Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
File: F7DD807E33980D7322171230874230C1DB2A1A7F.mft (raw, json)
Hash identifier: 1NI4b9h3LnMCjDhMOL1ipRLoeGn4Imm33SLmFzGkZq8=
Subject key identifier: 8B:B3:C7:B9:08:95:35:29:F3:D2:93:75:05:EA:8D:99:CE:61:62:6F
Authority key identifier: F7:DD:80:7E:33:98:0D:73:22:17:12:30:87:42:30:C1:DB:2A:1A:7F
Certificate issuer: /CN=f7dd807e33980d7322171230874230c1db2a1a7f
Certificate serial: 186872E4F4E018572DF59F16C7819247D31997F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
Manifest number: 88
Signing time: Mon 12 Oct 2026 05:40:03 +0000
Manifest this update: Mon 12 Oct 2026 05:35:03 +0000
Manifest next update: Tue 13 Oct 2026 18:43:03 +0000
Files and hashes: 1: AS214344.asa (hash: uariAkNcC7BunX/HDd6SiaYS4ed/MPMzbBuNgQzVolM=)
2: F7DD807E33980D7322171230874230C1DB2A1A7F.crl (hash: 2Phfsm3X2h/sq4P2D4jd1rjd1aZfd0TTmXsuLGIheBo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.crl
rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:68:72:e4:f4:e0:18:57:2d:f5:9f:16:c7:81:92:47:d3:19:97:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7dd807e33980d7322171230874230c1db2a1a7f
Validity
Not Before: Oct 12 05:35:03 2026 GMT
Not After : Oct 13 18:43:03 2026 GMT
Subject: CN=8BB3C7B908953529F3D2937505EA8D99CE61626F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1a:61:dd:02:38:8a:14:78:cc:77:73:d4:fa:
3a:84:96:40:42:cf:63:30:4c:21:e4:4d:93:21:d7:
e6:18:b9:34:98:09:78:f1:67:af:a1:72:49:9b:2d:
e1:7b:29:be:88:3d:96:75:bd:2e:3c:05:ba:d9:05:
38:e7:44:5c:c1:fc:fc:95:48:5c:3f:58:9a:f4:dd:
21:0a:17:6b:ed:7e:e0:7b:a7:9a:9f:15:4f:86:d4:
88:7d:04:ec:bd:e8:9c:97:44:20:c9:0e:0e:d6:dd:
fb:5a:70:ab:51:d3:68:d0:4a:2e:e2:9c:3e:07:bf:
1d:ac:d2:58:1f:27:d5:f0:f0:37:fa:e0:a7:03:64:
7e:92:6b:ad:c6:3d:a5:9b:ad:15:70:3b:58:69:a7:
59:26:e8:f6:42:92:ca:49:ee:81:be:3a:07:25:3f:
97:6f:d0:2c:37:20:f9:f0:8c:97:eb:c4:aa:0e:d5:
8c:2d:30:c4:c0:15:9a:50:10:d6:f3:18:87:ee:d0:
f0:cc:58:e3:83:71:e4:5d:af:0a:e9:6b:f3:bb:d9:
dd:72:e7:82:34:67:de:0f:1e:0d:56:6d:35:81:74:
11:d6:04:25:d5:e2:62:4b:56:cc:b8:32:b6:c9:55:
91:82:35:29:2d:06:7c:1b:4a:da:0f:f8:3e:b8:32:
14:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B3:C7:B9:08:95:35:29:F3:D2:93:75:05:EA:8D:99:CE:61:62:6F
X509v3 Authority Key Identifier:
keyid:F7:DD:80:7E:33:98:0D:73:22:17:12:30:87:42:30:C1:DB:2A:1A:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/992AfjOYDXMiFxIwh0IwwdsqGn8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/0/F7DD807E33980D7322171230874230C1DB2A1A7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1e:c5:96:9d:6c:da:05:d7:ed:27:df:1e:c6:55:e0:e1:0c:
a8:03:d2:07:fd:10:32:2b:f7:c0:19:03:85:4b:6c:df:dd:cf:
03:9a:76:d7:51:a5:c3:2c:79:67:bd:ce:d4:8b:6f:6a:b4:69:
73:13:4c:cb:2f:e4:c6:70:25:6d:4e:dd:0b:19:03:95:61:64:
13:71:82:18:77:1a:99:9b:39:44:c2:e2:62:24:8d:64:03:b3:
fb:0b:ab:54:f6:05:3a:0a:c7:f9:dd:fe:c2:82:2f:74:e6:86:
47:77:61:b6:be:15:88:91:28:d7:15:2c:cd:9a:1d:32:a0:86:
26:6e:5e:fa:77:2b:9b:30:d7:ae:02:7c:4e:ed:40:8b:bd:dd:
82:1f:b9:8b:c0:32:13:13:f8:06:80:e2:28:c3:30:fb:eb:e5:
03:05:cb:e2:1f:57:6b:49:a7:96:03:a1:34:8c:e7:e3:a7:d7:
7b:90:26:72:b8:69:47:a1:8b:3b:0f:f8:8d:45:c2:a1:72:02:
f6:d0:ed:89:36:73:13:6f:89:bf:b5:05:fc:57:14:24:d1:1c:
d4:d7:74:7f:c6:8e:62:b1:9f:1d:2b:91:0e:f7:4b:63:d7:2c:
7c:08:9f:be:2a:e1:22:d9:75:e0:de:11:df:7e:1c:40:5f:14:
d4:eb:28:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:09:34 2026 by rpki-client