Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: 9whw0gah1xPe1KN8r3iU8ZKuQ0VNUC0s+ycXlTi4k70=
Subject key identifier: 87:D6:AC:71:D6:B7:AE:C5:A3:AA:19:42:4B:0F:AF:09:B1:7A:20:5E
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 1479A8D21266DDA3E767F44057B66BA9256730EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 043B
Signing time: Sun 28 Jun 2026 16:46:11 +0000
Manifest this update: Sun 28 Jun 2026 16:41:11 +0000
Manifest next update: Mon 29 Jun 2026 17:41:11 +0000
Files and hashes: 1: AS215828.asa (hash: VgsD8NIsIss3o16ZxAfQixlQwnZhHsUIcDjeAoab2YU=)
2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: KhAkG7aY2GRCpS/K6BLig/XLp1ZgIYHOS4/kqBxm/cc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 17:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:79:a8:d2:12:66:dd:a3:e7:67:f4:40:57:b6:6b:a9:25:67:30:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Jun 28 16:41:11 2026 GMT
Not After : Jun 29 17:41:11 2026 GMT
Subject: CN=87D6AC71D6B7AEC5A3AA19424B0FAF09B17A205E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:b8:69:41:26:a3:83:59:bf:c1:e1:87:b5:
9a:f3:78:92:0f:4a:ee:ec:3b:59:29:8c:84:2e:fe:
64:9b:74:7a:5c:3c:8d:ef:29:eb:37:25:b3:29:e9:
04:86:aa:b4:9d:44:90:37:3f:d9:f4:57:bf:38:2c:
99:54:f6:d4:72:eb:8a:bb:fc:58:ac:f6:c8:ce:03:
23:a3:44:51:22:d3:9a:6c:ad:f0:90:6c:cf:af:09:
66:5c:52:e9:ea:6b:90:77:2b:73:05:b7:ec:9a:5f:
0d:ed:92:7c:26:1d:0c:ce:d2:d1:48:b6:04:91:c0:
2a:30:c3:92:96:b3:30:97:ce:f7:eb:09:b5:80:1a:
e2:05:e9:f4:0e:53:3d:64:31:53:05:69:89:7c:7e:
cd:8e:a4:8f:90:db:9c:12:15:3a:f0:9f:95:4a:a1:
90:53:83:83:b8:0f:b1:e8:e8:ad:c6:61:bd:21:7d:
02:80:f2:70:3e:72:24:32:bc:20:eb:85:27:20:84:
88:c8:7d:43:20:90:5b:04:ad:06:0f:62:6f:b1:87:
96:68:cb:0d:35:59:73:24:a4:ee:37:a0:1e:95:5b:
07:7b:ff:27:a2:66:98:08:60:b1:df:30:45:1b:68:
cc:ef:b7:78:68:53:87:65:51:70:dd:fa:dd:30:a3:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D6:AC:71:D6:B7:AE:C5:A3:AA:19:42:4B:0F:AF:09:B1:7A:20:5E
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4f:7e:6d:e4:01:e3:f5:08:a1:98:be:b2:39:b3:f2:4c:1b:
35:30:17:99:15:f8:44:23:b9:30:1c:56:38:17:27:ee:02:93:
84:b3:fd:cf:c6:a0:92:f5:fd:81:c8:ca:40:c9:40:40:0c:bf:
11:6f:e4:91:39:d7:2b:e2:87:0a:22:b5:18:74:94:83:b1:cc:
ba:6b:5c:11:b0:11:13:d5:98:1b:32:a9:66:d6:8c:03:2d:9d:
24:72:c5:61:f2:72:18:59:71:28:12:44:53:bd:0a:3d:5b:9d:
92:eb:63:4a:cb:a9:71:08:a2:cb:31:38:af:2f:8d:7a:5e:d0:
1f:b7:ad:97:31:65:6c:4a:be:07:fd:11:2e:92:f0:f8:61:3a:
75:fe:3a:b4:ff:f0:6d:b1:d7:a3:48:81:2a:33:99:1c:19:0c:
5f:00:e2:d9:d0:b8:90:93:be:41:06:f4:cd:0e:6f:a3:35:26:
e7:04:2e:5d:4e:08:92:ec:96:b7:97:96:3f:9a:25:9a:7a:f0:
5c:8e:dc:99:f4:c2:b8:6a:25:98:fe:c3:e6:b9:df:0e:eb:5f:
36:28:29:00:58:9b:7b:a3:d7:9c:d2:50:dc:68:c5:c9:37:90:
e5:7a:03:35:a8:bd:79:0f:21:79:7f:be:38:50:ea:ba:8a:e5:
64:84:45:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:39:03 2026 by rpki-client