:da:c4:99:3b:e2:
61:0e:03:d6:64:00:e6:0f:7b:04:24:2a:a3:bf:8f:
83:5c:96:50:ff:42:fe:52:c5:b7:bb:ea:67:dd:ef:
10:1d:90:17:af:ea:b0:03:01:d1:ed:88:67:a3:79:
88:47:89:f6:b1:90:00:95:4c:97:c7:4a:df:f3:fc:
04:27:d8:e7:e2:fb:35:a7:81:e5:d9:67:c8:61:c0:
5d:bb:ec:15:1f:c8:a6:06:a1:36:dc:1d:87:97:85:
b1:4a:bd:85:f8:bc:89:9d:7e:97:74:4e:a5:0f:d3:
a0:01:6c:55:42:a4:8c:c8:cd:62:19:4b:b2:6c:ca:
a1:bf:cb:14:7b:78:45:da:7d:23:8e:22:ff:3d:7b:
de:0a:dc:22:d7:1c:1f:36:2b:03:88:85:4d:4f:de:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4F:C9:B6:2C:33:60:61:B4:77:81:24:EA:2A:12:DE:CF:18:3F:09
X509v3 Authority Key Identifier:
keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:70:80:f1:43:05:1d:46:5c:e2:76:b9:be:ae:d1:5b:5d:c4:
08:79:a5:c7:7c:31:99:97:71:36:f0:40:6a:6c:66:18:97:cc:
a0:3b:27:f8:2d:5a:3f:5a:75:6d:f7:a6:36:e0:62:93:4c:9c:
7f:85:a1:9f:48:dd:77:25:4c:f2:a1:dd:b6:1c:da:69:08:da:
56:ff:3b:b7:94:bd:a3:71:de:3e:35:32:99:01:c1:64:c8:f3:
49:92:1b:43:8c:91:73:28:d9:dd:ef:cc:b9:10:93:64:bc:b1:
06:24:f1:2c:9c:eb:4d:4d:26:7c:19:b3:8d:c6:62:f6:39:87:
e1:5c:02:51:1f:7b:07:b5:74:9c:f9:0c:e6:a7:ee:92:0c:8e:
a1:0e:8c:61:90:c8:75:ec:82:b4:34:d4:23:53:c8:43:d7:d5:
98:0b:8a:1e:c9:17:fb:34:b3:78:99:57:25:54:20:3e:db:e9:
f2:b6:7c:dd:02:da:b9:1c:d1:ca:9e:0a:89:dd:7d:41:d7:ba:
0c:66:e4:cb:f1:3d:db:f2:8f:9f:dc:3c:8a:af:e6:75:87:a0:
39:ab:d8:16:76:76:2f:b6:27:bf:68:db:99:ef:0a:cf:26:e3:
99:79:b0:83:ae:71:10:3c:38:01:e8:a4:74:ae:ea:1f:ab:b5:
43:b2:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 10:39:36 2026 by rpki-client