Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
File: 6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft (raw, json)
Hash identifier: LbcbqY1NyOGOmJGNeNH6fVhxF4NAo4IilnhC4w7yD7o=
Subject key identifier: A0:FF:55:2D:93:1A:EC:0A:73:DE:24:69:25:F4:72:7B:F0:65:81:C7
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 6317054B36A5186C43A883E24C1C374E802480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
Manifest number: 020A
Signing time: Sat 28 Mar 2026 08:48:40 +0000
Manifest this update: Sat 28 Mar 2026 08:43:40 +0000
Manifest next update: Sun 29 Mar 2026 11:51:40 +0000
Files and hashes: 1: AS214432.roa (hash: kQESvOSCu+N2q0COzEc+TAGec+2IVMyD8U41rTN7RDc=)
2: AS396356.roa (hash: Ye+NfvA2IBwZl2cJu9dzzx5vhPrKTykIDkAaYtOezg4=)
3: AS834.roa (hash: lBCJ3odAZMvsrd+3W2XmjMdRA1GUKDCrctBtfP+Mc+U=)
4: AS29802.roa (hash: UCuw3Z9lVcpw85rKdVSoPkQu7bot6T4TRwxmVZW6VJg=)
5: AS5650.roa (hash: PTR+fgP2qvXZYtATxFfPwkTxn407sAXJJL4hgWZaxJM=)
6: AS2488.roa (hash: d1ro1rTJNorB0LJ0CEyOGONayK9rYSVfYmwH9mcTFUM=)
7: AS211440.roa (hash: zaSD1MOjsHaCPlAiucFkxI728Lwjv0Q0tIFxFsU24WU=)
8: AS211415.roa (hash: DKqxOmoH1oUvkd5hwlQHVDc52UoG8tXKaREXCMNwJ3Y=)
9: AS136744.roa (hash: AC6WQ1PDbk7uDzM5gdFZ0y3ykWFIZUkQvTjRiBnnbAE=)
10: AS47377.roa (hash: OQL0cZs5RWvoFjz2M63yQuFroA+WBXFRgA/pdv3BbhE=)
11: AS46475.roa (hash: 0Jx1Bm8TjjrnaoIk5HVO/GM7e/a42zIYjtAX24Go2Co=)
12: AS39855.roa (hash: RXWUPV6j2RK/vNPXoxmlg4tZKFcDV5/uZ8oTUMD87us=)
13: AS215607.roa (hash: nTKCeLfGZyFqUTLkimxf4JuxAV8tNaIFwjuUUwVs+lk=)
14: AS212609.roa (hash: h287YNomtskDOPEQA57TiiiZ9+NIMepRK1K0V/gWE/E=)
15: AS201949.roa (hash: knVflYXsbT6w/+jOH7z5MVkMpEIflET4Osm7z0M5t7o=)
16: AS4766.roa (hash: SbNMCLeXl4A2SwzuRfIdNy02sPzvtKDWEwNXipX8PmI=)
17: AS198087.roa (hash: KbEXfW1iiD4QKlzNAeXhORdEp87UXgYYT+JBn+IB5Ak=)
18: AS398704.roa (hash: tV7fJBEbUdih2JUzaeuMBZYnnpaFuJH7D78V8Cl5CZE=)
19: 6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl (hash: LVWrSsJkB+PisnXRM0LFQKhyMx/Rkkgdh+ZfJeZCOkg=)
20: AS133153.roa (hash: hZKmRRfEum0NePfoQ32/gG7k8ms9Eph2dnxcf7oDMHQ=)
21: AS9304.roa (hash: YfnpkckiSsWFd2jf8Qu6GXJEkGITtyOUCl4NWdOt0Sc=)
22: AS63023.roa (hash: fi+yuNt7C9KOpAB7OuHltO3biAsS7kNC3sakusV6F3Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 11:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:17:05:4b:36:a5:18:6c:43:a8:83:e2:4c:1c:37:4e:80:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Mar 28 08:43:40 2026 GMT
Not After : Mar 29 11:51:40 2026 GMT
Subject: CN=A0FF552D931AEC0A73DE246925F4727BF06581C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:60:09:60:cf:62:59:36:e7:7e:73:09:13:
71:83:48:e0:82:49:62:d9:8a:e6:bd:30:d8:19:c1:
e8:39:de:64:da:b0:3f:af:04:29:d0:ee:23:ff:73:
90:5a:af:83:b8:5d:87:d9:f5:03:8f:fe:78:e0:72:
1c:7e:08:8e:b5:7c:61:e9:04:4c:d3:e6:4a:b5:7b:
25:f3:2b:2b:17:45:83:51:7a:95:bf:49:40:91:91:
2d:bc:51:2d:6a:66:28:03:b6:d5:cf:7c:ca:ba:30:
95:7f:c1:0c:61:ae:67:25:47:ff:86:4f:5f:96:9c:
e4:01:11:23:85:18:fa:10:4b:02:97:35:7a:0b:6d:
bc:f1:2f:4f:82:73:40:89:6b:2a:f1:c5:25:5e:54:
8a:d7:46:e9:a3:0a:66:25:20:42:98:b5:54:79:1d:
97:c3:57:e9:22:ea:65:6b:42:70:62:74:d9:44:e0:
47:ef:a2:14:94:d0:2b:97:48:c4:d6:56:71:50:9b:
2a:f1:5c:bf:87:da:17:d2:eb:72:33:c2:5e:dc:db:
a3:82:e0:2a:00:19:6f:0b:4d:ff:e3:9c:97:16:3f:
65:2a:87:e2:f6:1a:1d:82:57:7a:cf:1c:2d:38:b7:
35:c3:13:c0:b6:d4:e0:57:f4:73:75:37:37:90:ff:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FF:55:2D:93:1A:EC:0A:73:DE:24:69:25:F4:72:7B:F0:65:81:C7
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2b:f6:37:ad:c9:cb:7b:44:25:63:42:47:89:18:c1:7f:23:
20:1b:bb:75:d2:74:b8:30:10:d5:4d:ed:3e:c8:e3:b4:5c:e5:
70:b1:f2:27:86:3b:93:6b:8a:c0:f0:82:b6:1f:0e:cd:70:6b:
7f:41:fc:dd:13:e2:47:b4:0f:77:41:c7:85:98:b8:59:57:a2:
2d:32:d0:33:c6:26:ee:36:24:c2:68:90:49:08:ff:46:3b:a8:
f6:d0:75:89:b4:83:e2:64:19:b7:32:6a:11:e7:ca:36:20:12:
04:be:33:06:c8:a4:f9:08:1d:8c:86:39:22:84:3e:3e:7c:96:
7a:33:b6:28:49:74:45:93:0c:f5:02:3a:b7:2e:a7:60:a8:a2:
52:af:bd:4c:96:af:b0:c7:55:0c:d7:c1:63:16:0b:4a:08:8a:
44:a8:c8:6b:74:0e:e3:46:80:8c:7c:b4:15:aa:22:d8:38:e5:
fd:51:30:36:a4:1a:c3:64:4c:58:dd:13:04:c7:1a:f6:f2:4a:
9d:a0:6e:1e:61:49:3b:a1:f6:33:65:65:ba:ed:11:12:b3:98:
15:af:f6:f2:42:58:c5:c2:3e:f1:bf:ad:07:e2:e6:f9:4b:1f:
57:8b:f8:94:81:2f:8d:6a:a8:59:1a:eb:f5:b2:2e:e6:0c:7e:
e2:ef:89:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 21:46:15 2026 by rpki-client