Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: 7x4Q0lbVKRnRBNU4PA4DCrwbVX1WrS0LmDwd+Pm+q8Y=
Subject key identifier: A9:FA:59:AB:E9:8C:4D:AE:DA:F2:40:0A:F3:EA:CF:11:B2:22:32:52
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 7D34323CDAF4AE625C38FCD7ABD694A45A06A1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 0314
Signing time: Sat 16 May 2026 00:23:03 +0000
Manifest this update: Sat 16 May 2026 00:18:03 +0000
Manifest next update: Sun 17 May 2026 01:25:03 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: t1bYjei0lFjEp/CDPl3yNM/xmTMNH4T4PRCMfxRkj/o=)
2: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 01:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:34:32:3c:da:f4:ae:62:5c:38:fc:d7:ab:d6:94:a4:5a:06:a1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: May 16 00:18:03 2026 GMT
Not After : May 17 01:25:03 2026 GMT
Subject: CN=A9FA59ABE98C4DAEDAF2400AF3EACF11B2223252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:c3:2b:f6:36:5f:f9:4f:fc:2f:a5:51:91:
ed:5d:34:b9:38:95:7e:d0:f6:7d:b3:e4:6c:98:74:
dd:29:9f:d5:75:66:50:d7:1f:e9:54:82:de:90:0c:
3d:d9:91:cb:01:a9:71:d2:a1:9d:35:c6:38:a9:d0:
c8:2e:a9:c7:d3:b6:19:23:bf:4e:ec:0f:e8:5a:c2:
4d:38:c5:1c:2c:c7:ba:98:d1:22:1c:d4:4f:84:95:
e3:cb:fe:b9:22:c1:46:8a:97:b4:5d:ad:56:9b:81:
39:18:99:f7:63:a5:66:47:ce:14:91:90:41:50:9f:
25:c4:01:4b:0e:7a:6c:17:80:44:c2:31:ca:9d:61:
d2:03:44:4c:af:04:45:3f:32:76:83:0f:48:d2:9b:
ac:1f:04:b3:e9:25:fd:8e:87:f0:9e:09:24:8d:fd:
bf:16:47:71:b5:6b:81:79:20:12:8a:59:18:34:9e:
27:7e:95:95:d6:0a:95:66:49:ee:0b:7a:62:1b:91:
8a:4b:6c:c9:f3:9a:6f:16:6b:89:94:3a:b8:d6:ca:
21:02:89:08:04:dd:eb:91:e9:ab:7d:54:5c:39:ad:
3b:1f:78:3d:88:48:5b:96:d6:49:46:48:37:ad:e5:
3e:df:0f:be:50:28:80:84:f3:57:03:32:30:1e:e5:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FA:59:AB:E9:8C:4D:AE:DA:F2:40:0A:F3:EA:CF:11:B2:22:32:52
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:16:1e:de:3f:f7:12:c5:be:eb:8d:97:d9:82:e8:7b:f2:15:
c5:10:34:e1:54:19:42:d2:e2:78:b0:c2:42:46:78:36:0d:1a:
bf:9e:9f:a9:f5:75:e7:10:e0:e0:30:50:16:23:29:8c:37:0a:
ca:ca:34:49:0f:6e:1e:26:d1:cf:6f:85:98:e4:5c:58:f0:eb:
80:39:cd:14:49:4f:74:ee:45:2c:58:72:d7:66:5d:27:17:e6:
f0:ae:4c:6c:4f:80:49:4f:c8:a8:2b:cf:43:e7:2a:8a:40:3a:
93:39:70:92:99:01:0f:73:6a:91:3c:1a:d6:7c:1f:fe:0c:10:
b8:02:cd:5a:e9:4b:48:8d:ed:76:93:73:31:d1:86:5f:2f:b8:
3b:7b:a9:75:ce:85:c1:d3:40:4e:93:a3:62:9b:66:b2:3d:7f:
76:50:6b:74:eb:d7:34:4e:5e:c1:ac:b6:a7:77:e2:1a:b2:e6:
b6:e2:31:bd:ea:62:83:f2:3d:cb:51:67:cf:dc:a5:69:5b:8b:
21:1a:42:dc:eb:f2:4e:62:02:0d:ad:d1:3e:eb:ae:8f:b3:ae:
35:3f:ad:27:76:45:96:25:a5:4e:1b:7f:40:44:81:4a:04:3c:
de:f7:aa:0a:30:5f:9a:aa:59:21:36:01:77:49:7a:f8:74:68:
1d:19:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:03 2026 by rpki-client