Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
File: D332D8DC2488E4D202B591BEE081B6938818959F.mft (raw, json)
Hash identifier: ALF0cIKFyWmobQfuVgXFAjs6++XGkviBu5gW0Ay+Sw8=
Subject key identifier: CA:2A:6E:D9:C9:F3:68:DA:9F:79:D9:B6:36:1A:E4:7D:20:11:55:4A
Authority key identifier: D3:32:D8:DC:24:88:E4:D2:02:B5:91:BE:E0:81:B6:93:88:18:95:9F
Certificate issuer: /CN=d332d8dc2488e4d202b591bee081b6938818959f
Certificate serial: 4909F12A455D75B8FBCCA5915BE86158F7329A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
Manifest number: 31
Signing time: Sun 29 Mar 2026 01:09:02 +0000
Manifest this update: Sun 29 Mar 2026 01:04:02 +0000
Manifest next update: Mon 30 Mar 2026 01:37:02 +0000
Files and hashes: 1: D332D8DC2488E4D202B591BEE081B6938818959F.crl (hash: ICzK6+GpwZ11Xdvgnj8rQPZcVL9HrgHoLCpl7d8sxZU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:09:f1:2a:45:5d:75:b8:fb:cc:a5:91:5b:e8:61:58:f7:32:9a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d332d8dc2488e4d202b591bee081b6938818959f
Validity
Not Before: Mar 29 01:04:02 2026 GMT
Not After : Mar 30 01:37:02 2026 GMT
Subject: CN=CA2A6ED9C9F368DA9F79D9B6361AE47D2011554A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:2d:a3:cf:00:7e:60:3f:db:7c:e6:91:fa:
b5:71:4a:88:ae:90:cc:b4:30:8d:06:7b:ab:29:6a:
15:ba:03:82:2a:b4:5e:ba:ae:db:ee:82:7f:11:4d:
b6:1d:85:68:af:48:6a:1b:8f:47:33:dc:0c:6c:fa:
5c:3f:d0:46:b9:f2:b9:05:f7:26:9f:d4:db:e5:71:
c3:24:eb:a9:12:1d:a9:fc:18:93:35:a1:aa:a0:df:
25:bb:fd:1d:a1:ee:f8:5f:eb:d8:44:33:ce:5c:a2:
94:0a:14:24:8f:8b:15:12:c4:e2:e6:49:d9:51:77:
03:6f:64:bf:b9:df:9d:c0:d8:86:b5:4c:f9:6f:44:
93:a3:45:1e:c1:47:d7:c7:9b:d4:fb:e1:3d:23:ee:
57:8a:9b:ca:53:d0:dd:b9:f1:67:44:6c:99:55:b6:
01:a9:25:bc:25:ad:08:70:fe:d5:45:c4:e6:22:da:
62:78:17:fc:c0:78:83:b7:31:75:0e:e7:3b:8d:4b:
39:06:0c:22:c5:0c:e1:5e:36:61:f9:02:5e:5f:96:
f5:87:23:7f:c7:fc:14:3a:a0:e3:a3:9b:ac:42:d0:
8f:6b:32:f1:af:a0:4a:af:74:68:69:d5:db:d3:7a:
a5:bd:50:e3:36:d8:f0:52:35:fe:65:4c:73:6e:1d:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2A:6E:D9:C9:F3:68:DA:9F:79:D9:B6:36:1A:E4:7D:20:11:55:4A
X509v3 Authority Key Identifier:
keyid:D3:32:D8:DC:24:88:E4:D2:02:B5:91:BE:E0:81:B6:93:88:18:95:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3c:62:ab:94:df:f4:16:fb:fa:14:ff:d3:c5:17:3e:e2:dc:
2f:c7:9b:1c:a8:c8:61:38:4d:42:b1:44:91:06:8d:78:8a:47:
6b:f6:66:aa:ef:b1:1b:12:0e:05:ae:03:38:e2:e2:0b:80:e2:
bf:5a:e1:27:03:f9:30:85:b7:5b:2a:2a:34:b9:f5:9e:8b:6e:
d6:3a:1d:94:95:7c:35:ed:65:68:a8:35:01:bb:5d:5d:a2:89:
ec:55:4f:61:10:6c:a4:aa:ff:e6:d4:07:48:6f:e6:05:33:1f:
69:52:e5:06:0f:17:84:75:05:c1:07:55:97:d0:2b:da:0b:58:
a4:3f:3e:e6:9b:9e:9f:18:c6:2d:ef:d8:6b:01:56:91:5f:3c:
73:de:38:86:94:43:ed:40:ff:3e:b8:c2:2b:09:b7:aa:72:01:
84:35:bc:ac:be:65:64:fa:97:09:99:58:df:87:1c:5e:80:d8:
28:c8:2e:66:c9:5b:79:e0:0b:47:e6:54:a5:b9:01:41:26:e4:
95:ac:7f:7b:e7:02:12:62:bc:db:99:c1:e2:1c:61:c7:b1:1c:
26:27:39:6e:21:6e:3b:10:f1:bc:26:2c:3f:ff:28:c9:fa:a1:
97:95:62:2e:f9:09:66:9b:c8:f1:f5:b9:0f:db:a9:48:f1:0c:
69:c6:ce:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:42:11 2026 by rpki-client