Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
File: F7DD807E33980D7322171230874230C1DB2A1A7F.mft (raw, json)
Hash identifier: /Plv8GIhICiGCnvswj+lRnB8xyUTzoi2YRVKa8Bmmyo=
Subject key identifier: B6:68:D1:87:C9:D9:5E:8A:59:90:C7:A3:86:E5:0F:17:1C:D0:00:49
Authority key identifier: F7:DD:80:7E:33:98:0D:73:22:17:12:30:87:42:30:C1:DB:2A:1A:7F
Certificate issuer: /CN=f7dd807e33980d7322171230874230c1db2a1a7f
Certificate serial: 45A8660BB884121D9937EA2963DEE32A82FC7F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
Manifest number: 2A
Signing time: Wed 26 Aug 2026 14:27:18 +0000
Manifest this update: Wed 26 Aug 2026 14:22:18 +0000
Manifest next update: Fri 28 Aug 2026 03:45:18 +0000
Files and hashes: 1: AS214344.asa (hash: MTG4483TnxhtVizAAx5mLe36e4zkVFntEMOSVMq07eU=)
2: F7DD807E33980D7322171230874230C1DB2A1A7F.crl (hash: n05PmTENRBZRf4SeW1ZAUFrTbviYGdN2ZPWFErUxTo8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.crl
rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a8:66:0b:b8:84:12:1d:99:37:ea:29:63:de:e3:2a:82:fc:7f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7dd807e33980d7322171230874230c1db2a1a7f
Validity
Not Before: Aug 26 14:22:18 2026 GMT
Not After : Aug 28 03:45:18 2026 GMT
Subject: CN=B668D187C9D95E8A5990C7A386E50F171CD00049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:36:4e:b8:21:e1:05:7e:74:b1:fb:01:ff:
3d:41:77:57:43:2c:d6:63:5e:48:9d:08:23:fd:4a:
f6:d8:21:da:74:9d:e0:44:b1:78:3d:ea:ce:9f:b7:
95:93:9f:1c:45:de:d8:92:67:c4:44:eb:80:0c:3a:
f6:83:c4:55:63:42:47:5c:17:85:f8:08:f6:8e:88:
67:da:ed:bc:24:6d:e4:99:27:d3:e1:e8:18:11:3d:
39:d6:3a:b7:d8:fb:55:84:df:0f:c8:73:09:9d:14:
4a:9a:51:4a:13:5f:c5:09:5d:2c:91:df:15:ce:45:
83:26:d2:85:bc:3e:72:8c:7e:b3:5a:b1:8a:f9:fb:
92:7f:08:76:a5:a5:70:c7:12:97:a4:b3:9d:0c:7f:
db:d9:21:a6:db:6d:71:00:a7:0b:62:9d:b1:d2:2a:
9c:93:06:32:08:46:b1:45:b6:58:04:01:eb:85:78:
2f:70:40:2c:67:30:ba:d6:ee:51:55:cd:15:1f:90:
c1:4e:cf:29:94:57:60:68:c2:6b:e5:1f:6d:b6:fe:
5e:b7:eb:ea:9e:03:0a:6d:6e:95:79:e5:c1:3e:e7:
dd:f7:50:96:e3:81:27:6f:47:91:6e:a1:fd:ba:a5:
86:95:5c:13:a7:6c:0b:07:bf:b5:74:14:8c:03:c1:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:68:D1:87:C9:D9:5E:8A:59:90:C7:A3:86:E5:0F:17:1C:D0:00:49
X509v3 Authority Key Identifier:
keyid:F7:DD:80:7E:33:98:0D:73:22:17:12:30:87:42:30:C1:DB:2A:1A:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5f:a6:cf:9d:6a:8e:48:90:36:17:05:0a:b8:e3:cd:2f:e3:
8e:26:91:cc:f9:7e:9f:fa:81:f8:69:f9:76:6c:fd:1c:d8:9d:
f4:3c:8e:78:27:ac:36:ef:16:b4:dd:95:60:19:c6:30:5b:35:
f2:6d:ce:8b:e0:6c:a0:8e:5f:97:10:a7:11:5a:48:a3:db:db:
8d:ca:37:8f:0c:d1:e6:7a:64:d1:67:62:38:c6:da:54:fd:8e:
55:ec:c2:79:d2:6d:2d:83:64:87:24:fc:4c:c9:5d:ce:d2:cb:
8a:56:82:50:c5:79:fa:78:48:92:b4:2e:b7:2f:ee:cb:ab:3c:
97:e8:5f:96:e3:52:f1:94:83:98:e0:b1:e7:49:55:70:b5:46:
0f:81:4e:37:38:a4:25:e2:d7:a6:1b:bc:e8:db:4a:7d:27:e7:
26:80:52:8d:95:cc:af:ea:6b:19:13:93:a4:86:12:5d:9e:6c:
f0:af:09:4d:ca:85:01:b9:2e:58:5c:65:08:60:5c:9e:08:97:
e3:16:b0:5b:f0:7a:d5:56:21:33:73:21:ef:48:81:76:a3:2e:
8a:47:12:11:af:6a:f8:3e:2e:fa:39:b5:f2:31:55:bf:b5:a9:
37:b0:ee:10:23:2c:5d:fd:81:b5:9f:7d:3e:17:1b:c8:20:b9:
53:87:dd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:07 2026 by rpki-client