
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft
File: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft (raw, json)
Hash identifier: NaXo1tLWJCv6rUMtrMS0j4fdO/HAjcl2qg7bp68TG5g=
Subject key identifier: 52:61:38:C7:4D:EC:5C:83:47:3D:5A:D1:A2:28:15:61:F3:01:90:FC
Authority key identifier: A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9
Certificate issuer: /CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9
Certificate serial: 48DC0053DBF670A4FC7EBFC7B7A8F3D48D4E9A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft
Manifest number: 46
Signing time: Tue 05 May 2026 17:09:48 +0000
Manifest this update: Tue 05 May 2026 17:04:48 +0000
Manifest next update: Wed 06 May 2026 20:35:48 +0000
Files and hashes: 1: A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl (hash: T9gjjF1MNu+JW3KLuHijUlDEc59U2XZ7Jm6p9kz144c=)
2: 3138352e3139302e39322e302f32322d3234203d3e20323037363435.roa (hash: Pi7jb86RL1qTVro49qeYYyL2u6gvRg+kD6xKi4CT7Tw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:dc:00:53:db:f6:70:a4:fc:7e:bf:c7:b7:a8:f3:d4:8d:4e:9a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9
Validity
Not Before: May 5 17:04:48 2026 GMT
Not After : May 6 20:35:48 2026 GMT
Subject: CN=526138C74DEC5C83473D5AD1A2281561F30190FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:64:48:aa:e4:76:a6:3e:3e:66:af:99:01:
da:89:51:ca:c1:28:db:dd:70:52:61:05:5c:94:03:
3e:27:34:a4:26:7b:0e:30:0b:73:e7:f3:ac:6d:c3:
a2:e0:8f:8d:58:d0:7f:98:1a:c2:05:38:f4:93:dc:
b5:51:79:94:da:52:d5:2a:1d:36:44:12:13:6e:05:
85:89:4c:3f:b0:c5:c3:c6:68:f4:51:3a:b2:a6:ec:
98:04:73:a2:db:e4:c7:fa:a8:e7:50:c3:5e:95:de:
dc:64:f0:ca:04:d3:f9:f6:c2:1d:26:f6:49:af:c3:
44:21:3a:6c:e5:ad:76:f0:e2:48:2a:55:db:af:f9:
9e:fb:58:6a:d3:b7:1e:fa:bc:79:a8:1f:16:9f:24:
2a:77:2c:e1:59:4a:c3:bb:7f:03:1d:66:83:d8:17:
cd:02:34:7f:3f:a9:f1:7a:f1:c5:e2:52:00:7f:60:
5e:a1:2c:b8:af:6f:34:59:2f:d8:11:5b:b9:d3:fe:
25:74:cd:b5:a7:e3:06:70:f7:c8:33:f4:57:73:f4:
00:3f:92:58:36:12:89:cf:af:fb:ce:4f:55:ea:02:
72:02:b2:d3:e1:2a:ff:dc:79:12:26:ec:e6:67:f4:
00:0e:1f:0c:7d:2f:40:90:b9:4d:6d:54:21:1e:5d:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:61:38:C7:4D:EC:5C:83:47:3D:5A:D1:A2:28:15:61:F3:01:90:FC
X509v3 Authority Key Identifier:
keyid:A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:92:96:e9:e5:63:61:1c:01:31:15:67:5e:5d:9c:56:89:49:
fd:da:31:da:fe:19:bc:ba:90:cc:9b:43:b4:33:58:b8:7e:da:
5f:ef:e4:07:09:e0:0d:2e:77:0b:c4:0f:e0:4e:89:55:f6:61:
14:92:a2:11:88:cc:c1:e4:dc:4b:ea:41:12:ce:50:a8:5e:c8:
ec:ab:9b:25:07:df:38:d6:73:c0:1b:74:f8:31:57:bb:09:25:
82:d2:65:c7:16:8e:7f:60:6d:15:e6:1f:b4:0d:e4:90:fe:ae:
9b:1e:46:06:d1:c5:b2:30:67:d1:f7:db:0b:42:dc:f8:aa:f6:
e8:06:58:a5:d2:f1:a2:51:98:62:e2:56:8e:bf:a1:bb:4c:2d:
d7:9a:48:97:28:b7:7a:b9:3c:c9:88:0c:33:0c:1b:b7:44:bf:
0d:78:02:02:91:ff:87:02:32:5f:7c:89:6e:90:b0:5e:f6:69:
2a:5f:6f:d8:cc:64:45:8f:2a:2c:93:18:52:cc:d5:56:7d:c0:
45:fa:f0:ab:3a:91:fc:68:a6:51:73:58:e3:cb:aa:da:9e:34:
ff:48:be:7b:09:85:51:d5:d3:79:cf:f7:34:77:91:95:40:3c:
28:a1:91:22:a8:be:06:2d:a7:43:33:d0:c7:06:de:6c:51:11:
0f:0a:40:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:05:11 2026 by rpki-client