Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier: yvmiOtEBZguikC3fP2Un2oJrOiw1KsyEjIkS0h9C3Yg=
Subject key identifier: 42:2D:F4:6C:4B:DC:2A:A8:4B:1C:D6:CC:44:42:2D:30:23:05:C6:A6
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer: /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial: 09694E0F5CFEAB59D71B3934532E43B4F188E2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number: 01F2
Signing time: Sun 29 Mar 2026 13:07:46 +0000
Manifest this update: Sun 29 Mar 2026 13:02:46 +0000
Manifest next update: Mon 30 Mar 2026 15:08:46 +0000
Files and hashes: 1: AS211695.asa (hash: ECDR80b7l9ugdGd0RMl+JN1o634bDwO+GoAm6/dGgxI=)
2: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: /B/GqIhJPQnhtVAtYaMIcE7XkxrHuClrvD9W0did9KE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:69:4e:0f:5c:fe:ab:59:d7:1b:39:34:53:2e:43:b4:f1:88:e2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Validity
Not Before: Mar 29 13:02:46 2026 GMT
Not After : Mar 30 15:08:46 2026 GMT
Subject: CN=422DF46C4BDC2AA84B1CD6CC44422D302305C6A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:bc:fb:04:fc:63:08:ff:42:e2:1e:d5:bd:
19:c9:96:5a:d8:5a:e5:f3:f0:0a:0b:52:20:4a:60:
73:e5:44:1b:e2:5b:a9:29:84:26:cb:aa:39:b8:05:
e3:31:54:09:8f:2f:db:1c:ab:8e:0a:8c:72:e1:06:
b5:72:6f:fa:8b:00:f9:90:00:32:8f:fc:de:5d:c2:
ca:91:16:9b:1e:49:a2:10:ee:54:3c:db:a5:95:cb:
e9:5e:6f:4b:f4:30:fd:92:a9:95:95:f9:63:ba:49:
80:59:a6:e4:65:3a:8f:3a:09:0e:15:80:19:9f:99:
5d:c3:25:34:5f:ef:67:ff:72:43:23:55:5d:18:fa:
a4:2f:5c:0f:9c:c5:50:f9:98:de:2c:d7:19:19:fc:
b3:d8:3c:aa:75:1f:7b:09:63:e2:62:2f:a1:02:7b:
6b:28:3c:2c:50:0b:50:9e:87:4a:01:8d:a1:9d:ee:
02:ff:74:84:b5:74:01:04:b6:1e:64:8f:74:10:7b:
04:a5:af:1b:2a:b1:80:6f:7c:39:de:d7:65:a6:1a:
fe:7b:bf:7d:8e:93:21:d5:28:e0:d7:7f:11:54:03:
e5:57:ff:ca:8b:94:ba:40:23:4f:e3:80:bb:20:bd:
03:9f:eb:47:33:5b:00:95:1d:70:7d:6c:af:c8:dd:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:F4:6C:4B:DC:2A:A8:4B:1C:D6:CC:44:42:2D:30:23:05:C6:A6
X509v3 Authority Key Identifier:
keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1a:39:f8:d3:fd:c6:da:60:d1:b9:d6:e6:18:b0:81:82:f7:
6c:53:a3:9b:2a:b5:fd:55:fd:30:d9:68:a3:42:89:fd:b7:0b:
89:75:a7:87:60:6d:0e:2d:25:a3:96:3a:33:8e:94:ad:15:77:
1b:91:76:b5:b6:9c:f3:82:1d:95:d1:6a:30:9d:f6:71:2e:10:
eb:53:52:62:60:f6:1a:62:0a:54:a6:13:b1:a7:22:33:a0:d2:
b1:2e:0d:14:96:9f:e7:d1:b4:ee:97:d9:e0:47:2a:77:cd:8a:
95:0d:2c:a1:31:80:ac:c4:0f:c8:df:5e:ba:9d:48:7f:10:3b:
16:f9:d7:8a:76:03:ba:74:93:24:b9:61:88:ad:e8:0b:93:ca:
8a:85:74:3f:71:81:26:07:d8:22:3b:d5:49:72:f5:ab:c0:22:
20:b8:c5:c9:7c:48:96:88:c4:af:88:58:b1:5a:f4:b7:c4:68:
bd:49:65:94:14:90:ca:9b:be:e4:85:ad:d2:c0:ff:84:24:66:
48:4c:a1:31:d8:dd:37:08:ec:be:5f:fe:ca:58:fb:eb:f0:ad:
98:7f:42:7b:b0:11:8f:d1:36:51:fb:1e:d7:83:48:cd:67:67:
21:41:02:c8:d0:21:d7:2c:bc:9e:9d:13:e3:e2:31:3b:b1:7b:
ab:af:5e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:57:57 2026 by rpki-client