Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: WqIPZasvrpl/A5wx9ZxywsaLDv+6sieENwKttkTnb48=
Subject key identifier: 33:2A:10:9E:FE:BA:B0:99:66:E5:4B:99:CF:FE:1E:DF:66:68:B8:C4
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 5A60EB5D4085DF7A1A94363D604B070058E1D661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: 020C
Signing time: Mon 19 Oct 2026 14:23:33 +0000
Manifest this update: Mon 19 Oct 2026 14:18:33 +0000
Manifest next update: Tue 20 Oct 2026 16:36:33 +0000
Files and hashes: 1: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: XTrRc7BvhR1v4bi5yv/rUwu+Cr89uiOaZylHW/FtRgY=)
2: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: OcZkAh+FMm/yg8wP77y7V82xnHw41NzY63vMMFKHHmI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:60:eb:5d:40:85:df:7a:1a:94:36:3d:60:4b:07:00:58:e1:d6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Oct 19 14:18:33 2026 GMT
Not After : Oct 20 16:36:33 2026 GMT
Subject: CN=332A109EFEBAB09966E54B99CFFE1EDF6668B8C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:e8:e4:1b:b9:14:ca:59:f4:27:ab:5a:9e:
3e:ee:61:b1:44:c1:34:14:2c:7e:57:c0:b2:90:17:
4f:f3:fe:63:f3:ad:9e:bb:a5:4f:a0:7a:7e:93:7c:
87:2d:11:55:21:50:44:6b:76:e2:7a:5d:58:13:8a:
de:b6:b0:82:65:4e:0c:01:22:e9:87:56:2f:d3:ee:
7e:04:ea:33:17:a9:65:35:5a:9a:20:10:0e:92:11:
0f:da:4b:f6:05:e3:be:f7:96:db:fc:2e:ef:f2:d0:
7a:9e:ba:37:66:d5:b4:60:b2:58:e8:c8:a4:b1:9a:
0b:2a:2c:18:38:66:1c:4f:43:b1:e0:34:75:08:a7:
ed:e5:d6:8d:b6:60:5e:49:aa:e8:ee:ee:9c:e4:e5:
52:8f:43:d6:82:e8:65:07:8b:67:f2:69:06:7f:8e:
07:f3:52:19:20:74:92:30:e4:f0:b8:f8:0f:6c:ff:
d0:74:e6:1c:11:dd:c5:63:1b:41:ce:ad:d0:a7:5c:
6d:53:c5:d9:09:be:60:ee:a9:9d:5b:e7:7a:2f:c5:
82:ee:ce:be:1e:75:ba:9c:da:8c:54:60:20:7c:39:
9f:2a:9f:09:2a:b1:0a:51:5d:9d:f1:8c:07:0d:1a:
c5:6a:c2:41:47:bb:ab:35:7b:03:0f:5a:3c:ba:e5:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2A:10:9E:FE:BA:B0:99:66:E5:4B:99:CF:FE:1E:DF:66:68:B8:C4
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:59:b9:07:dd:ae:a5:e4:11:60:25:17:95:25:19:0e:14:c9:
f1:0d:d0:c0:55:34:af:2f:c2:b0:8b:23:43:71:f6:42:52:8b:
8e:24:08:df:99:24:50:c2:89:0d:f7:ed:fc:60:32:e1:30:61:
ca:e6:47:85:c1:7f:01:fb:a4:36:6f:3f:3f:12:ba:f1:53:d3:
a0:cc:d0:65:2b:4e:fb:06:93:c7:bc:57:68:fb:80:3a:8b:d3:
b4:cc:f7:72:ed:cf:ad:9b:04:98:64:e6:4a:ff:57:62:18:91:
39:a8:90:42:57:0f:30:5f:da:bf:88:cf:ab:15:a0:e4:28:00:
a6:5c:e5:38:1d:7c:1e:16:3d:31:45:da:09:ee:85:e2:24:77:
68:17:b5:ba:c7:1b:b5:a9:e4:aa:4c:57:3b:f7:1c:c2:27:d3:
aa:77:65:af:51:9c:a6:c4:41:6f:c2:b4:55:1e:93:48:c7:b2:
c6:07:00:78:9b:5f:a5:69:cc:e3:8c:dd:98:dc:8a:84:56:c1:
63:15:32:e0:42:71:1a:4b:34:29:42:a5:f8:bf:dd:2d:96:f2:
b6:0b:9c:fd:81:3c:c1:a3:4b:8e:12:58:72:40:4a:b0:54:82:
17:e3:28:5e:79:58:8e:89:95:cb:6e:17:a0:0a:1e:35:7c:34:
11:77:71:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:44:31 2026 by rpki-client