Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: vfjC5LaWZ3SaRAtaNawMkgpgFGVGRAm+pKH5dr9hrHM=
Subject key identifier: 49:C0:5B:AF:D4:D0:44:1B:4A:63:73:E0:05:66:D2:F1:20:17:CF:DD
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 395A15BA62E67C5C6C0A1C91B682FE0BBEE6648C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 0390
Signing time: Fri 14 Aug 2026 09:04:13 +0000
Manifest this update: Fri 14 Aug 2026 08:59:13 +0000
Manifest next update: Sat 15 Aug 2026 09:12:13 +0000
Files and hashes: 1: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
2: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: XhBmLcuFLrxqjBnym5NcGiUH3Z671J0wXXTpxI2bcvg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5a:15:ba:62:e6:7c:5c:6c:0a:1c:91:b6:82:fe:0b:be:e6:64:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Aug 14 08:59:13 2026 GMT
Not After : Aug 15 09:12:13 2026 GMT
Subject: CN=49C05BAFD4D0441B4A6373E00566D2F12017CFDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:70:9d:b3:63:07:93:68:42:7d:5b:c9:0d:
37:c1:00:82:33:bf:2b:0c:c1:f1:8a:3e:68:d1:11:
d3:60:fb:05:d0:df:46:5c:a1:db:73:22:d8:6a:39:
94:76:f3:8c:74:55:65:ae:7d:cf:54:a6:3b:8f:36:
b9:32:a7:c4:29:94:16:b9:b0:22:85:86:21:86:ab:
4f:c1:59:94:38:9a:5b:f8:30:83:3d:61:17:dc:e4:
e1:4c:de:38:1c:b2:da:5e:86:7a:2e:73:7b:d4:9a:
a1:57:97:42:d6:3a:2b:f2:b7:cd:59:0f:97:9b:a6:
64:d9:fe:a4:97:cf:9c:aa:4e:49:fc:9b:35:3a:86:
90:e2:ce:72:f5:43:04:73:67:b3:eb:c8:fc:9b:44:
97:de:ea:95:c9:9f:5b:9f:84:df:65:1a:55:da:d0:
8d:d0:51:ce:b4:2e:c4:51:53:36:1a:ec:1d:e6:08:
9b:69:05:3e:14:61:25:27:a9:38:cb:16:f5:17:9b:
b7:c8:39:22:3b:6a:68:38:4e:8f:f4:2e:dc:e2:0d:
02:af:a8:0c:80:34:25:5a:d2:25:26:b0:1b:05:68:
91:bb:d3:fc:45:73:b2:9a:d4:bc:c0:93:b3:f5:aa:
33:fe:76:6e:c0:90:d0:57:17:2d:49:21:6f:9c:c4:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:5B:AF:D4:D0:44:1B:4A:63:73:E0:05:66:D2:F1:20:17:CF:DD
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d3:cc:4d:e0:43:08:79:c8:c7:5c:42:cc:b7:94:69:a0:d5:
00:2a:82:ba:19:1b:a4:72:85:c3:06:9e:3a:ca:57:ac:a2:46:
d9:6b:bc:c7:c7:b1:a2:6c:92:6c:c6:17:a7:88:31:95:b1:4c:
d7:49:27:9f:30:69:e2:1e:07:f3:14:e4:16:7b:d1:9d:2b:f2:
b4:c2:68:55:2d:6c:50:2e:1e:41:fa:57:5e:5c:64:ad:f5:b5:
d1:c6:f4:cc:7c:41:e0:5e:fe:0a:af:84:9c:34:6f:15:82:e1:
bb:a8:68:08:52:7d:cf:9e:fb:18:bc:cd:42:83:13:a6:a2:05:
28:b9:55:c2:6c:40:33:51:13:7c:06:56:d8:b7:77:d8:31:31:
8f:3e:ab:38:0e:10:cb:5d:c0:24:49:29:10:71:ee:ca:a2:a2:
a4:bb:21:34:8c:93:25:52:c8:cd:72:04:1d:a0:d4:9d:60:cc:
9e:87:a8:74:bc:db:f4:a4:de:48:72:4b:50:db:da:2e:12:b8:
e6:7f:76:d6:9e:78:6a:fb:de:ab:84:ca:ed:90:c3:71:f3:ee:
92:cd:3b:e6:53:10:79:42:03:3e:98:14:99:5d:bb:fc:ac:3d:
70:83:36:33:21:37:63:f7:54:8c:ac:ea:4c:5c:fa:fe:5c:04:
04:ae:f0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:30 2026 by rpki-client