Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: OjuGvHrDIsimO8BiOx4czwargM5TKV5Dn5oee9+tkxM=
Subject key identifier: 70:0D:8A:A2:51:EE:06:12:82:9D:AB:2D:86:45:9C:16:5C:ED:C9:FA
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 25171147A3F6E11F4951DF43A906C0E5406DA7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 02D3
Signing time: Sun 29 Mar 2026 00:51:22 +0000
Manifest this update: Sun 29 Mar 2026 00:46:22 +0000
Manifest next update: Mon 30 Mar 2026 01:29:22 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: 5KsZiYjo4GUqvUC8uNhGwPy/BTDMTKh4LPPjAR5tz7M=)
2: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:17:11:47:a3:f6:e1:1f:49:51:df:43:a9:06:c0:e5:40:6d:a7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Mar 29 00:46:22 2026 GMT
Not After : Mar 30 01:29:22 2026 GMT
Subject: CN=700D8AA251EE0612829DAB2D86459C165CEDC9FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a6:62:b0:c9:4a:a5:51:27:c0:c6:fd:a5:96:
60:91:40:b3:0f:85:ae:02:88:58:76:b9:4b:db:c4:
c5:24:0b:5b:00:26:02:89:f6:83:15:6e:76:e7:6a:
ae:00:67:3a:33:c5:f2:97:a1:46:8b:a1:3d:b8:cf:
8b:65:b4:eb:9d:68:f0:1c:c2:fc:f5:54:55:bd:3e:
9c:c3:91:c7:20:00:93:6f:54:f0:08:d3:80:fe:48:
0d:05:48:9e:69:78:95:20:7a:b8:8c:bc:d1:66:d1:
99:b0:e7:cf:29:b1:bc:d1:ae:d3:44:c3:6c:2e:d3:
e8:c9:f8:b6:d1:de:8d:fc:74:6f:ae:78:a4:e4:86:
33:1a:e8:cb:c5:66:c2:f7:4f:39:30:47:45:27:6a:
e1:93:7a:92:00:39:fb:db:7b:d0:fb:16:64:f2:4a:
fa:be:49:23:62:d8:68:d2:ca:15:a5:bb:ae:8d:89:
f8:07:6a:c7:49:ea:f8:31:3b:dd:4d:4e:51:76:d9:
b7:c4:50:fc:0e:68:e4:6a:84:b8:4c:28:df:12:df:
e2:d3:24:f6:69:1c:ff:30:1c:d7:f9:5a:66:1c:25:
56:f1:83:89:e4:4c:59:22:cc:9c:c0:33:b3:42:e0:
ac:f7:5f:ea:43:dc:2f:24:3d:a6:f6:29:3e:0e:c3:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0D:8A:A2:51:EE:06:12:82:9D:AB:2D:86:45:9C:16:5C:ED:C9:FA
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:54:69:e7:95:4f:48:3d:cd:80:ec:a9:7d:9b:be:2b:15:
21:4e:33:98:8a:25:b8:24:85:c1:9f:fe:eb:a4:9a:bc:2f:62:
39:28:ba:03:10:23:33:46:5a:88:be:66:d1:0e:b1:1c:55:0c:
26:9b:17:1d:77:dd:ad:f7:75:2c:d8:14:83:0e:19:a3:5c:b4:
a3:d7:41:8a:99:3b:a2:bf:55:c2:89:6c:fe:af:16:f9:11:07:
cf:95:08:bf:2d:f0:c5:34:b4:91:7d:a5:10:55:dd:9e:59:aa:
01:1b:73:cf:27:7c:b5:1d:9f:18:ac:9e:ad:1b:0b:13:47:ea:
46:a6:7c:3f:29:2f:51:26:97:9a:66:1c:cc:ed:0b:80:d5:d1:
46:85:71:c2:a7:14:15:d9:bd:22:a6:20:f9:7e:1a:3c:05:3b:
0f:47:fd:18:6b:87:35:b1:63:96:d3:6c:18:26:ae:2a:7f:6a:
73:0b:a8:b2:20:0a:2d:f8:6f:1d:ac:b2:34:ab:10:a9:f7:db:
9a:b9:b0:82:a1:8a:3c:51:41:60:b3:ad:74:d9:19:22:5e:7b:
4f:0f:48:ef:a5:25:44:80:f1:a6:6e:7f:d0:17:0b:72:21:dc:
e8:a1:72:6e:aa:36:6d:58:fb:24:f7:56:58:4c:aa:52:48:df:
44:5e:c2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:40 2026 by rpki-client