Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/0/423DD02225B3732C2CED9BA43076F61C36E6E389.mft
File: 423DD02225B3732C2CED9BA43076F61C36E6E389.mft (raw, json)
Hash identifier: bdY1gGORqRx9AqGHiI+H6OjlrtTW7L/W8HCavZnXuoU=
Subject key identifier: F4:DB:53:F5:C6:FC:D7:91:C7:E9:A3:BB:EF:30:0F:71:B7:80:B1:51
Authority key identifier: 42:3D:D0:22:25:B3:73:2C:2C:ED:9B:A4:30:76:F6:1C:36:E6:E3:89
Certificate issuer: /CN=423dd02225b3732c2ced9ba43076f61c36e6e389
Certificate serial: 768C1D08C34E1640D979C39EE7E0F7C6E2F7A10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj3QIiWzcyws7ZukMHb2HDbm44k.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/0/423DD02225B3732C2CED9BA43076F61C36E6E389.mft
Manifest number: 0A
Signing time: Wed 15 Jul 2026 12:17:46 +0000
Manifest this update: Wed 15 Jul 2026 12:12:46 +0000
Manifest next update: Thu 16 Jul 2026 15:55:46 +0000
Files and hashes: 1: 423DD02225B3732C2CED9BA43076F61C36E6E389.crl (hash: 1OPKebxC1c5tGeKPBkV4oU3ME0SfnHLDPUv2ujoENQc=)
2: AS214556.asa (hash: rZJEKRdxRbMvgTtXtvOncsF0x1ztKZxb7hUsekq077Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/0/423DD02225B3732C2CED9BA43076F61C36E6E389.crl
rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/0/423DD02225B3732C2CED9BA43076F61C36E6E389.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj3QIiWzcyws7ZukMHb2HDbm44k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8c:1d:08:c3:4e:16:40:d9:79:c3:9e:e7:e0:f7:c6:e2:f7:a1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423dd02225b3732c2ced9ba43076f61c36e6e389
Validity
Not Before: Jul 15 12:12:46 2026 GMT
Not After : Jul 16 15:55:46 2026 GMT
Subject: CN=F4DB53F5C6FCD791C7E9A3BBEF300F71B780B151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:fb:27:cc:ec:f3:0a:b2:be:9f:8a:46:2f:
e6:17:ae:85:9b:c6:0b:15:66:eb:8f:45:ec:9c:ab:
03:25:cd:06:b8:88:b0:8f:5d:23:cf:59:21:98:e9:
9d:23:86:63:34:56:a0:74:56:78:1a:f4:d6:99:a3:
3c:3c:d9:94:4d:5e:89:6f:63:7a:58:18:bc:ac:67:
0b:60:52:98:bd:f0:55:2f:bf:59:98:35:f6:16:e5:
30:71:e5:dd:15:f9:1e:e4:45:9d:f3:d2:5d:e0:97:
11:ec:14:2f:8f:4e:b3:89:9b:6c:78:a6:92:aa:87:
81:7c:09:a8:54:36:9a:bd:40:99:61:f0:ea:dc:b4:
75:0f:de:76:f6:4e:0a:b3:e5:75:b1:19:6a:f8:c6:
4f:59:e8:b2:a8:6d:71:e2:4f:9e:d6:33:0d:fb:89:
41:07:b4:d9:a7:ca:ba:79:b4:ee:b8:19:2b:a6:ca:
2b:88:33:83:d3:26:7b:99:8b:22:6d:2f:3b:63:d8:
4f:2e:76:d8:65:e9:c6:ea:ba:cc:e0:c3:f4:02:28:
b1:b4:c1:78:e0:82:f5:a4:6e:71:18:8a:04:a9:71:
35:e0:31:c5:b6:b2:f7:7e:db:3e:66:0b:13:29:df:
44:81:e6:05:9b:ef:eb:3a:8e:8c:55:37:8e:48:c5:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DB:53:F5:C6:FC:D7:91:C7:E9:A3:BB:EF:30:0F:71:B7:80:B1:51
X509v3 Authority Key Identifier:
keyid:42:3D:D0:22:25:B3:73:2C:2C:ED:9B:A4:30:76:F6:1C:36:E6:E3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/0/423DD02225B3732C2CED9BA43076F61C36E6E389.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj3QIiWzcyws7ZukMHb2HDbm44k.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/0/423DD02225B3732C2CED9BA43076F61C36E6E389.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7f:1d:13:17:fd:38:3f:27:55:3f:93:3f:28:c2:bb:f8:ba:
77:d3:4c:a0:0a:47:97:c3:c3:4c:ae:99:ba:a2:0c:4e:e4:19:
01:84:df:af:b2:87:8e:05:d8:98:b3:40:64:58:c4:f9:7f:cb:
29:97:95:30:bb:a9:13:fb:76:da:ce:d6:7c:99:5e:47:44:71:
b8:02:d8:f7:23:9e:8c:b7:73:9c:a5:41:38:9c:bc:b0:58:ac:
e6:76:28:b3:d5:36:a3:2b:1d:9e:99:92:90:dc:d8:e7:3d:c7:
4f:fa:0d:e3:03:f3:82:7f:9e:c5:8a:30:f6:30:5f:45:20:13:
9a:e6:fe:b5:71:81:92:39:1f:79:37:e0:ac:a4:a8:5f:b2:4e:
7e:a2:5f:0d:2c:96:c2:43:51:b0:9e:bb:f7:3d:8b:74:97:22:
1c:a9:09:9d:cf:4d:6f:f0:0f:b2:45:a6:19:5e:c0:71:87:aa:
45:c3:00:80:af:b5:3c:27:b0:73:42:e0:98:44:46:9e:45:b9:
c2:30:9e:8e:fb:3f:6c:f8:c5:fd:62:27:4a:4d:11:f1:d4:7a:
45:b0:aa:95:be:10:25:e5:34:b9:97:6b:e6:5b:29:2a:ec:28:
22:e2:60:a3:29:cc:93:80:b7:b1:34:ca:00:0a:99:6e:6f:9f:
18:44:d9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 14:41:22 2026 by rpki-client