Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
File: 6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft (raw, json)
Hash identifier: 1A9sa+i1YEaa2xlJzNK+9f7ERYN5TUEsj3QWyvXQqbw=
Subject key identifier: DB:47:93:1E:1C:57:60:5C:31:00:62:13:38:B0:2C:07:14:72:40:BD
Authority key identifier: 64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8
Certificate issuer: /CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
Certificate serial: 139E3D14727F681CFDEE7F7CE97B735B9183406D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
Manifest number: 3F
Signing time: Wed 12 Aug 2026 17:58:23 +0000
Manifest this update: Wed 12 Aug 2026 17:53:23 +0000
Manifest next update: Thu 13 Aug 2026 21:16:23 +0000
Files and hashes: 1: 6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl (hash: 3zB9iTkF6zZa7ah81pdrC5TA/4wiIXx67eAwFyZKE/Y=)
2: AS219458.asa (hash: 4EDn/tW4OFUzDAzcEHCdkk68aVCpxOd51JItFT1I5cg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl
rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:9e:3d:14:72:7f:68:1c:fd:ee:7f:7c:e9:7b:73:5b:91:83:40:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
Validity
Not Before: Aug 12 17:53:23 2026 GMT
Not After : Aug 13 21:16:23 2026 GMT
Subject: CN=DB47931E1C57605C3100621338B02C07147240BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:da:e6:81:93:48:61:db:16:2d:13:3d:74:25:
e6:a3:a3:b5:52:6c:07:9a:6c:ab:b8:b7:cb:1c:71:
3d:9d:d9:cd:29:d1:8c:57:44:04:f2:98:63:45:65:
3a:0a:00:13:a4:75:28:0e:11:84:1d:2c:0a:18:17:
a2:17:31:60:ca:2a:f1:13:8f:23:57:28:02:1c:3f:
a7:74:18:77:e6:fd:6d:5b:8c:03:20:ab:8c:ad:d5:
02:a8:98:6f:0a:5e:18:bb:e5:60:79:3c:60:eb:66:
94:ba:7c:b5:c8:6c:51:e9:ec:39:ca:67:c0:b7:26:
18:a6:d5:65:95:c4:08:dd:71:dd:49:53:e8:9e:41:
4d:67:b5:a1:6d:b3:4d:cd:01:d9:fc:aa:9c:5f:c2:
40:7a:fd:20:6b:5a:10:f5:98:a4:a2:64:3d:92:aa:
f2:a3:6c:dc:2d:97:f9:95:df:f0:b8:57:e0:b9:1e:
43:2f:f0:5c:88:75:c5:58:f2:e6:cb:ed:e5:b3:4d:
95:f7:c4:d3:2e:96:18:b3:09:d7:9f:0c:1d:76:fd:
bc:de:9d:37:48:6e:5e:0f:c1:c9:7d:bb:06:16:b7:
ef:cf:bf:98:92:92:bd:00:ef:bc:d3:2e:4a:99:af:
c3:d5:2d:a7:99:02:8d:83:cb:ce:be:5f:06:dc:0c:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:47:93:1E:1C:57:60:5C:31:00:62:13:38:B0:2C:07:14:72:40:BD
X509v3 Authority Key Identifier:
keyid:64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bc:3c:2f:b4:0d:18:b5:1f:58:13:82:1e:e1:c4:6a:77:36:
0f:7e:27:87:46:9f:d9:e0:56:0d:d2:20:ab:e1:81:03:1f:51:
d2:cc:ad:51:60:e1:dd:32:72:75:2d:0a:16:ea:88:40:c8:b8:
80:1b:89:35:77:06:e7:04:2e:5c:62:b1:58:11:40:2f:9c:bb:
bf:a0:36:c0:25:dd:5d:09:b9:8b:b0:5b:69:2f:3f:09:90:8a:
c9:ce:bf:5b:bd:96:8b:b7:41:01:23:cc:98:ae:63:ee:a6:7f:
15:3a:6e:15:f4:01:e0:5d:97:a6:9d:d0:98:42:d0:17:9d:a9:
00:8c:06:8f:69:79:50:a5:67:28:5e:34:b0:4d:56:c3:eb:35:
91:9c:30:d8:22:4a:e6:04:d3:b8:44:4d:03:0d:45:0b:27:da:
f1:21:9d:fb:5d:6b:74:d6:6f:f6:83:56:44:0e:4c:47:bb:51:
b3:7d:83:cf:e4:c4:41:40:fe:4e:f8:c9:74:0f:f1:b9:4b:b8:
7a:a6:98:7d:15:e7:24:06:b8:1e:02:89:d3:e9:12:31:19:96:
bd:9f:24:1c:57:c3:18:4c:e6:96:77:83:ce:70:6b:30:5e:13:
36:38:b3:f1:ba:ef:49:08:7d:90:ed:1d:a1:3b:c0:1d:26:a8:
c4:4e:07:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:22:44 2026 by rpki-client