
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File: 193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier: KfaCIvMsiVhGcoI4dP4DjY4xo1ijOzq9h8wUg0nG7UM=
Subject key identifier: 75:B9:19:86:F4:B1:17:76:81:F0:13:89:E8:9D:0C:1C:CA:EE:71:6D
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer: /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial: 1A75D5669007AAB090BB13E4D4A5FDF27BE2C28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number: 0323
Signing time: Sat 28 Mar 2026 21:50:57 +0000
Manifest this update: Sat 28 Mar 2026 21:45:57 +0000
Manifest next update: Sun 29 Mar 2026 22:33:57 +0000
Files and hashes: 1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: FXKKjh7G5cMeF5v5ZKzkvC+lfte2NPlFz6VRXSr3dxg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:75:d5:66:90:07:aa:b0:90:bb:13:e4:d4:a5:fd:f2:7b:e2:c2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
Validity
Not Before: Mar 28 21:45:57 2026 GMT
Not After : Mar 29 22:33:57 2026 GMT
Subject: CN=75B91986F4B1177681F01389E89D0C1CCAEE716D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:6e:63:39:26:14:ab:1e:e6:dd:4d:74:09:
5e:a2:9a:83:cf:10:c3:64:70:0e:f5:b6:01:32:04:
44:b4:ce:b2:24:ac:b9:cb:ac:29:32:b6:f5:92:16:
1a:4a:10:8c:22:79:ad:90:f1:66:b6:4c:0c:3a:47:
0f:df:de:3e:ad:25:c6:04:9b:37:4f:c9:af:ee:bc:
de:e7:be:bf:ed:4a:cd:02:b8:c7:59:ad:9b:6e:33:
8e:9a:d7:da:01:a4:56:95:f6:eb:13:ce:6b:7d:fd:
39:b7:62:7e:5a:86:e9:16:31:b2:e1:b5:f1:af:94:
cb:6c:36:99:eb:2e:6b:b7:0e:cc:37:2d:71:20:be:
4a:c9:43:07:09:fb:f4:6b:ed:96:69:45:d5:49:78:
57:63:75:e1:76:ae:38:d7:80:93:4b:78:2f:98:8b:
5f:01:9a:00:81:5b:32:09:2a:d2:2f:eb:08:07:4f:
03:5c:5b:b9:62:7e:79:7a:0f:37:0d:58:af:05:31:
ce:75:fb:63:f8:d1:6d:cc:8d:f3:8c:e2:a8:a7:97:
a9:64:e0:dd:f0:b1:c6:94:ab:19:bf:14:a0:7b:58:
20:68:24:c9:6b:ac:5d:a0:1b:03:64:2b:e5:fe:61:
e3:5a:81:c6:22:ce:7e:6d:a2:34:12:be:d9:ba:06:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B9:19:86:F4:B1:17:76:81:F0:13:89:E8:9D:0C:1C:CA:EE:71:6D
X509v3 Authority Key Identifier:
keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f9:16:b3:ab:7d:59:51:19:98:28:4a:16:62:db:93:43:4e:
96:75:43:bf:31:3f:19:59:ef:1c:a0:6b:f8:9b:b5:44:14:3a:
be:0d:6d:61:0d:be:be:6a:8f:dd:11:df:eb:99:98:5c:be:53:
3b:ff:8a:20:79:ad:3e:5b:58:8b:d7:03:1b:c5:f7:b0:a1:cc:
85:f7:5c:88:a9:a7:56:7c:b6:7a:23:de:60:45:b2:1c:b3:9f:
0e:a3:97:bf:2f:bc:8e:29:00:b2:3c:3e:5f:6c:23:c4:5e:49:
a7:37:7b:54:3e:33:6d:10:ea:3d:f5:e3:24:a6:7c:bd:4a:ac:
dc:5b:eb:d7:e8:f7:5e:84:de:01:93:06:2d:1a:25:95:b6:9f:
9b:b7:6e:e0:25:eb:c2:f6:ab:91:f5:cc:c7:a0:9c:08:6d:e6:
0f:72:d2:88:1e:39:3e:15:f9:a7:e9:a0:ce:a0:34:68:ad:ae:
e5:a6:82:48:70:18:ae:81:33:ca:5c:27:b6:54:a1:dd:d6:a8:
20:bc:58:4d:a6:c7:96:25:fa:a0:cd:d9:86:b6:51:62:02:bd:
43:ef:f1:d5:dd:72:33:df:f8:04:06:25:88:37:9d:69:5e:8c:
9d:3a:1e:6a:8d:d7:96:ee:af:60:b8:52:ad:e2:ca:e0:7a:fa:
52:ca:e4:15
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGnXVZpAHqrCQuxPk1KX98nviwowwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkzYjk3MjY0NjY1M2M4ODZkNDAwMWNkYWQ3M2VjNGU0
NzNkYTE3MzAeFw0yNjAzMjgyMTQ1NTdaFw0yNjAzMjkyMjMzNTdaMDMxMTAvBgNV
BAMTKDc1QjkxOTg2RjRCMTE3NzY4MUYwMTM4OUU4OUQwQzFDQ0FFRTcxNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfDG5jOSYUqx7m3U10CV6imoPP
EMNkcA71tgEyBES0zrIkrLnLrCkytvWSFhpKEIwiea2Q8Wa2TAw6Rw/f3j6tJcYE
mzdPya/uvN7nvr/tSs0CuMdZrZtuM46a19oBpFaV9usTzmt9/Tm3Yn5ahukWMbLh
tfGvlMtsNpnrLmu3Dsw3LXEgvkrJQwcJ+/Rr7ZZpRdVJeFdjdeF2rjjXgJNLeC+Y
i18BmgCBWzIJKtIv6wgHTwNcW7lifnl6DzcNWK8FMc51+2P40W3MjfOM4qinl6lk
4N3wscaUqxm/FKB7WCBoJMlrrF2gGwNkK+X+YeNagcYizn5tojQSvtm6Bu0lAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdbkZhvSxF3aB8BOJ6J0MHMrucW0wHwYDVR0j
BBgwFoAUGTuXJkZlPIhtQAHNrXPsTkc9oXMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk
OGVmLzAvMTkzQjk3MjY0NjY1M0M4ODZENDAwMUNEQUQ3M0VDNEU0NzNEQTE3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0dUdVhKa1psUElodFFBSE5yWFBzVGtj
OW9YTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MmM0MDVmMS1j
MzJkLTQ3Y2UtODk0My0wNzUyZWQxM2Q4ZWYvMC8xOTNCOTcyNjQ2NjUzQzg4NkQ0
MDAxQ0RBRDczRUM0RTQ3M0RBMTczLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/kWs6t9WVEZmChKFmLb
k0NOlnVDvzE/GVnvHKBr+Ju1RBQ6vg1tYQ2+vmqP3RHf65mYXL5TO/+KIHmtPltY
i9cDG8X3sKHMhfdciKmnVny2eiPeYEWyHLOfDqOXvy+8jikAsjw+X2wjxF5Jpzd7
VD4zbRDqPfXjJKZ8vUqs3Fvr1+j3XoTeAZMGLRollbafm7du4CXrwvarkfXMx6Cc
CG3mD3LSiB45PhX5p+mgzqA0aK2u5aaCSHAYroEzylwntlSh3daoILxYTabHliX6
oM3ZhrZRYgK9Q+/x1d1yM9/4BAYliDedaV6MnToeao3Xlu6vYLhSreLK4Hr6Usrk
FQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:08 2026 by rpki-client