Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/6/593129AA4DC93A8306EBCA96068C5D79E1782FB5.mft
File: 593129AA4DC93A8306EBCA96068C5D79E1782FB5.mft (raw, json)
Hash identifier: JX/L1TRwA8wD8KmVsrrjZ1pZKqf2+hiFmCSzbmMa2Gk=
Subject key identifier: 31:6F:58:AE:76:DA:EB:89:A4:11:E3:A0:01:A3:E9:16:2A:0D:F9:11
Authority key identifier: 59:31:29:AA:4D:C9:3A:83:06:EB:CA:96:06:8C:5D:79:E1:78:2F:B5
Certificate issuer: /CN=593129aa4dc93a8306ebca96068c5d79e1782fb5
Certificate serial: 7E90734C1EBE64F4A1B71F62EAA73E5B45AFA05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTEpqk3JOoMG68qWBoxdeeF4L7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/6/593129AA4DC93A8306EBCA96068C5D79E1782FB5.mft
Manifest number: 23
Signing time: Sat 24 Oct 2026 16:33:25 +0000
Manifest this update: Sat 24 Oct 2026 16:28:25 +0000
Manifest next update: Sun 25 Oct 2026 20:29:25 +0000
Files and hashes: 1: AS218470.asa (hash: SKaeeTYAkdYG3boc6jC8OtXVUptW7Km1nqDdzhEoZBY=)
2: 593129AA4DC93A8306EBCA96068C5D79E1782FB5.crl (hash: t2XdqqpiANT+IIM2Ju/w6OGA4Yc3XFl3mhY+D3KIuQg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/6/593129AA4DC93A8306EBCA96068C5D79E1782FB5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/6/593129AA4DC93A8306EBCA96068C5D79E1782FB5.mft
rsync://rpki.ripe.net/repository/DEFAULT/WTEpqk3JOoMG68qWBoxdeeF4L7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 20:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:90:73:4c:1e:be:64:f4:a1:b7:1f:62:ea:a7:3e:5b:45:af:a0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593129aa4dc93a8306ebca96068c5d79e1782fb5
Validity
Not Before: Oct 24 16:28:25 2026 GMT
Not After : Oct 25 20:29:25 2026 GMT
Subject: CN=316F58AE76DAEB89A411E3A001A3E9162A0DF911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:fe:d3:20:81:31:5e:41:44:94:8f:dc:3f:
1e:b2:70:96:50:7a:b2:41:4a:e7:51:2c:f5:83:95:
e3:59:92:69:0a:47:41:6a:37:f7:5e:3e:8d:3b:65:
1d:40:20:cf:c4:09:38:bc:d7:3e:b8:01:48:5b:cc:
69:1d:5e:13:54:76:eb:f3:1e:25:81:82:2f:5b:1c:
01:a5:93:66:0b:45:68:6f:f1:96:2d:21:4a:bf:34:
47:21:a5:12:74:a4:76:e2:8a:6b:09:42:a8:b1:67:
3f:5f:ab:e7:ad:fa:59:19:bb:9e:ac:45:26:fe:61:
ca:d0:e4:51:58:0b:28:a1:7b:66:16:85:66:ac:d0:
07:fc:49:d0:34:79:9d:f0:8d:b3:7d:38:ca:d1:6a:
9a:24:48:ae:a0:ff:04:41:52:ec:de:07:a0:f6:f5:
9b:52:7f:b8:a7:b7:a2:d4:e1:f3:ff:01:15:28:54:
ca:47:39:2e:12:d6:b8:3b:f8:f4:76:09:e5:52:e1:
b6:19:9d:85:a4:30:99:3d:6b:33:ac:89:11:d9:48:
c0:f2:76:b2:fd:8e:07:6e:2d:01:44:3e:c6:d2:05:
17:9b:90:e8:47:18:bc:77:2b:f7:a0:8e:5e:29:fc:
95:14:16:12:06:90:a5:38:8e:df:8d:f6:e2:70:63:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6F:58:AE:76:DA:EB:89:A4:11:E3:A0:01:A3:E9:16:2A:0D:F9:11
X509v3 Authority Key Identifier:
keyid:59:31:29:AA:4D:C9:3A:83:06:EB:CA:96:06:8C:5D:79:E1:78:2F:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/6/593129AA4DC93A8306EBCA96068C5D79E1782FB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTEpqk3JOoMG68qWBoxdeeF4L7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/6/593129AA4DC93A8306EBCA96068C5D79E1782FB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:70:52:8b:a1:bd:30:48:0b:5a:df:be:7a:06:6a:7d:d6:80:
d4:68:4e:5a:37:ac:38:6f:18:08:6b:21:8e:62:6e:b8:cf:0c:
0a:a6:c7:b9:26:79:60:6c:da:69:e0:58:b9:71:7e:fd:4d:5f:
bb:c4:ed:68:c2:3d:3a:e8:64:7c:c8:db:ea:c5:bf:2b:25:a7:
e3:16:6c:ab:40:88:68:39:da:21:46:8a:e1:36:72:ad:68:2e:
b4:41:b6:4f:7b:ae:bd:c1:27:36:a2:e2:f3:e4:18:97:2a:4a:
b0:52:a4:94:7d:b1:64:5b:2b:a8:e6:74:7a:6b:bf:fd:2b:6f:
cc:8c:4a:22:2f:0b:07:d3:21:9f:58:32:26:7f:af:5b:69:fd:
a0:32:5e:7c:f1:4d:bd:f0:72:5a:93:67:40:3b:3d:1f:df:0e:
25:60:93:11:b9:d2:49:11:e3:20:d7:2e:90:42:2e:69:69:08:
fc:9e:db:06:55:9f:43:20:e9:56:21:d3:23:e6:d5:9c:b7:be:
b1:34:79:1c:de:bb:f0:fd:e8:1a:fc:41:37:9b:1a:3d:6f:32:
df:a7:c6:e4:1f:02:03:03:cf:8b:77:64:0f:51:9f:4e:64:a0:
9a:af:65:9e:49:cb:eb:4b:ce:58:ce:81:8c:10:43:79:0a:98:
dd:92:05:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:00:01 2026 by rpki-client