Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: t7DG0AkM4w1MRpuwDcQOhyYhFO3zOxmwdKg+SbOSn3o=
Subject key identifier: 49:4E:8A:DC:08:C5:FB:00:EC:3B:9A:49:EF:F3:80:A8:4C:4A:6F:6B
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 5DE2F9B65A35ED4D8C9361D9D9C627BE5397A4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: 0152
Signing time: Tue 02 Jun 2026 15:02:54 +0000
Manifest this update: Tue 02 Jun 2026 14:57:54 +0000
Manifest next update: Wed 03 Jun 2026 17:02:54 +0000
Files and hashes: 1: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: a3JuBP/x5vSIivRhp7cnPIf0j79aOFldCiseZ+woGHs=)
2: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: J1HG0OMrjIFaGXRRNUqDlj9Wjr3EYNiVY9djg5Z3eOw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e2:f9:b6:5a:35:ed:4d:8c:93:61:d9:d9:c6:27:be:53:97:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Jun 2 14:57:54 2026 GMT
Not After : Jun 3 17:02:54 2026 GMT
Subject: CN=494E8ADC08C5FB00EC3B9A49EFF380A84C4A6F6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ee:b7:0c:d4:1c:0c:97:3b:ec:4f:98:47:9f:
9f:65:e1:1f:dc:2f:d5:a1:a5:a3:30:6a:cf:80:73:
86:18:60:1d:63:d3:2a:65:dd:ae:45:72:87:29:18:
ad:50:55:21:5f:13:0f:ce:ed:0d:a0:53:94:0f:e2:
7d:0a:ab:33:3e:9d:d6:15:69:ef:1a:58:82:55:77:
a7:a6:d4:cc:be:5b:4e:2e:57:8f:4f:70:75:e6:44:
0a:d4:e4:2e:81:06:3b:ae:b1:4c:8d:a1:b0:56:1b:
c1:ea:d7:95:fb:3a:fe:33:d6:57:ed:4c:2d:44:93:
e4:9f:ff:01:8b:79:06:1c:51:a9:a0:21:c6:bd:b0:
0f:ba:51:6d:96:e8:60:32:66:84:e9:83:f6:97:58:
b5:18:ec:b0:d6:14:2a:c9:57:ed:de:14:e9:be:77:
02:25:5f:c1:3a:ad:4f:f6:63:ab:1c:b5:9c:67:f5:
94:a8:25:3e:ba:fe:38:90:53:3b:7b:8e:12:26:37:
78:a0:92:f0:af:8a:6d:f4:86:c5:20:cd:1d:72:c0:
a3:1c:da:8e:d4:f2:8e:b3:67:9a:70:dd:5b:79:6d:
2c:ce:90:ff:f5:f5:5b:6a:4b:88:2a:92:b0:85:11:
ce:de:dc:a8:f9:e6:83:8c:7f:4b:07:ab:df:57:15:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4E:8A:DC:08:C5:FB:00:EC:3B:9A:49:EF:F3:80:A8:4C:4A:6F:6B
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:25:07:e4:7a:1c:ff:fd:33:ce:30:6f:71:4e:2d:fe:f5:80:
b6:9f:3e:a7:79:be:7f:d3:11:b1:40:6f:29:03:cd:e5:b5:70:
dc:5e:32:3e:75:d5:30:6f:f3:ba:ff:f1:90:90:51:44:44:46:
18:17:2e:32:bc:6c:7c:01:98:94:99:3a:15:2d:03:66:27:78:
6c:e0:96:f7:5e:46:67:7f:03:fd:65:b8:06:3f:91:d7:7e:b6:
9a:51:a7:d8:93:df:b5:7f:d7:ef:9f:f8:6f:b2:e1:58:51:6b:
98:43:e2:a4:75:7c:68:50:c3:d0:cb:92:43:83:33:8e:88:32:
e0:fd:6f:7e:9d:91:c8:12:80:4e:a8:20:d4:a5:02:b8:06:b7:
03:c1:65:15:7c:93:54:69:00:88:35:4c:d6:06:04:7f:02:20:
30:da:f2:20:d4:61:7d:9e:06:3f:a7:84:a5:29:83:1e:df:d9:
df:94:3e:2d:45:00:62:bc:1a:5a:e2:ae:83:ec:9f:80:13:e9:
da:2a:b8:bd:74:15:d9:11:c6:9d:3f:55:42:b3:67:1b:0c:e1:
ed:36:c3:e8:84:1f:d8:38:d7:25:22:07:0a:e2:0a:94:ec:af:
4b:66:ea:36:08:19:49:58:86:d5:14:be:35:78:13:da:ad:6d:
26:34:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:50:58 2026 by rpki-client