Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/D7A27FAB9D4B7E5BD86345E7126C919875482E04.mft
File: D7A27FAB9D4B7E5BD86345E7126C919875482E04.mft (raw, json)
Hash identifier: wAbo71l2NipnBI31R4Jidqx3HgeRMfwSeiRVIqQCw3k=
Subject key identifier: AE:BD:F2:3D:B6:00:71:60:98:5F:19:AA:1C:E8:D4:4C:F9:CB:DE:C3
Authority key identifier: D7:A2:7F:AB:9D:4B:7E:5B:D8:63:45:E7:12:6C:91:98:75:48:2E:04
Certificate issuer: /CN=d7a27fab9d4b7e5bd86345e7126c919875482e04
Certificate serial: 184D4F98FD491748F038E2C84621F65B1145153B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16J_q51LflvYY0XnEmyRmHVILgQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/D7A27FAB9D4B7E5BD86345E7126C919875482E04.mft
Manifest number: 23
Signing time: Sun 25 Oct 2026 12:08:25 +0000
Manifest this update: Sun 25 Oct 2026 12:03:25 +0000
Manifest next update: Mon 26 Oct 2026 15:49:25 +0000
Files and hashes: 1: AS218471.asa (hash: oEDVrJWRjNCWnuVa3DCWgxOo031mLKM8MZDGrgMmg0w=)
2: D7A27FAB9D4B7E5BD86345E7126C919875482E04.crl (hash: 1TzfK5Djef94YAYc/GLArgR1rXvao8rnw7x8cPY64U8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/D7A27FAB9D4B7E5BD86345E7126C919875482E04.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/D7A27FAB9D4B7E5BD86345E7126C919875482E04.mft
rsync://rpki.ripe.net/repository/DEFAULT/16J_q51LflvYY0XnEmyRmHVILgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:4d:4f:98:fd:49:17:48:f0:38:e2:c8:46:21:f6:5b:11:45:15:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a27fab9d4b7e5bd86345e7126c919875482e04
Validity
Not Before: Oct 25 12:03:25 2026 GMT
Not After : Oct 26 15:49:25 2026 GMT
Subject: CN=AEBDF23DB6007160985F19AA1CE8D44CF9CBDEC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:fa:a8:31:54:9b:76:70:3e:a6:76:e6:9b:
5e:e0:d5:06:d2:21:56:96:b1:e0:b1:29:41:e5:02:
f9:3e:67:01:12:0b:b7:15:7f:37:76:73:b2:15:1c:
8c:6b:bc:f1:33:7c:00:06:3b:54:21:92:99:e5:49:
4b:8a:bf:36:f3:87:e0:1d:1f:04:9a:9b:b4:54:67:
cf:c2:79:77:a9:af:35:08:c0:af:53:42:66:66:cf:
ea:25:b7:e4:7b:46:7f:46:3e:98:ca:4e:59:81:06:
0c:4f:1d:b0:d7:61:d9:ab:e3:2d:76:35:39:02:e1:
b4:12:16:df:47:a7:c3:fa:82:c5:2e:24:fb:2f:9c:
25:35:85:7a:a6:2b:19:f9:59:88:6a:0c:f2:d5:77:
68:7f:9c:3a:71:90:8c:50:15:3c:9b:ed:42:df:e8:
17:a4:b8:9c:f9:bc:77:2c:bd:78:4d:78:61:1f:13:
da:82:15:44:99:54:de:b5:07:5c:5b:9b:9a:1a:0a:
f8:28:1c:81:93:35:e6:87:98:db:59:22:9d:38:99:
38:c8:b6:0c:0f:6d:fd:80:91:44:96:f8:41:91:98:
e8:47:fa:ff:2b:64:63:a3:04:e7:06:2b:b0:30:c8:
8d:54:bc:80:14:78:a8:0d:bb:73:71:83:ed:b9:9f:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BD:F2:3D:B6:00:71:60:98:5F:19:AA:1C:E8:D4:4C:F9:CB:DE:C3
X509v3 Authority Key Identifier:
keyid:D7:A2:7F:AB:9D:4B:7E:5B:D8:63:45:E7:12:6C:91:98:75:48:2E:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/D7A27FAB9D4B7E5BD86345E7126C919875482E04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16J_q51LflvYY0XnEmyRmHVILgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/5/D7A27FAB9D4B7E5BD86345E7126C919875482E04.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:de:9c:37:48:8b:84:7f:2a:76:10:05:b0:77:d3:cc:f7:76:
1c:d5:bb:96:61:69:67:8f:42:82:da:5e:5e:5e:96:5b:24:b9:
13:fd:57:30:e5:52:21:2e:0d:a3:78:89:ae:e5:70:3a:41:04:
a4:ef:f4:41:87:75:8c:84:a5:fa:3e:ab:88:44:34:cb:28:37:
70:73:68:20:45:71:24:0b:81:f4:79:f5:88:74:57:4c:2c:fe:
6d:ea:f7:28:9d:8c:37:3d:53:a8:62:50:52:56:23:a1:1c:b0:
bb:06:b3:31:fe:8e:51:fd:0f:58:cd:91:2a:c8:f4:1f:9a:25:
95:73:bf:7c:7d:6c:27:cd:82:37:fc:51:32:f1:4a:cb:0d:ed:
c2:34:38:0f:5f:7e:22:d0:4d:54:b6:17:80:97:38:4d:e0:54:
aa:a8:60:40:f5:3c:2c:cd:5b:de:4c:33:10:30:e1:5c:11:7a:
d2:65:64:8c:33:8b:52:08:62:96:92:8c:9e:9f:46:d3:9a:6d:
97:c1:18:e9:af:8a:b8:c2:d8:2c:b1:cd:7d:e0:f5:26:35:f5:
6b:2a:92:06:e4:29:53:ef:0c:41:d7:b0:00:71:07:28:7a:4e:
d4:b4:42:06:1a:d4:61:d5:07:97:f7:ca:57:ca:dc:d7:9c:7a:
17:a1:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:32:43 2026 by rpki-client