Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
File: DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft (raw, json)
Hash identifier: QT3UwRcnFeNhPEP4AJD8c+h5cVCAfcR7oaltCRCiCo4=
Subject key identifier: 62:90:FF:EC:40:12:85:75:C6:43:9E:39:0F:40:20:AA:0D:05:A6:E4
Authority key identifier: DB:1E:7C:42:15:D9:A1:EE:A8:1F:0B:12:99:F6:76:0D:27:56:26:10
Certificate issuer: /CN=db1e7c4215d9a1eea81f0b1299f6760d27562610
Certificate serial: 2B6480F812856F4DF9F1F2031BB420F52473DCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
Manifest number: 6D
Signing time: Sun 25 Oct 2026 10:08:25 +0000
Manifest this update: Sun 25 Oct 2026 10:03:25 +0000
Manifest next update: Mon 26 Oct 2026 12:45:25 +0000
Files and hashes: 1: AS218904.asa (hash: DggW9I8u0x3M7b7xubWLUXEg9zgRHrBZtwW5sdzEoIg=)
2: DB1E7C4215D9A1EEA81F0B1299F6760D27562610.crl (hash: OyL8ilU89/n6jjarpes+n4O/QEo1bmf6XXIu7RT+KNs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 12:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:64:80:f8:12:85:6f:4d:f9:f1:f2:03:1b:b4:20:f5:24:73:dc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1e7c4215d9a1eea81f0b1299f6760d27562610
Validity
Not Before: Oct 25 10:03:25 2026 GMT
Not After : Oct 26 12:45:25 2026 GMT
Subject: CN=6290FFEC40128575C6439E390F4020AA0D05A6E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:91:90:be:9a:0f:06:1b:d6:a6:17:be:bf:
9b:20:7e:4c:9b:72:c6:ae:dd:6a:3c:e2:aa:9f:d7:
50:05:7a:64:30:45:64:fa:a7:da:25:d6:b2:97:7b:
9c:b3:f6:bf:6c:8d:da:38:67:41:23:02:bd:b6:0e:
c6:e1:70:8f:70:62:2a:f3:4a:a7:b2:4c:25:63:53:
bf:71:8c:65:6e:80:20:9d:c9:6d:d4:59:5f:0f:f6:
07:4c:18:51:53:00:c1:e1:e6:47:6b:ca:43:61:21:
03:ee:6a:c0:bf:08:45:e1:c4:ff:c4:05:85:64:9c:
5d:d1:10:f4:6d:0b:44:6d:c4:15:f7:7c:79:7c:88:
5e:a4:22:06:f7:c2:8b:47:49:d7:d8:7e:50:ec:50:
69:2d:4b:1b:ef:47:cf:54:35:e4:db:09:46:48:0a:
fe:d5:55:05:da:1c:9d:75:d8:72:24:75:b9:bb:a9:
5c:a6:e5:0f:75:3c:95:0b:6f:f8:5e:72:e6:cb:ab:
c7:ad:21:6c:85:43:4d:3e:1a:3b:d4:be:73:bd:ec:
10:02:e7:be:95:71:ee:c4:7f:9b:c2:06:7f:7e:4e:
ef:28:b0:70:f1:28:ca:d1:0f:91:a4:14:27:5c:eb:
ab:2c:1e:f8:00:2e:ea:78:48:36:46:25:a0:3e:ec:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:90:FF:EC:40:12:85:75:C6:43:9E:39:0F:40:20:AA:0D:05:A6:E4
X509v3 Authority Key Identifier:
keyid:DB:1E:7C:42:15:D9:A1:EE:A8:1F:0B:12:99:F6:76:0D:27:56:26:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fd:d0:df:8d:ac:ed:6f:16:d7:8a:a7:bf:29:f4:fa:e8:4a:
e2:b9:57:4e:3f:c6:03:ce:5a:7d:2c:de:6a:ab:dd:7e:1a:d3:
d0:26:26:73:48:b0:b7:5b:09:9b:0e:d3:4d:9e:ee:33:68:b9:
ea:2a:de:95:a5:2e:5e:06:94:a9:7c:da:1b:4c:7a:42:75:71:
ee:80:f2:d5:4d:17:16:a5:98:df:b8:4f:2b:97:c6:bc:57:78:
3d:f8:49:f8:f1:f6:62:04:8e:d0:81:68:70:bf:a9:67:14:30:
6f:65:94:bd:ce:aa:eb:1e:32:93:95:25:26:21:bd:ec:dd:01:
64:cc:94:bb:b1:a8:2d:b5:92:68:b8:fb:f0:ee:69:a7:72:f2:
07:d0:43:0c:2c:5b:10:67:9a:d8:b1:1d:80:29:26:ea:70:d7:
90:f8:d9:89:13:0c:4e:1b:8a:b9:3d:57:82:5c:cf:ee:c7:4e:
4d:1a:6e:7e:0c:51:59:5c:df:01:0c:3a:71:09:92:03:22:18:
d9:69:08:80:f4:4e:85:24:fd:74:25:3e:77:cf:5d:d1:0c:fc:
f7:80:aa:23:03:1f:e9:28:bd:50:22:92:ce:cc:b9:24:69:8f:
38:d3:93:6b:27:e5:d7:f9:59:13:14:12:33:79:3b:81:39:a1:
10:ba:f2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:14 2026 by rpki-client