Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier: oEfl1rLxYSsP0/i1bVBmHbXWA5yYOvzN+wBB1Joj8b4=
Subject key identifier: D9:2E:BA:E8:74:92:99:36:1D:0C:7C:31:4F:C2:81:01:9F:6F:8A:69
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer: /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial: 217F49F49E4DC2EEC6A03277B2B422BED017842D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number: 02EC
Signing time: Fri 04 Sep 2026 10:45:42 +0000
Manifest this update: Fri 04 Sep 2026 10:40:42 +0000
Manifest next update: Sat 05 Sep 2026 11:24:42 +0000
Files and hashes: 1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: FGE5ud1hsKA3YejvWU+erEOYqWG5YDahroXh5HqR//E=)
2: AS215288.asa (hash: +M2OelxzWMdvs7C8TWLEAVCzoJw+PehI60QsibMmUe0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:7f:49:f4:9e:4d:c2:ee:c6:a0:32:77:b2:b4:22:be:d0:17:84:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Validity
Not Before: Sep 4 10:40:42 2026 GMT
Not After : Sep 5 11:24:42 2026 GMT
Subject: CN=D92EBAE8749299361D0C7C314FC281019F6F8A69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:0c:3a:ed:15:eb:a8:ae:55:c9:07:39:fe:
17:4a:97:a7:22:96:09:ce:34:ef:b9:6a:e8:4e:70:
6c:e6:7b:38:6e:92:b0:15:c2:93:2a:01:1f:5a:29:
b5:8d:a1:15:93:e4:c9:ca:c1:9b:03:d8:56:c3:ac:
f9:8a:fe:5c:88:eb:42:ab:c3:de:8d:fa:54:7a:51:
b5:f7:3e:c0:de:40:2b:60:8f:be:08:08:c7:46:af:
38:76:c4:33:5a:70:67:ef:29:05:db:6a:53:35:e8:
87:56:3f:41:6a:9e:2b:53:41:ba:91:2e:ec:a4:f4:
b7:de:85:1c:c2:a4:28:0c:8f:f3:4e:e8:19:ab:a7:
cf:90:66:74:fe:5d:ae:68:60:03:78:cb:46:78:e1:
e0:f3:91:78:b3:c3:d2:34:e9:e7:2d:a3:c8:3f:ef:
b8:ed:fc:a4:ba:d3:17:85:8d:b4:05:9f:a3:fc:4c:
66:1e:13:0c:f0:54:97:cf:56:fd:58:d2:5f:e4:41:
9d:99:35:ba:96:aa:28:d5:c8:3f:dc:b3:11:6c:95:
fe:48:97:e6:7b:5f:a2:9d:fc:a9:c0:a6:68:fc:77:
d2:9b:03:04:c8:36:bc:db:66:7c:b6:36:ff:f6:74:
bc:1c:c1:e5:49:9a:f6:ab:2d:6d:89:23:9a:b6:98:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2E:BA:E8:74:92:99:36:1D:0C:7C:31:4F:C2:81:01:9F:6F:8A:69
X509v3 Authority Key Identifier:
keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:09:41:a0:49:f5:52:92:9a:f3:cb:b8:99:07:48:8b:24:06:
b4:c5:4b:6d:bb:b9:9a:d4:dd:e1:1c:4c:c2:af:f0:bd:fb:63:
46:d8:33:03:10:3b:4f:c9:14:a9:d0:81:73:ec:bf:8b:d9:f2:
16:b0:56:e7:ce:7e:5a:7b:c2:2f:ae:04:92:48:0c:04:1e:0a:
9c:99:2a:a1:03:f2:ae:50:8f:26:49:52:35:25:86:3e:89:a4:
fd:ce:53:e3:84:55:db:2b:87:bb:15:08:2d:8f:d3:1a:06:c1:
b3:b5:49:01:30:d7:2c:ca:fd:32:1b:d3:b2:99:a2:ee:b6:9f:
fb:a0:58:2d:ac:b8:d6:d5:42:9e:fc:6f:47:48:1c:54:17:29:
27:7f:fd:5c:b1:9f:df:c3:9d:22:0c:23:8c:ce:cd:23:5d:3b:
a8:77:39:66:6e:1b:94:5d:a7:99:ea:eb:79:23:f7:ae:c6:c4:
ae:7f:ab:7d:40:6f:e8:f3:50:0b:4b:19:48:c3:77:29:3b:e8:
2e:0b:2c:bb:6d:e9:35:9f:73:e1:b3:54:61:3d:62:10:77:13:
63:83:c7:ef:81:b5:3b:0b:0c:24:2a:64:4d:fb:5c:93:23:6c:
cd:58:a4:9f:b8:28:7f:68:fd:65:3a:03:c9:57:17:77:9e:92:
dc:6b:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:21:25 2026 by rpki-client