Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
File: 3491246EC3E1BE5219E15F1079BB12148609075C.mft (raw, json)
Hash identifier: y7vdUVH3BK9afTDaISCjmx8lmTNws2+Svk6RbU/auTE=
Subject key identifier: 5B:A6:44:B5:C5:82:21:DC:30:CC:7C:28:58:89:8C:B5:10:47:65:5F
Authority key identifier: 34:91:24:6E:C3:E1:BE:52:19:E1:5F:10:79:BB:12:14:86:09:07:5C
Certificate issuer: /CN=3491246ec3e1be5219e15f1079bb12148609075c
Certificate serial: 26EBE20C187AAAF224857103D2EAA0970427702C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJEkbsPhvlIZ4V8QebsSFIYJB1w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
Manifest number: 35
Signing time: Tue 29 Sep 2026 22:32:12 +0000
Manifest this update: Tue 29 Sep 2026 22:27:12 +0000
Manifest next update: Thu 01 Oct 2026 00:12:12 +0000
Files and hashes: 1: 3491246EC3E1BE5219E15F1079BB12148609075C.crl (hash: nPAUlUhEn6kmVxtl6/pRCEeEZ4h4thhuaF5/+1nhhfc=)
2: AS219157.asa (hash: W0SNHyIdOBlk/PqFSsz1uEHMFtmzaSHOyyOQWUgxKu4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJEkbsPhvlIZ4V8QebsSFIYJB1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 00:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:eb:e2:0c:18:7a:aa:f2:24:85:71:03:d2:ea:a0:97:04:27:70:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3491246ec3e1be5219e15f1079bb12148609075c
Validity
Not Before: Sep 29 22:27:12 2026 GMT
Not After : Oct 1 00:12:12 2026 GMT
Subject: CN=5BA644B5C58221DC30CC7C2858898CB51047655F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7c:f9:ee:35:5f:4c:1c:9b:d7:77:47:cb:d8:
f3:3c:1c:4e:05:90:f0:5f:54:1d:76:1e:ea:ab:89:
ee:3f:fd:cf:1c:c2:3e:52:73:45:4b:0c:05:02:31:
a4:98:d1:a7:51:55:36:4b:92:0e:6b:62:11:26:61:
3b:6e:3c:72:3d:0e:49:ea:5b:35:e2:02:f3:05:37:
72:14:3b:78:02:61:bb:42:bc:be:38:62:f3:7e:19:
12:87:b6:7b:8b:2b:96:85:a6:65:b8:6b:fe:81:84:
94:29:21:15:76:7f:fa:61:e7:05:8a:91:02:fe:41:
5f:08:f9:1a:2c:11:17:bf:93:58:10:33:a4:88:aa:
ae:d2:c9:ae:d3:f4:fe:ca:89:c6:b0:7c:fa:db:08:
dd:0e:52:df:f8:ca:50:53:7f:92:78:05:3c:f6:15:
6a:3b:6b:f9:da:98:ee:e9:d2:9e:28:a9:49:f4:05:
8f:d6:a1:7f:f5:41:0a:63:8a:00:0a:36:2a:e4:e6:
e7:1b:d0:89:e7:41:22:87:85:14:b4:d1:5d:ef:66:
fa:f3:60:33:e9:fe:2d:2b:1c:03:a3:9e:01:91:30:
ca:20:3a:d1:de:14:61:39:6e:2d:81:6a:a4:cc:b9:
91:28:a8:e9:e9:c2:93:8b:e0:42:4a:cb:7e:ec:71:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A6:44:B5:C5:82:21:DC:30:CC:7C:28:58:89:8C:B5:10:47:65:5F
X509v3 Authority Key Identifier:
keyid:34:91:24:6E:C3:E1:BE:52:19:E1:5F:10:79:BB:12:14:86:09:07:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJEkbsPhvlIZ4V8QebsSFIYJB1w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:49:4a:11:5a:c7:07:eb:09:d2:4c:d4:14:41:20:df:18:b3:
76:ee:6a:fe:07:c5:98:e4:f6:ba:be:96:9b:cd:2c:8e:41:4c:
b5:f5:1e:ef:dd:33:f9:65:2a:63:97:a9:c5:22:97:73:fd:a1:
cc:09:c9:ce:ca:79:c0:92:f1:86:c1:de:38:e7:fa:dc:ed:73:
5c:96:0c:34:bd:42:26:3b:65:cb:57:bd:32:1a:9a:22:19:f4:
07:2d:d3:e9:25:f4:8e:99:c8:ce:3f:0b:e3:c5:e7:9c:78:58:
dc:a0:2b:14:8a:b4:2f:2e:34:ca:4c:71:81:91:f7:35:9d:76:
a1:70:32:d5:c2:9d:c6:cf:4e:e5:9c:1e:7e:20:5d:21:fc:95:
b4:cb:f1:64:5a:0a:72:8d:1c:c8:8a:1a:7e:fb:9b:85:c2:dc:
87:65:14:b0:f1:1f:30:b2:6f:58:ab:cd:55:05:5c:bf:5a:52:
9f:c6:18:3c:8b:58:29:80:a6:4e:58:59:d2:61:6d:a2:c9:1d:
d6:f6:e0:bf:05:6c:ca:4b:69:12:3d:8b:80:33:34:e4:34:a1:
ed:cf:d6:3c:d4:bb:5d:4a:46:5e:91:66:4d:0d:7a:63:35:41:
58:60:ea:71:61:01:56:3b:be:43:b2:f2:ee:90:ff:05:c6:4f:
b6:90:60:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:49:56 2026 by rpki-client