Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json)
Hash identifier: CESzhG9C2B6dM0LAtl0bSNeIaYUNO4qFy4mePXj19iU=
Subject key identifier: 84:94:BC:A8:B6:88:A1:19:4C:85:00:33:19:CD:E7:76:52:20:A5:5D
Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Certificate serial: 2D05E52B417BBBEB9622BFEAF16384382D74D71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
Manifest number: 03
Signing time: Thu 09 Apr 2026 17:27:03 +0000
Manifest this update: Thu 09 Apr 2026 17:22:03 +0000
Manifest next update: Fri 10 Apr 2026 17:45:03 +0000
Files and hashes: 1: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: FMyVVieO760QQuUthCOW+9ZBym3RiFiNmCoGHnCrytE=)
2: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=)
3: AS213900.asa (hash: vZ4nFV2ZuxtxXZLEvZl+LEgTwQtkx6mKUShfFutxF0Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 14:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:05:e5:2b:41:7b:bb:eb:96:22:bf:ea:f1:63:84:38:2d:74:d7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Validity
Not Before: Apr 9 17:22:03 2026 GMT
Not After : Apr 10 17:45:03 2026 GMT
Subject: CN=8494BCA8B688A1194C85003319CDE7765220A55D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:9b:9d:f8:78:a0:30:f1:1b:bd:e6:ae:b3:
56:84:4b:04:4d:ff:cb:94:21:1d:8c:72:5b:71:04:
66:f5:2e:2c:d7:db:a8:e0:7f:27:ad:8d:9e:44:0c:
51:f8:f5:df:7b:64:dc:0b:89:f0:66:4b:62:fe:2f:
15:f1:c2:d2:a9:72:25:92:bb:20:4a:c5:b5:e7:da:
6f:83:6d:2d:b6:15:1f:b6:86:1b:03:38:34:a3:d5:
84:ba:80:35:e1:f9:c8:d3:b1:df:21:5b:4b:93:1a:
81:b9:50:d6:de:24:09:b2:c2:fa:47:61:a8:29:b2:
c4:2c:21:82:6e:1f:18:c9:e7:73:6c:b9:b6:39:e3:
2a:86:d7:a1:30:a7:89:64:f4:39:81:42:ec:dc:8b:
2a:eb:0d:19:39:09:e7:da:35:eb:bc:f8:d1:3e:93:
4d:ab:d0:fc:c3:eb:e3:89:a8:33:6e:7b:71:f5:d2:
1a:94:15:76:a2:89:0a:a7:05:d3:60:61:ba:3c:1b:
d1:97:c7:4a:cd:a4:63:38:d3:52:f5:fe:7d:13:55:
b0:8d:71:b2:c2:44:10:7b:98:70:b3:bb:7d:6b:41:
7e:88:c2:23:51:98:2d:3b:26:53:da:e0:51:3d:2b:
5f:71:72:51:3f:62:84:c0:17:b9:98:77:12:90:91:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:94:BC:A8:B6:88:A1:19:4C:85:00:33:19:CD:E7:76:52:20:A5:5D
X509v3 Authority Key Identifier:
keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f1:af:6a:31:df:8a:c7:db:0e:96:66:ad:de:01:ff:78:63:
80:28:7c:2d:08:f2:85:cd:b7:65:03:56:59:19:7d:56:58:ce:
b9:02:f3:fe:22:33:ca:7d:e0:91:a2:0f:be:f9:e1:21:bd:d5:
21:0e:a2:41:40:0e:a8:bb:88:d9:47:b3:76:3e:88:d7:af:35:
76:bf:e0:f9:21:bd:59:c3:24:f6:c4:38:c6:6d:6c:cf:32:de:
85:e5:80:d7:bc:98:f8:84:19:33:23:30:6e:7c:3e:da:d0:76:
bd:e2:e0:dd:87:33:96:d6:37:da:43:75:b7:24:e8:7b:35:08:
bb:7a:6d:11:55:3f:e3:bc:8a:ba:ed:17:16:2b:f9:21:ca:57:
93:97:de:b8:26:77:dc:a3:6b:d4:c2:4c:05:f2:3d:82:a2:46:
1c:ad:49:f8:69:20:ad:14:68:a3:b3:cf:7a:ef:17:66:8e:8a:
df:f8:67:f0:32:5b:56:59:fa:1f:49:0c:d9:7a:4b:3c:92:6b:
05:17:e7:96:34:85:4d:59:c0:ca:70:54:39:d7:97:77:94:0f:
fa:22:bf:95:5b:c7:ff:45:17:53:ef:b8:3b:f5:a9:f4:26:6f:
0c:5d:95:2d:76:a6:8d:c7:04:9d:78:b2:69:e8:ae:be:c1:40:
39:4d:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 23:54:40 2026 by rpki-client