Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
File: C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft (raw, json)
Hash identifier: UkprRpwwnyp6O4UW8bhH33jtPwlUQj3Jp6U5Ld7tNRY=
Subject key identifier: 02:7A:3A:3A:C2:4D:20:EA:B7:8B:BA:AA:85:A9:D2:2B:4D:67:49:6D
Authority key identifier: C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB
Certificate issuer: /CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
Certificate serial: 2414DD3DEF71E0E85F1C61FAD9BFCFF79CA9B994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
Manifest number: 0D
Signing time: Sun 13 Sep 2026 11:14:27 +0000
Manifest this update: Sun 13 Sep 2026 11:09:27 +0000
Manifest next update: Mon 14 Sep 2026 13:30:27 +0000
Files and hashes: 1: AS201398.asa (hash: Nu5Mnm/LnAleljbcNN0oijd4fdc+m9S/aEoYCOXUXmI=)
2: C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl (hash: sMliVam3B5z1wiF4S9YSNz/Kjx66NXVhfIXLViwTggE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 13:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:14:dd:3d:ef:71:e0:e8:5f:1c:61:fa:d9:bf:cf:f7:9c:a9:b9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
Validity
Not Before: Sep 13 11:09:27 2026 GMT
Not After : Sep 14 13:30:27 2026 GMT
Subject: CN=027A3A3AC24D20EAB78BBAAA85A9D22B4D67496D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:a3:09:09:0e:0b:4b:40:70:4a:29:17:4d:
f1:d5:d8:6f:9b:9c:0a:95:33:a8:54:5e:4b:c7:67:
15:d8:6b:d6:f6:6c:bf:ce:9b:0f:2a:d5:f7:4a:42:
e1:23:e9:f7:1a:34:8a:27:83:bb:fa:50:39:2d:e4:
51:c0:b6:dc:b4:0d:5a:d9:db:db:6b:34:9a:b5:71:
8f:84:c3:c0:5f:06:bf:6c:7f:b6:c8:f9:08:8f:49:
84:f6:d6:af:6d:3a:bf:08:d4:f8:16:b8:91:fb:a4:
50:48:a8:09:aa:0e:2d:c3:6c:97:cf:4d:0c:9e:11:
1f:14:df:e4:e7:68:dd:26:b2:1f:89:4b:95:19:f4:
21:15:03:df:10:50:17:d6:78:bd:6b:6f:7f:7b:c7:
47:ff:be:fd:6f:d1:60:8c:b6:ea:63:84:5b:52:1a:
b5:11:9c:6e:92:23:9b:be:e4:58:25:d7:61:ec:c1:
41:0b:b6:fc:e6:91:5c:9d:c3:d2:10:ec:e6:8e:65:
8c:e6:05:b1:14:c1:24:94:ce:d4:09:e6:d7:62:37:
67:3e:a2:fc:ed:71:34:fa:3f:56:e8:01:cb:13:12:
d4:57:17:5f:a3:54:c1:38:a0:a8:b2:3a:3f:bf:05:
2c:eb:82:38:47:c8:57:81:32:61:b4:56:2a:8c:44:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7A:3A:3A:C2:4D:20:EA:B7:8B:BA:AA:85:A9:D2:2B:4D:67:49:6D
X509v3 Authority Key Identifier:
keyid:C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:85:c5:9e:35:2d:64:42:ff:9c:38:ec:ca:e4:58:c0:c1:67:
d7:a3:bf:44:48:33:bc:ee:fa:73:8a:94:82:78:96:50:c4:f8:
78:88:38:86:8d:46:34:cf:87:58:b8:dd:cf:2f:54:b7:4a:1f:
e1:ce:f3:a4:db:51:34:de:c2:c3:57:c9:06:e9:f4:45:a7:62:
e1:44:69:01:b8:f6:d0:f7:84:14:b3:72:e6:83:ae:57:31:08:
f7:a0:ad:ad:f0:ba:83:fa:b1:60:d1:a4:a6:99:17:09:de:65:
c7:1c:82:5f:8b:06:37:82:f9:82:30:36:29:f6:9d:93:f7:d2:
8d:82:42:bb:a3:5c:12:68:67:d3:18:0f:19:2c:30:56:1a:a0:
1b:e2:f9:86:a4:e9:88:62:bc:33:d0:c6:b1:11:80:ec:c8:da:
86:0e:39:76:5c:6a:d9:23:67:53:b5:c4:ce:df:fc:a0:6c:fd:
aa:dd:bf:d2:53:ed:f4:c9:cf:4a:7f:59:ac:5c:a7:19:91:52:
ed:26:08:00:00:bb:cf:be:dd:ed:27:ce:4c:35:66:ec:dc:75:
06:d3:5c:bb:3b:5a:23:eb:4a:70:a8:01:e5:4e:0c:ac:92:92:
f5:f7:a3:f7:63:72:ec:da:8c:92:88:e3:63:7c:36:15:90:a0:
97:3b:df:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 00:34:22 2026 by rpki-client