Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: S7bC3NQMj9BBJ2sHv26aP0pNDB4w6/iqjtVsHhAE3RY=
Subject key identifier: 9B:98:3C:E3:EE:06:62:CA:1F:BC:31:0C:50:D1:DA:01:18:5F:47:D0
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 0581F8524CEE8B7DB010C01D12200217B9CD154F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 03FD
Signing time: Thu 14 May 2026 03:38:53 +0000
Manifest this update: Thu 14 May 2026 03:33:53 +0000
Manifest next update: Fri 15 May 2026 05:24:53 +0000
Files and hashes: 1: AS215828.asa (hash: gn0zvNq0jqiLUYK3MJlHlnirErp0oB8cq8E7u3vxlhE=)
2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: Q2gIMCRufKsae8aIOEjETGnR+WEwrzgCySpMMP0YxFk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:81:f8:52:4c:ee:8b:7d:b0:10:c0:1d:12:20:02:17:b9:cd:15:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: May 14 03:33:53 2026 GMT
Not After : May 15 05:24:53 2026 GMT
Subject: CN=9B983CE3EE0662CA1FBC310C50D1DA01185F47D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:e9:af:fd:0b:5e:83:0d:15:6a:df:8f:cf:
5c:d5:23:d1:bf:fb:42:aa:b1:e9:5d:42:ed:0a:56:
8a:96:59:c2:eb:5e:37:8a:f0:25:fb:ec:49:4f:73:
9c:bf:9f:7a:0d:31:b8:07:8e:40:1d:a3:ee:79:dc:
6d:87:e6:28:14:78:84:93:af:8f:39:15:f9:e6:46:
0a:8c:32:da:ba:2b:d9:d5:2c:2a:b5:ce:b9:dc:e1:
fb:b1:99:df:b3:97:57:32:61:7a:45:10:ea:ec:75:
e2:d6:21:d4:62:e2:e4:35:fa:08:62:70:a2:31:a2:
60:56:54:c8:2c:eb:05:c0:ff:82:8a:d0:e9:34:5e:
c6:fe:72:d2:97:77:a6:a9:34:85:a2:66:fb:19:de:
12:75:e7:29:dd:81:34:f5:89:bd:5c:fd:df:cf:74:
fc:c6:a9:b2:5d:d9:75:81:50:35:40:d0:e0:8d:2c:
86:f3:6e:d2:a7:bd:f4:6e:30:66:37:ad:21:63:78:
c4:89:25:eb:4b:09:a0:07:42:52:7b:18:6e:ef:23:
2d:53:a6:7f:37:4a:5b:02:d3:0a:0d:9e:1e:ef:b8:
58:3c:21:f1:8c:9e:80:0e:61:86:9a:74:b2:3f:9b:
1e:6a:b5:85:3f:06:e5:94:c3:b2:55:f4:a7:32:dc:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:98:3C:E3:EE:06:62:CA:1F:BC:31:0C:50:D1:DA:01:18:5F:47:D0
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fc:9e:15:c1:1a:0b:76:5d:58:65:f5:0f:54:77:2c:17:0c:
0f:5c:a1:9d:03:6e:27:fb:a4:10:b1:b0:83:5c:bf:d8:8a:e4:
6c:ad:a4:8f:d3:b9:be:31:d3:7d:e2:20:e4:64:ff:73:00:a4:
ce:1f:42:36:82:4b:b4:35:0e:7e:5a:db:c2:ed:d3:4f:3e:7c:
93:f7:b5:47:26:ab:3f:41:ca:e6:17:49:77:05:c4:03:18:19:
7d:55:a0:35:0e:13:b9:69:15:44:c1:1e:f3:b2:b2:00:6b:48:
a1:75:f2:e3:ed:cc:45:83:65:83:77:52:5c:6b:99:cf:b7:f8:
65:34:13:a4:a0:d5:0d:9f:2b:d5:21:07:bb:d1:ab:bd:d1:0d:
f8:f9:b7:52:9e:7d:90:f2:5f:55:ea:32:5f:4d:71:8f:3c:18:
f0:3a:6d:bc:01:f9:86:b7:65:bb:a4:0b:92:d9:b9:05:41:59:
7b:b7:5f:e5:53:30:f4:91:30:df:7d:e6:38:d1:40:52:c9:50:
5a:cb:be:15:c6:13:f2:0f:8b:05:11:88:a7:78:f6:a4:51:9e:
69:81:95:1b:1c:3b:1a:d3:bb:7e:58:c3:81:a0:3b:79:2d:b8:
9d:73:66:a7:4c:9a:cc:07:84:e2:0e:88:bc:75:b0:8c:ee:63:
5f:35:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 07:40:40 2026 by rpki-client