Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: QfN5JC2+gOFpxfB5KINgNmAFBVmlj/h0boqZ5zey5XY=
Subject key identifier: 69:10:34:C1:E1:63:28:76:A0:04:6D:AA:2F:09:52:66:50:A1:2A:4F
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 42820912CB26D70DF772893CD6D2E012C03FBB38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 03BF
Signing time: Sat 28 Mar 2026 22:24:20 +0000
Manifest this update: Sat 28 Mar 2026 22:19:20 +0000
Manifest next update: Sun 29 Mar 2026 22:50:20 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: GDbVCpBMmzCE5ZTdjS/gvWo/BnNTSu3CPcKnXH6VvPE=)
2: AS215828.asa (hash: gn0zvNq0jqiLUYK3MJlHlnirErp0oB8cq8E7u3vxlhE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:82:09:12:cb:26:d7:0d:f7:72:89:3c:d6:d2:e0:12:c0:3f:bb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Mar 28 22:19:20 2026 GMT
Not After : Mar 29 22:50:20 2026 GMT
Subject: CN=691034C1E1632876A0046DAA2F09526650A12A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:3b:ce:f2:62:1e:56:28:10:a7:14:a1:25:
10:b1:ed:68:db:7c:4a:12:68:94:80:c5:c0:a9:28:
54:d9:4c:7c:f6:8c:9e:9d:8a:21:6f:c5:82:f8:87:
c8:3f:75:4f:ca:87:7b:0a:f1:3b:83:c7:25:86:57:
cb:23:45:e8:41:25:a6:dd:fe:7f:fe:7a:ec:4b:db:
23:fc:2d:8f:56:03:e4:09:6a:11:ae:1c:a2:bb:f8:
c1:98:49:91:64:10:aa:03:7c:a2:7d:e6:32:bc:b8:
8c:ec:30:85:f1:f6:40:e9:a7:0b:ea:e3:0e:9e:8c:
08:ed:31:cd:9e:73:4b:02:f1:af:b8:e1:cd:f8:9a:
7d:66:b2:a0:e3:44:39:d8:ad:f3:56:79:99:fb:0b:
d8:95:9b:08:d9:62:d2:5c:0c:99:d7:70:55:51:b7:
d3:ed:b0:6d:ee:d7:62:c9:eb:21:fa:6d:eb:aa:6e:
fe:0e:aa:a1:cf:d1:bc:da:5a:f5:a3:2d:09:e4:ea:
35:3e:94:98:c4:2f:51:d5:f9:99:dd:33:3a:f9:28:
d9:cc:50:22:40:c6:80:03:7e:a7:07:f7:50:63:41:
f3:b5:8c:b4:f5:35:0c:99:bb:fb:47:0f:7e:de:b0:
83:34:a1:14:a3:ce:6e:00:23:ed:4c:31:d5:1d:15:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:10:34:C1:E1:63:28:76:A0:04:6D:AA:2F:09:52:66:50:A1:2A:4F
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:15:ec:80:42:ca:6a:a2:d8:1c:ac:a3:ca:a8:55:55:0a:cc:
06:03:aa:5e:90:4d:b2:b7:7c:07:51:5b:ab:46:5e:57:a8:4a:
aa:b6:72:d6:7d:81:96:3b:ff:68:28:ca:4f:37:bc:3f:4a:01:
d9:50:a7:c2:cc:22:ab:3e:83:de:f4:ef:25:3e:ff:0d:da:5b:
c4:54:9e:aa:e0:3e:ed:b1:9b:3b:ef:56:71:d1:da:d3:1b:61:
10:46:ce:ca:a5:5d:99:99:84:dd:f8:11:b6:ed:ce:da:e3:86:
53:97:c6:9e:58:8a:86:52:fb:8c:ce:a7:dc:95:13:46:67:84:
ab:85:b1:48:17:51:30:e4:14:c5:33:ed:28:2b:d9:29:70:12:
36:7b:28:e8:ae:54:9e:b8:39:17:f4:db:ef:cf:e4:ce:63:eb:
bc:78:ed:23:82:11:dc:44:a1:59:bf:da:2a:2a:da:6d:59:52:
76:72:54:4a:d5:07:5c:4b:0b:dc:44:54:77:0f:a1:37:eb:a1:
95:c0:6c:65:28:f8:62:ce:93:cf:e2:27:a7:d5:cc:43:d2:b1:
ea:7b:86:bf:58:26:9f:6d:05:64:f5:18:d4:29:4c:5a:f6:1d:
23:2c:4f:6c:a8:42:31:54:44:c5:6a:3f:65:aa:1a:fb:8e:29:
81:5e:6b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:32 2026 by rpki-client