Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
File: A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft (raw, json)
Hash identifier: wA3fpZYdXl01aPxb8YTCkmy1p1gWjM0Rdc+6BTB0C20=
Subject key identifier: 66:BD:EC:2F:E0:D8:13:C0:63:70:31:74:B9:70:EA:0D:52:08:A0:2C
Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
Certificate issuer: /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Certificate serial: 30D5E0E80937B3338B4E2B0C11729B7199C80C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
Manifest number: 0101
Signing time: Fri 27 Mar 2026 09:34:51 +0000
Manifest this update: Fri 27 Mar 2026 09:29:51 +0000
Manifest next update: Sat 28 Mar 2026 11:07:51 +0000
Files and hashes: 1: A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl (hash: /Dq1VWjuMsSY4yKGcJEL8Hg+eWfDSfaPBqqSwVe8diE=)
2: AS214757.asa (hash: KJVkb/rZusffYD5r7h9TWmgVTQ05c1gZ3oofLZ7qbQY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:d5:e0:e8:09:37:b3:33:8b:4e:2b:0c:11:72:9b:71:99:c8:0c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Validity
Not Before: Mar 27 09:29:51 2026 GMT
Not After : Mar 28 11:07:51 2026 GMT
Subject: CN=66BDEC2FE0D813C063703174B970EA0D5208A02C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:0d:dc:ff:6c:c8:f6:3c:28:b2:fe:11:06:
c3:91:d3:3b:d4:15:5a:ff:18:3e:ed:b0:06:9b:51:
b9:1a:47:91:66:26:c4:3d:0c:9a:b0:57:b4:90:2f:
7e:cd:4e:74:84:b9:68:23:52:30:ea:99:de:c8:0b:
e8:3c:c0:eb:8e:c9:00:86:f1:29:e1:05:d2:6d:12:
71:b3:4c:2c:18:f7:55:d3:8a:d2:f0:84:2b:e8:8a:
3a:8a:c9:84:7e:7c:3f:ae:71:23:c8:e6:77:2a:68:
58:e8:4d:5d:40:ec:92:0a:2d:d1:1f:8f:7e:91:ac:
93:61:2f:a3:2f:c5:92:5a:c0:36:88:e3:cc:94:0b:
6f:29:bc:95:3e:b5:66:05:1f:d3:8b:5a:1c:50:b5:
c6:b4:c7:c9:31:97:b0:81:59:53:5c:c5:c9:e4:87:
e1:db:a6:ee:3c:b6:88:3a:45:70:3e:ca:cd:c7:ef:
55:5f:fe:3b:b3:cd:11:46:d2:3d:7d:ca:18:d4:64:
20:32:02:4e:c6:b0:de:29:81:b2:e4:7d:51:33:d7:
0c:df:1d:78:67:4c:2f:56:6b:31:64:8c:6d:65:c2:
89:8c:23:ab:81:28:11:cb:b2:5c:91:07:2c:f3:19:
8a:36:19:3d:a5:84:55:40:e2:87:72:2c:8a:9f:e0:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BD:EC:2F:E0:D8:13:C0:63:70:31:74:B9:70:EA:0D:52:08:A0:2C
X509v3 Authority Key Identifier:
keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:0e:4d:e9:09:be:da:2e:f3:19:7f:ee:41:ef:3e:bc:d6:ba:
4f:0b:4b:9f:34:2e:6d:1d:19:4b:0b:0e:87:ae:c6:35:5e:2e:
1c:fd:db:2f:f9:6f:63:81:03:21:4c:c6:09:d6:3b:eb:2c:37:
b6:7a:20:66:6c:ce:08:4f:30:93:42:8d:0d:01:2d:43:76:31:
f1:a2:0c:4a:59:36:03:83:f7:ab:42:56:fa:47:04:30:c4:da:
a6:26:9d:5a:71:22:84:c5:8a:57:da:30:53:76:5e:30:e2:2d:
86:bd:f2:94:e9:32:f4:9a:c2:35:2f:fe:95:4b:df:3f:62:b3:
a2:7c:7f:79:a5:74:ea:26:9f:26:99:d3:e2:4c:64:06:ef:4d:
2d:1f:1c:80:9c:b5:9d:3a:e1:ec:89:7c:0d:c1:da:34:21:62:
f9:c4:12:63:01:73:9e:a6:36:83:38:cb:d3:49:de:a6:99:1a:
ff:2b:a7:91:20:c8:a8:7c:16:30:9c:00:ed:ab:24:5d:6a:35:
5a:2c:39:ad:c6:d0:fb:13:5a:dd:04:47:5a:da:a0:14:ee:0d:
ad:a5:4a:b7:89:01:c0:8c:0e:7c:9c:4f:0b:7b:1c:b9:0b:2c:
23:4e:1b:e1:a6:f9:5a:c8:0c:90:5f:d6:d4:ff:a3:bb:5b:20:
a8:19:43:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 20:17:18 2026 by rpki-client