Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
File: D332D8DC2488E4D202B591BEE081B6938818959F.mft (raw, json)
Hash identifier: GNza0KP2B2hSZtKzpRN/mtlEZ3IkLszmDaqJt+01o0E=
Subject key identifier: 53:DD:C9:5B:7C:CC:A4:FE:77:F4:AD:A4:B3:FA:9E:DD:9A:B5:8F:34
Authority key identifier: D3:32:D8:DC:24:88:E4:D2:02:B5:91:BE:E0:81:B6:93:88:18:95:9F
Certificate issuer: /CN=d332d8dc2488e4d202b591bee081b6938818959f
Certificate serial: 097112F1E3783F01773FE803C0FDB0A57CECF196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
Manifest number: 0102
Signing time: Wed 26 Aug 2026 22:24:31 +0000
Manifest this update: Wed 26 Aug 2026 22:19:31 +0000
Manifest next update: Thu 27 Aug 2026 23:52:31 +0000
Files and hashes: 1: D332D8DC2488E4D202B591BEE081B6938818959F.crl (hash: 2Ye/VprxUe0q8YS6oqDC2DRJywfiChbVmT//cfahaIw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:71:12:f1:e3:78:3f:01:77:3f:e8:03:c0:fd:b0:a5:7c:ec:f1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d332d8dc2488e4d202b591bee081b6938818959f
Validity
Not Before: Aug 26 22:19:31 2026 GMT
Not After : Aug 27 23:52:31 2026 GMT
Subject: CN=53DDC95B7CCCA4FE77F4ADA4B3FA9EDD9AB58F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:a2:fe:ae:b2:76:8d:c2:b3:fb:59:51:9a:
83:fc:6e:97:cc:75:61:8e:92:4a:a4:58:70:20:7a:
33:24:2a:a2:48:e8:62:01:fa:9b:19:f2:72:72:66:
3f:7a:26:3d:34:b5:09:a8:2e:3f:9a:a1:a9:ed:e5:
9c:21:dd:f8:f1:f0:82:89:d0:9b:16:93:33:e3:4a:
14:0a:66:50:76:41:67:45:83:0e:9c:bf:9c:98:e9:
5f:86:4a:3c:7b:cb:2e:74:66:e1:35:f4:94:84:71:
d7:6a:a1:2c:9f:be:df:5e:2f:ff:b3:85:4a:03:b5:
7c:66:45:26:e1:88:54:bd:72:33:99:f3:0f:59:e7:
51:a9:8a:90:08:74:b7:dc:1d:4b:31:50:be:6a:e8:
71:a3:c1:c0:39:4e:dd:25:fb:f4:40:0b:ff:e8:ff:
95:80:f3:c4:41:6e:7e:2d:0b:b4:46:e6:a5:33:6c:
51:8b:cc:1e:07:d7:33:b9:42:ce:3b:6e:04:f1:b0:
e7:cf:94:d5:60:f3:48:0f:5b:f3:6f:22:0c:e6:84:
29:de:42:13:14:f0:02:9e:ff:52:cb:c3:1f:ad:ca:
fb:4f:f5:c8:9f:b3:93:81:16:bc:c5:b5:54:92:be:
78:6a:bf:08:ff:e9:5f:4d:72:fc:af:6c:51:6f:e2:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DD:C9:5B:7C:CC:A4:FE:77:F4:AD:A4:B3:FA:9E:DD:9A:B5:8F:34
X509v3 Authority Key Identifier:
keyid:D3:32:D8:DC:24:88:E4:D2:02:B5:91:BE:E0:81:B6:93:88:18:95:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:51:75:d8:45:e2:93:21:8c:2f:06:4e:f4:a9:c5:94:97:83:
6b:4d:6f:c5:6a:99:be:b9:4e:30:30:e8:b2:ee:17:72:52:79:
fe:e5:31:f7:d4:41:44:4a:4a:0a:0a:22:62:96:dc:8a:7f:6c:
76:8e:ae:71:cf:f2:e7:01:3e:a5:ad:05:ae:96:27:8e:4f:a2:
1b:cd:1c:96:b6:8c:2b:4a:46:21:82:ab:bb:ec:8b:81:89:c5:
01:2b:4b:cc:c2:52:d4:5f:8e:44:f7:93:d6:7c:f4:b9:c0:1d:
b0:2e:1c:1d:a4:ed:5c:9f:3f:5c:c0:82:30:d2:40:fd:73:1f:
70:e6:eb:0a:ee:3f:d0:5a:4c:ee:f4:a8:b0:90:f2:62:8b:0f:
3b:54:08:bd:36:cd:f7:a8:38:35:86:44:ed:93:78:84:9f:93:
a2:8c:32:aa:ce:e2:48:fb:99:02:a0:71:32:0c:37:73:99:f7:
38:fa:2b:05:ae:ac:cc:4a:c6:da:cd:e7:82:75:f8:20:78:d2:
20:43:2a:e2:90:c6:14:f9:8d:b7:ed:86:6e:c0:6e:87:04:d4:
28:d1:96:44:99:3a:06:60:5f:d4:33:2c:7e:8b:39:fa:18:35:
3d:6c:7b:e7:30:f0:43:25:fd:9d:bb:99:92:53:e7:79:cf:47:
03:ce:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:17 2026 by rpki-client