Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: sChJaHj9onSHqsHWpIMPTI1iRaKROfR7cAL0tdkH1fY=
Subject key identifier: 79:F0:AA:0E:57:10:E1:94:A2:52:4A:FF:C7:E7:5F:EC:01:2E:32:9A
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 5066CD58AB8BE324897C953E4C0CB39A0ED53FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 03E1
Signing time: Wed 14 Oct 2026 14:13:16 +0000
Manifest this update: Wed 14 Oct 2026 14:08:16 +0000
Manifest next update: Thu 15 Oct 2026 16:48:16 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: M+QorxyYT2CK46B2BqoQv3Fs4vB4gaYJMLUqFsnr+Xo=)
2: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 16:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:66:cd:58:ab:8b:e3:24:89:7c:95:3e:4c:0c:b3:9a:0e:d5:3f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Oct 14 14:08:16 2026 GMT
Not After : Oct 15 16:48:16 2026 GMT
Subject: CN=79F0AA0E5710E194A2524AFFC7E75FEC012E329A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:42:a1:80:4e:79:12:9c:05:ac:b4:fd:79:ec:
fe:9e:64:19:8b:2c:b3:ea:6d:ca:44:ce:ad:ef:de:
8b:e8:15:ec:75:51:96:5c:b2:a3:2a:23:b3:2e:7a:
7a:e9:1f:4d:92:94:2c:c8:64:76:84:58:02:e1:64:
78:52:63:dd:09:51:1b:00:36:4b:09:12:3a:00:49:
02:83:2b:14:00:87:fb:96:f7:87:34:e8:9d:22:fe:
da:0c:87:15:d8:e3:bf:75:8b:dc:75:60:65:86:b2:
f8:76:bd:a7:04:4e:0f:a2:e8:0b:39:94:2d:49:ab:
be:10:81:aa:32:3b:14:49:08:a3:b6:0c:4b:5d:57:
5d:2b:18:d7:bf:f6:10:8c:f9:4a:47:20:a8:e2:6f:
a1:a4:6c:c0:20:ef:53:3b:8f:77:fb:99:5c:c3:3c:
73:96:ad:1e:ad:99:1d:28:3f:2d:d7:24:c6:1b:d0:
a3:39:de:42:35:8e:b6:b6:3d:58:93:20:c8:37:78:
8c:a4:ff:03:d9:bb:b8:98:de:db:6b:be:8b:96:10:
72:fa:7b:f7:88:9e:c4:18:ee:23:ca:0f:3a:8f:c6:
63:2f:5d:ff:94:78:0f:26:09:58:ab:0f:e9:67:be:
f0:1f:18:53:94:3a:60:b7:0a:07:99:68:7e:1e:f9:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F0:AA:0E:57:10:E1:94:A2:52:4A:FF:C7:E7:5F:EC:01:2E:32:9A
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ed:14:df:e7:7d:30:50:42:4d:7a:4f:29:46:5c:42:b7:19:
b1:47:fc:89:3e:83:9b:cb:93:07:6f:71:ad:7a:d2:13:50:a9:
cd:0d:ee:4d:de:3b:f1:ae:42:30:f0:46:23:11:d6:d4:86:28:
ec:25:48:80:45:75:ee:98:5b:6d:8f:2e:39:f9:e1:b6:dd:e3:
7d:f7:1e:af:be:bb:8c:97:8f:08:ab:fa:d1:ea:81:36:33:9f:
2e:e6:a1:51:b8:03:92:84:49:b0:e3:ce:fd:e7:8a:88:85:65:
67:fb:3f:51:97:79:dc:4b:83:8c:9d:c3:99:a5:ad:58:14:89:
74:97:70:03:9c:7d:49:9d:c2:a3:a5:95:19:c1:20:b4:f5:2a:
92:28:dd:7b:8e:6a:bb:fb:f9:7a:87:28:ae:92:78:15:ea:ee:
80:42:88:91:02:12:bf:55:06:87:08:f1:6d:e0:97:5b:e4:83:
9f:e8:c7:eb:8c:60:39:e7:af:d8:41:14:3a:79:b0:6c:d0:15:
20:b3:ec:60:26:83:15:37:d1:de:54:66:31:42:bf:69:25:78:
53:2f:86:4a:d4:06:49:13:e0:5f:79:ed:b3:55:ad:c8:2f:e7:
2f:02:cf:12:44:48:e2:d6:0e:c3:78:e7:79:e4:eb:36:98:e9:
ba:1d:41:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:48 2026 by rpki-client