Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: GcPNvFJAiUcQbzzk/pMotuR0tgNOM6rkOzKxm3YXiRg=
Subject key identifier: 76:B6:F2:C3:5D:E5:DE:E3:FB:9F:7D:20:0F:76:26:CE:E1:E8:F8:A7
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 5B065C41595D008B0B474D7AFFF236D6CA369132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 0353
Signing time: Tue 30 Jun 2026 08:52:30 +0000
Manifest this update: Tue 30 Jun 2026 08:47:30 +0000
Manifest next update: Wed 01 Jul 2026 11:00:30 +0000
Files and hashes: 1: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
2: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: UF3pPPna2aGlBG/YSvnfVLiKblc2wkO2JGCQ+YSXVxo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:06:5c:41:59:5d:00:8b:0b:47:4d:7a:ff:f2:36:d6:ca:36:91:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Jun 30 08:47:30 2026 GMT
Not After : Jul 1 11:00:30 2026 GMT
Subject: CN=76B6F2C35DE5DEE3FB9F7D200F7626CEE1E8F8A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:03:b7:59:86:6b:9b:28:99:6d:31:22:fc:
0d:1c:db:c7:4c:b5:da:22:05:25:0b:50:d5:68:66:
d7:df:b8:50:c1:f7:b4:89:5e:ce:e3:d0:5e:a4:fd:
60:b7:39:a4:10:c1:db:e4:22:11:30:ae:33:52:98:
13:4c:79:8d:df:8a:1c:d7:b3:03:f6:7f:94:b1:e0:
e4:ee:d3:89:a7:dc:ad:f2:15:20:93:e6:7d:30:c8:
f9:28:b8:c3:80:cd:f8:75:34:cb:c5:1f:b6:92:c4:
e8:33:9f:8d:14:16:9f:fd:05:5d:5e:01:df:73:ce:
5d:af:e1:54:9e:d0:12:4c:36:24:c5:69:27:60:c2:
2d:67:cc:1c:87:f4:33:5e:b9:4d:f6:73:d0:19:6e:
75:02:d9:bd:10:43:7a:0e:cb:56:94:36:0d:ce:16:
b3:e0:60:be:38:60:3b:e6:4d:86:fc:34:a3:25:ba:
2c:cb:81:6e:86:57:c4:76:15:f5:69:ad:0c:cf:f0:
21:3d:20:d7:36:b4:ad:83:c0:c7:6d:f6:72:99:e0:
b1:4b:b9:cd:a4:85:54:d4:cb:dd:05:79:31:f4:29:
4d:3b:b6:4c:d7:88:8d:51:77:79:f2:61:03:a1:14:
5b:d3:ba:0b:0e:f1:0b:92:d7:4f:11:87:2c:0f:58:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B6:F2:C3:5D:E5:DE:E3:FB:9F:7D:20:0F:76:26:CE:E1:E8:F8:A7
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:38:11:52:5d:82:f5:b9:56:af:b7:d9:e4:2a:d3:b7:50:ad:
f7:f5:0f:a3:39:2e:23:0f:b3:c7:38:5d:9e:33:8d:cd:31:cc:
51:59:03:f2:30:f2:3a:a9:b5:97:fe:5e:f5:7a:b0:43:66:8b:
c6:25:b9:6a:ca:0a:3b:cd:90:00:61:2a:cf:64:12:97:c1:7c:
84:64:fa:cd:ea:1e:6b:ec:05:e8:b7:0f:3c:1b:2d:df:8e:dd:
4d:cb:b5:33:c9:be:d9:3c:e3:c5:a7:3c:10:ab:a2:d0:d8:e0:
c9:d6:20:a2:66:c2:3c:3d:f1:55:3a:14:2e:0f:54:a8:60:f6:
c9:62:85:95:f7:8d:1d:91:b4:c5:70:3e:0c:93:63:3a:c9:c5:
46:02:60:da:1f:47:43:dd:f9:89:62:e9:26:72:ad:b5:1a:0e:
b9:f9:a1:ae:91:ee:3c:bc:25:92:3e:37:35:7b:8c:26:21:c3:
83:94:61:3e:3b:0b:9c:3b:90:fe:73:ee:b9:bb:69:de:40:93:
e3:7a:14:1e:0f:ce:0e:47:aa:23:b2:1f:f9:26:25:f1:4b:bb:
74:b8:f9:b3:ac:05:5b:3c:fe:c4:0c:f1:21:da:7a:29:ff:c1:
02:5f:91:88:97:ca:0d:85:98:dd:e9:e4:75:97:43:8c:48:8b:
fa:d7:f4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:58 2026 by rpki-client