Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: 9Jl1H243H4En2EY/DJupgYRKers8z4kakbBCEg1SLJ4=
Subject key identifier: EB:90:49:B2:02:57:56:0F:63:7E:46:3C:C1:C2:AF:B8:78:46:98:A8
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 1D5C56BD107A8AE6319CACFA9BCDD44480997949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 04D4
Signing time: Wed 14 Oct 2026 23:59:18 +0000
Manifest this update: Wed 14 Oct 2026 23:54:18 +0000
Manifest next update: Fri 16 Oct 2026 02:22:18 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: ovfD8Nae0fZU+e2P4Kyk5TsoNtmZC8We0qYlvs5lQJI=)
2: AS215828.asa (hash: aLfEnni+8YGsFkiwicZpetRmsooIvHjNGHfRPX60CaA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5c:56:bd:10:7a:8a:e6:31:9c:ac:fa:9b:cd:d4:44:80:99:79:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Oct 14 23:54:18 2026 GMT
Not After : Oct 16 02:22:18 2026 GMT
Subject: CN=EB9049B20257560F637E463CC1C2AFB8784698A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:dc:7e:76:3d:12:1e:c6:c3:4e:b8:a6:48:
f1:21:38:c3:0d:a9:6d:83:64:5c:b3:ab:df:f7:29:
ac:e2:4a:47:f0:68:02:04:f7:2f:cb:00:5c:c0:13:
6e:62:60:4b:40:51:db:f4:f4:38:bb:77:16:ca:3d:
8b:67:c5:09:90:ba:ff:d6:9c:63:2b:9c:35:2f:50:
4e:88:d8:b5:5a:6c:69:b9:30:26:72:d4:85:ac:86:
c5:fb:ad:cb:24:99:24:37:8e:f5:8d:57:f5:33:3f:
c5:f9:55:d2:56:ad:44:ee:3a:c1:fc:aa:5f:98:80:
c8:6b:e8:b9:ef:48:c2:cb:f8:0a:89:e2:f1:9a:27:
89:2e:4c:ac:b7:cf:54:78:15:b3:0f:85:cf:c8:ca:
06:21:01:80:d8:aa:8e:6d:cf:27:af:a7:bd:22:d8:
cf:a1:f7:65:be:51:a5:37:24:97:3c:32:83:7e:a4:
b1:30:83:e8:61:05:7b:97:cf:92:b9:ad:27:52:19:
d3:02:8b:0c:a1:e1:43:b1:cb:39:e6:3b:93:11:00:
c3:0d:e6:78:86:6c:a4:76:97:ec:c8:a1:44:3d:e9:
bf:d3:7c:21:45:6e:f6:59:af:07:b9:a1:5c:65:20:
ce:15:ee:57:93:6d:73:8d:2e:1e:08:f2:8d:e2:b0:
74:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:90:49:B2:02:57:56:0F:63:7E:46:3C:C1:C2:AF:B8:78:46:98:A8
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:6c:29:54:c9:c4:3d:b0:c2:91:99:02:cb:59:a2:59:4e:60:
dd:25:d4:0e:9c:29:3e:5e:e5:59:39:8a:70:b1:85:18:33:8b:
cd:0e:12:78:33:f7:68:65:ec:26:dc:f0:d5:0b:be:a2:74:d9:
84:ad:7a:55:03:34:1b:72:f0:98:84:28:03:f8:5e:5e:5f:64:
e2:6c:60:29:3d:9a:3f:2d:73:a5:9c:93:c8:5c:f9:11:28:32:
8d:ec:c5:68:cd:c2:1b:5c:e7:83:06:19:c1:cb:93:b7:46:2a:
df:ba:17:77:e1:c6:30:67:ab:f5:54:79:d5:de:1e:bd:52:ab:
24:8d:3a:cc:e9:a6:10:1d:22:26:9a:11:8c:fd:a0:68:52:03:
7f:c0:b9:3f:4d:78:eb:fe:01:34:86:b7:22:90:80:bb:d2:d5:
b0:3d:e6:4d:a9:82:4a:4b:50:87:cb:b8:4d:a2:05:41:f6:44:
dc:b1:5b:49:85:1a:30:78:a7:3b:8b:47:42:e5:2f:ec:a7:d1:
f7:1e:19:26:2b:f8:3e:68:b5:56:c9:24:8f:5f:66:18:72:c8:
07:7d:65:10:c2:4d:25:8d:11:4a:54:b0:94:ec:d4:62:90:b3:
c4:9f:9f:2c:02:6d:3a:ed:9b:a6:82:88:51:54:bb:36:26:3b:
4c:97:7c:56
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHVxWvRB6iuYxnKz6m83URICZeUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDgyMTk2NDc0MTUwMThlNGZmZDNmMTFjMjdhODA3NTMw
ZDdiN2NmMTAeFw0yNjEwMTQyMzU0MThaFw0yNjEwMTYwMjIyMThaMDMxMTAvBgNV
BAMTKEVCOTA0OUIyMDI1NzU2MEY2MzdFNDYzQ0MxQzJBRkI4Nzg0Njk4QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp69x+dj0SHsbDTrimSPEhOMMN
qW2DZFyzq9/3KaziSkfwaAIE9y/LAFzAE25iYEtAUdv09Di7dxbKPYtnxQmQuv/W
nGMrnDUvUE6I2LVabGm5MCZy1IWshsX7rcskmSQ3jvWNV/UzP8X5VdJWrUTuOsH8
ql+YgMhr6LnvSMLL+AqJ4vGaJ4kuTKy3z1R4FbMPhc/IygYhAYDYqo5tzyevp70i
2M+h92W+UaU3JJc8MoN+pLEwg+hhBXuXz5K5rSdSGdMCiwyh4UOxyznmO5MRAMMN
5niGbKR2l+zIoUQ96b/TfCFFbvZZrwe5oVxlIM4V7leTbXONLh4I8o3isHR/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU65BJsgJXVg9jfkY8wcKvuHhGmKgwHwYDVR0j
BBgwFoAU2CGWR0FQGOT/0/EcJ6gHUw17fPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzAvRDgyMTk2NDc0MTUwMThFNEZGRDNGMTFDMjdBODA3NTMwRDdCN0NGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJDR1dSMEZRR09UXzBfRWNKNmdIVXcx
N2ZQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m
YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvMC9EODIxOTY0NzQxNTAxOEU0RkZE
M0YxMUMyN0E4MDc1MzBEN0I3Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAymwpVMnEPbDCkZkCy1mi
WU5g3SXUDpwpPl7lWTmKcLGFGDOLzQ4SeDP3aGXsJtzw1Qu+onTZhK16VQM0G3Lw
mIQoA/heXl9k4mxgKT2aPy1zpZyTyFz5ESgyjezFaM3CG1zngwYZwcuTt0Yq37oX
d+HGMGer9VR51d4evVKrJI06zOmmEB0iJpoRjP2gaFIDf8C5P0146/4BNIa3IpCA
u9LVsD3mTamCSktQh8u4TaIFQfZE3LFbSYUaMHinO4tHQuUv7KfR9x4ZJiv4Pmi1
Vskkj19mGHLIB31lEMJNJY0RSlSwlOzUYpCzxJ+fLAJtOu2bpoKIUVS7NiY7TJd8
Vg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:57 2026 by rpki-client