Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier: fDobJ6PPkZQT6bXqBwNK8QjEgsdvH8N0NTY+jfKtyVU=
Subject key identifier: 86:D2:CD:F9:19:D5:BA:28:12:9D:FE:31:53:9D:60:09:32:F8:54:B5
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial: 40889EF5421850B3128CA1D2D77D0A5C6C0DA5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number: 0487
Signing time: Wed 24 Jun 2026 09:28:32 +0000
Manifest this update: Wed 24 Jun 2026 09:23:32 +0000
Manifest next update: Thu 25 Jun 2026 11:24:32 +0000
Files and hashes: 1: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: lCDCB4OCAAdMX2/4mhlDMwZztJnulDpLbyChyU6iDKE=)
2: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: FrtXdPIEsvn1iYUedtjAO8L9S5GjDxa5ywOB8CuN7A0=)
3: AS205329.asa (hash: VGL8fNaLY3qFu9mP5r7NvYdgKqN6s2IJxTCOZNeTahk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 11:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:88:9e:f5:42:18:50:b3:12:8c:a1:d2:d7:7d:0a:5c:6c:0d:a5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Validity
Not Before: Jun 24 09:23:32 2026 GMT
Not After : Jun 25 11:24:32 2026 GMT
Subject: CN=86D2CDF919D5BA28129DFE31539D600932F854B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:92:11:b4:c8:da:74:9f:38:d7:ac:8b:0f:
f6:55:75:7a:89:b8:4e:b9:bc:c6:b1:fe:ec:55:99:
f0:7d:21:95:29:89:26:3b:83:4e:d3:3e:2f:f3:53:
59:ae:0e:a5:20:02:0e:c8:59:9b:83:6f:fb:9e:96:
1a:95:a9:90:fb:8c:ce:8d:4f:0c:90:28:fc:e6:77:
2d:3c:b9:9c:41:df:c4:f8:2f:b1:63:93:24:4b:fa:
3e:3f:c9:b8:a4:e2:ca:e4:a0:e9:40:38:c8:49:f6:
e8:b5:cc:86:44:0e:4a:fb:07:4e:01:09:6b:f9:91:
6f:d0:5d:f0:84:62:a6:a5:74:03:3b:02:73:58:89:
b6:4c:1e:94:6d:d8:6b:64:32:2f:98:71:1d:39:b6:
85:8a:1d:71:c4:d6:53:a0:d2:d5:0e:7b:00:0a:07:
93:73:17:16:db:11:fa:fd:24:f8:3f:cd:f4:ba:fd:
ef:e8:e9:d3:bc:a6:5d:7d:f6:4c:38:bb:9d:de:30:
69:14:54:f8:07:43:74:0d:8b:f5:69:d2:fd:37:e2:
fe:73:9f:d3:1c:1b:be:17:76:18:77:10:ba:5e:95:
95:61:53:de:d2:30:29:1d:26:7b:82:42:05:1c:73:
c3:22:a7:70:54:dc:0d:bc:3d:89:c7:91:83:03:c6:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:CD:F9:19:D5:BA:28:12:9D:FE:31:53:9D:60:09:32:F8:54:B5
X509v3 Authority Key Identifier:
keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e0:21:a3:e2:b3:84:ee:4b:06:19:80:7b:b7:71:13:1c:41:
8e:a0:36:ed:a9:d1:c4:9b:1f:8a:14:a0:fa:d8:82:1a:eb:ee:
bd:e6:ec:5a:0c:07:d9:44:66:29:5a:40:6d:c9:7d:8f:97:08:
89:5b:4f:2e:91:d8:df:48:0a:38:56:ea:07:de:44:44:c9:aa:
40:7e:88:ef:89:c6:fc:24:28:71:8e:6b:b1:05:00:fe:07:ad:
3c:76:29:2a:be:3f:08:32:24:5c:c4:6b:da:50:d6:3e:da:43:
a8:14:ad:52:24:cc:1c:10:2a:b5:79:3d:ea:cc:4c:c0:12:fb:
a4:e4:db:cf:7b:0a:e7:f6:fe:66:89:c3:14:c7:b5:0a:8e:ce:
ef:71:8c:7c:90:a7:2c:d4:21:5a:87:cc:51:4f:7e:37:29:ee:
0f:bf:04:41:77:a2:6a:8f:e5:80:2f:a0:34:95:b3:18:87:9c:
fa:9a:65:e5:99:81:8e:58:f1:f1:15:5b:c0:6b:b6:55:2c:77:
3a:53:51:16:08:28:83:e9:f7:ec:3e:1b:b8:56:f5:40:d8:5f:
b8:8f:e1:3b:83:13:6f:53:4d:93:59:8c:08:04:49:26:5f:88:
f4:22:49:d0:da:65:68:d7:03:28:90:7d:b4:b8:7b:30:a9:ec:
da:8f:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 19:05:56 2026 by rpki-client