Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: DPEcWAKsokYpg5e2NgJYpWEHsqSbCYaGyhw5jvqiKe8=
Subject key identifier: 67:07:0D:7A:11:2E:6E:4D:1D:18:EB:DF:4D:71:C7:08:A0:31:5A:1B
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 3F3F57AEE9A87343CB11A84B7D5D3C1BB15A4811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 03B8
Signing time: Sun 13 Sep 2026 20:57:15 +0000
Manifest this update: Sun 13 Sep 2026 20:52:15 +0000
Manifest next update: Tue 15 Sep 2026 00:40:15 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: xjYbZnornyUR+E2U7Y2ury3frZbK1YUYCYK9MR80Qto=)
2: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 00:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3f:57:ae:e9:a8:73:43:cb:11:a8:4b:7d:5d:3c:1b:b1:5a:48:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Sep 13 20:52:15 2026 GMT
Not After : Sep 15 00:40:15 2026 GMT
Subject: CN=67070D7A112E6E4D1D18EBDF4D71C708A0315A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:42:7e:56:7b:1f:1f:0b:14:7b:dc:1b:b2:
11:59:dc:0f:c8:aa:cc:de:63:49:74:29:fe:cd:46:
c6:d3:5a:11:97:c1:b2:c2:cb:54:3c:ee:d2:c2:6f:
fe:97:60:3e:ac:08:0c:7e:16:b7:3f:01:07:a1:8e:
15:47:18:1f:40:c7:a4:11:45:e5:22:de:56:f4:7b:
9d:12:a6:1f:bf:86:64:5a:0f:7c:3c:51:14:e7:77:
ec:91:bc:4c:15:c9:8a:9b:65:a1:07:42:f9:3d:49:
07:6a:dc:08:b2:c6:55:c0:14:61:c5:73:17:21:ef:
c2:89:4d:1c:ce:c1:80:8f:16:21:86:be:8a:15:04:
cc:41:10:b2:7c:8d:f2:8b:91:21:29:25:e5:32:cb:
7d:ec:11:a0:f4:fb:a3:57:41:f4:93:83:6d:d0:53:
13:1c:c8:98:a1:3d:c4:f7:8e:9e:cf:ba:96:e7:a0:
2d:69:2d:a0:02:8b:23:59:cd:86:9e:a7:1e:b5:1f:
2e:2c:e7:29:cb:d7:27:87:c6:6c:b9:cc:f5:12:c7:
6a:83:2d:59:3e:eb:d3:73:dd:1e:d7:6a:0b:8a:8e:
23:a4:20:2d:14:23:e7:0d:3d:a6:c5:79:03:c6:e8:
1c:a5:eb:cb:0f:96:26:a8:a1:63:ad:25:22:aa:ba:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:07:0D:7A:11:2E:6E:4D:1D:18:EB:DF:4D:71:C7:08:A0:31:5A:1B
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e1:b4:f5:40:d6:6e:25:44:ac:28:a4:fb:e8:47:f9:a5:c5:
c8:de:b2:6d:bb:54:9c:1f:59:b6:d9:27:c9:fe:44:fe:6d:ec:
b0:82:81:69:18:25:30:fa:63:8d:de:d6:bf:1b:ac:27:97:e5:
3a:7d:32:e7:13:96:0c:5f:4c:f1:0e:c7:27:fa:94:26:df:81:
3f:ae:5e:be:f3:01:a2:65:3f:59:0e:07:5c:72:91:1b:3d:0b:
54:7b:2f:bc:ec:99:3b:98:ae:c2:dc:95:8d:38:79:cd:68:4d:
a8:c9:94:76:77:b5:0f:31:69:b0:5c:e9:31:c5:d2:53:36:f9:
1f:86:3d:68:15:1a:bf:e2:f1:ea:fc:ec:8f:18:7a:a1:d5:c1:
3a:d0:27:4c:a2:69:b3:c3:a4:7d:ea:cb:12:49:6a:a2:a5:51:
b3:94:11:83:f9:71:f3:c9:fc:0e:0d:1c:b2:3c:04:6b:a5:4b:
da:88:4e:07:19:43:0c:d4:7f:4a:0d:0c:ac:33:97:4c:27:1c:
66:7a:ff:69:7c:48:04:cf:0d:da:bd:42:f9:3b:07:da:d4:97:
33:73:66:2f:c9:ca:f6:4e:02:d0:bf:51:b2:a4:f9:05:ae:d0:
91:0d:e7:3c:90:52:3b:a0:87:d5:f9:b3:31:6d:57:54:53:0c:
67:90:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 17:43:06 2026 by rpki-client