Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: uAOseXN2KZU8vtV3F4Uy7F6q9Lhz1JWDd9kfQmd8paE=
Subject key identifier: D6:C1:6D:8F:DC:80:86:51:23:B1:57:BA:BF:98:31:7F:8C:4D:44:2D
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 77CB6B65C19BF213D96D3BF2B09000F4A25FA31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: 0114
Signing time: Sat 18 Apr 2026 12:23:34 +0000
Manifest this update: Sat 18 Apr 2026 12:18:34 +0000
Manifest next update: Sun 19 Apr 2026 14:23:34 +0000
Files and hashes: 1: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: Bsi4f9Utd5PuoUrlY/vA9+FxIv6bvK0nv0hjpVCKzQk=)
2: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: J1HG0OMrjIFaGXRRNUqDlj9Wjr3EYNiVY9djg5Z3eOw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:cb:6b:65:c1:9b:f2:13:d9:6d:3b:f2:b0:90:00:f4:a2:5f:a3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Apr 18 12:18:34 2026 GMT
Not After : Apr 19 14:23:34 2026 GMT
Subject: CN=D6C16D8FDC80865123B157BABF98317F8C4D442D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1f:3e:65:99:44:da:b9:bb:50:be:0d:b6:4a:
66:cd:16:fc:66:bf:66:97:ee:59:d5:b8:8f:0a:e4:
27:f4:8c:50:13:33:8d:33:c1:ce:e6:dc:ab:9a:a6:
4d:05:88:e8:1d:8c:9c:89:a5:45:5b:23:6a:31:16:
3e:1e:e4:66:c5:1e:b7:96:f0:49:7a:ca:a7:74:c7:
da:2f:cb:d9:3b:11:b8:f6:ef:0a:d7:11:f7:6f:85:
13:a0:b6:f5:7e:12:25:b2:7b:06:97:a1:4a:b4:dd:
08:c9:cf:c4:95:8e:c4:b0:ac:72:9a:35:b6:f0:d4:
35:04:df:5f:9a:81:1b:e8:26:fe:9d:bd:30:ba:8b:
19:10:3c:69:09:5b:d8:3d:19:88:0a:6c:ad:96:86:
5d:ae:3d:55:45:90:03:fc:65:fc:9e:47:0c:85:f0:
aa:43:02:69:c0:93:64:3b:19:be:df:01:10:7d:cf:
af:96:f0:70:26:2f:41:2a:15:33:88:07:e3:3a:01:
73:8a:d3:c7:20:bf:6f:cd:11:25:4c:63:39:be:a7:
94:4d:50:86:e9:9c:9e:e8:27:48:8e:59:ed:d0:c3:
50:df:ea:44:95:18:b0:6b:8e:92:b3:7b:f9:1c:57:
b2:3b:8b:e9:b7:4f:20:93:d5:c7:cd:ac:c0:a0:4d:
8d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C1:6D:8F:DC:80:86:51:23:B1:57:BA:BF:98:31:7F:8C:4D:44:2D
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:84:05:69:b7:91:81:73:7a:52:47:a8:dc:ff:d8:09:9d:09:
22:6e:55:2c:9d:60:53:3d:0c:74:eb:f8:29:eb:97:8b:42:21:
52:6b:2c:43:66:8a:bf:a2:c0:d3:01:75:3d:de:50:44:27:91:
f5:7e:c9:59:5f:21:a4:11:c3:77:81:df:9d:95:0f:e6:46:60:
b1:0c:43:ce:1f:c2:ec:20:58:45:ff:84:57:53:5b:21:0d:3f:
92:82:5c:49:2f:36:42:10:ab:72:c5:ca:c2:ff:38:52:e1:22:
d7:49:31:a0:b0:30:9c:cd:95:32:94:95:4b:94:e3:74:04:00:
59:c7:5d:49:4d:38:d6:22:04:01:70:9e:52:0d:a1:fc:c5:d6:
26:08:48:b1:27:58:5e:e9:27:b9:17:22:95:0b:47:78:3d:4d:
15:b7:9a:0e:6e:0b:ca:a6:7e:1e:b6:2c:58:4b:a1:37:17:b9:
06:5f:fa:fe:aa:32:8a:bd:32:53:55:a4:53:90:a0:73:49:af:
63:66:75:24:f2:35:f9:b1:d4:f3:b5:4a:56:19:c9:05:36:b5:
d8:47:53:52:e9:46:02:78:c3:84:dc:0c:0c:ec:8b:e7:92:3d:
d7:1e:73:58:65:8c:11:6f:f4:54:16:75:26:82:69:c7:bd:75:
51:bd:68:ad
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUd8trZcGb8hPZbTvysJAA9KJfoxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDBhNTE2YjUwNDI2MjAyYTQyNGYwZWJmY2I3ZDJiZDRm
NzQ0Zjk2NDAeFw0yNjA0MTgxMjE4MzRaFw0yNjA0MTkxNDIzMzRaMDMxMTAvBgNV
BAMTKEQ2QzE2RDhGREM4MDg2NTEyM0IxNTdCQUJGOTgzMTdGOEM0RDQ0MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUHz5lmUTaubtQvg22SmbNFvxm
v2aX7lnVuI8K5Cf0jFATM40zwc7m3Kuapk0FiOgdjJyJpUVbI2oxFj4e5GbFHreW
8El6yqd0x9ovy9k7Ebj27wrXEfdvhROgtvV+EiWyewaXoUq03QjJz8SVjsSwrHKa
Nbbw1DUE31+agRvoJv6dvTC6ixkQPGkJW9g9GYgKbK2Whl2uPVVFkAP8ZfyeRwyF
8KpDAmnAk2Q7Gb7fARB9z6+W8HAmL0EqFTOIB+M6AXOK08cgv2/NESVMYzm+p5RN
UIbpnJ7oJ0iOWe3Qw1Df6kSVGLBrjpKze/kcV7I7i+m3TyCT1cfNrMCgTY2PAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU1sFtj9yAhlEjsVe6v5gxf4xNRC0wHwYDVR0j
BBgwFoAU0KUWtQQmICpCTw6/y30r1PdE+WQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4
NDhjLzAvRDBBNTE2QjUwNDI2MjAyQTQyNEYwRUJGQ0I3RDJCRDRGNzQ0Rjk2NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBLVVd0UVFtSUNwQ1R3Nl95MzByMVBk
RS1XUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02
YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMC9EMEE1MTZCNTA0MjYyMDJBNDI0
RjBFQkZDQjdEMkJENEY3NDRGOTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4QFabeRgXN6Ukeo3P/Y
CZ0JIm5VLJ1gUz0MdOv4KeuXi0IhUmssQ2aKv6LA0wF1Pd5QRCeR9X7JWV8hpBHD
d4HfnZUP5kZgsQxDzh/C7CBYRf+EV1NbIQ0/koJcSS82QhCrcsXKwv84UuEi10kx
oLAwnM2VMpSVS5TjdAQAWcddSU041iIEAXCeUg2h/MXWJghIsSdYXuknuRcilQtH
eD1NFbeaDm4LyqZ+HrYsWEuhNxe5Bl/6/qoyir0yU1WkU5Cgc0mvY2Z1JPI1+bHU
87VKVhnJBTa12EdTUulGAnjDhNwMDOyL55I91x5zWGWMEW/0VBZ1JoJpx711Ub1o
rQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 18:24:56 2026 by rpki-client