Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier: baaOGdYwKx+5taAgzjdWCCsWmJ3yvjiZ084eb6PNmy4=
Subject key identifier: 0B:DD:CB:37:CC:19:9D:BC:E0:A2:26:A1:7F:71:C7:56:AA:05:E0:AF
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial: 7C5C8B3840DEFBEC4318202B554498B698770FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number: 0538
Signing time: Wed 04 Nov 2026 05:57:24 +0000
Manifest this update: Wed 04 Nov 2026 05:52:24 +0000
Manifest next update: Thu 05 Nov 2026 07:18:24 +0000
Files and hashes: 1: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: CqYpnbZZciFiZ/RVp/QCmTWCOt9T2XsHEjU87yw6dRA=)
2: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: MA6NPPoujdiQWojyCVLJyxDFh4C42V7H1GeWERt+WOo=)
3: AS205329.asa (hash: D7v68W1jFkdHMUdFoafa1ip0HB/iYsJ/PoPFEmKh9to=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 07:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:5c:8b:38:40:de:fb:ec:43:18:20:2b:55:44:98:b6:98:77:0f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Validity
Not Before: Nov 4 05:52:24 2026 GMT
Not After : Nov 5 07:18:24 2026 GMT
Subject: CN=0BDDCB37CC199DBCE0A226A17F71C756AA05E0AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:8d:bd:7c:eb:d7:9d:27:75:ba:3f:73:8f:
c6:a1:30:9d:25:78:4f:0f:1d:92:7d:23:aa:d0:93:
df:3f:50:19:cf:2a:cb:fc:49:18:a9:d7:c4:f0:b2:
bd:22:a6:66:37:4d:95:dd:50:0c:20:1c:41:6d:ee:
96:1e:88:93:b2:50:b1:cc:ea:a2:fa:81:07:19:19:
1e:1b:31:9e:ca:68:51:8b:ac:10:c3:04:67:6d:90:
c0:73:8f:21:53:56:1c:b9:bf:e8:88:de:45:d6:c0:
6f:7b:17:13:f8:14:82:b3:65:72:ae:ea:55:b0:52:
5b:fe:90:dd:da:e6:9b:f1:6e:c6:b2:5a:79:de:af:
2c:1d:0b:0c:e0:10:8c:76:bd:58:95:03:71:a8:ee:
aa:47:3e:cb:20:14:b4:68:a3:c7:9b:cf:a3:d7:43:
96:cb:17:ad:2a:99:3e:95:2d:fb:f6:62:bc:46:0c:
2b:65:0f:c3:bc:f8:b3:a0:60:bd:4a:d5:72:d9:f5:
b4:ed:9e:6d:60:6c:80:78:6c:62:aa:50:b6:03:97:
4c:10:bc:f2:f8:8e:79:77:07:3e:b7:ef:7d:07:61:
ab:56:75:d9:d6:a7:87:a8:a7:07:3d:d8:86:62:eb:
13:dd:04:fb:03:bb:b6:4f:eb:cd:64:c7:7c:01:f9:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DD:CB:37:CC:19:9D:BC:E0:A2:26:A1:7F:71:C7:56:AA:05:E0:AF
X509v3 Authority Key Identifier:
keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:21:be:76:d1:37:93:01:1d:f1:25:c0:f4:1e:2f:04:e1:85:
d0:6f:e7:bd:2a:4b:74:7a:61:2b:dc:59:88:6d:a2:84:d5:6d:
a9:73:18:ee:af:26:93:6d:f5:f8:1b:92:8c:f7:0e:9f:f6:e6:
d6:9b:36:a1:05:fd:d7:98:41:08:e7:4d:de:46:01:94:41:66:
4a:b2:2b:59:70:70:8c:44:c3:87:c6:7f:7b:b5:ac:77:05:b4:
87:0a:9a:fd:09:3b:a2:91:c5:60:2e:1d:b8:ba:31:9b:10:dd:
48:a3:f3:a2:f4:1c:25:71:31:f2:df:e6:47:d6:94:8f:af:b8:
f5:25:cc:16:bd:62:ab:ed:3e:c8:01:93:20:34:e4:b6:5c:0c:
8a:21:c6:0b:64:6c:85:3a:7e:c0:42:22:0a:6f:71:04:17:02:
d4:82:b1:be:43:dd:77:ef:a0:19:15:92:ba:87:a7:69:ca:56:
f3:ab:0a:2b:ee:25:49:81:77:02:68:d2:f1:03:66:27:0a:02:
69:d5:53:8e:1c:aa:90:7f:47:e4:d8:1d:d3:ba:58:e5:fb:ab:
a6:8b:72:69:26:f5:3e:08:5e:e9:cf:43:4b:e0:0c:26:e3:4c:
23:a2:1e:e4:a0:4f:f1:41:cf:fe:ce:75:2f:3c:4f:5b:72:22:
68:99:69:20
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUfFyLOEDe++xDGCArVUSYtph3D+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmYwOGNlY2Q1ZTU3Y2JhMGU2OGJjYTdmNzQwMWJkNWVk
YjM4N2ZiODAeFw0yNjExMDQwNTUyMjRaFw0yNjExMDUwNzE4MjRaMDMxMTAvBgNV
BAMTKDBCRERDQjM3Q0MxOTlEQkNFMEEyMjZBMTdGNzFDNzU2QUEwNUUwQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWe429fOvXnSd1uj9zj8ahMJ0l
eE8PHZJ9I6rQk98/UBnPKsv8SRip18Twsr0ipmY3TZXdUAwgHEFt7pYeiJOyULHM
6qL6gQcZGR4bMZ7KaFGLrBDDBGdtkMBzjyFTVhy5v+iI3kXWwG97FxP4FIKzZXKu
6lWwUlv+kN3a5pvxbsayWnnerywdCwzgEIx2vViVA3Go7qpHPssgFLRoo8ebz6PX
Q5bLF60qmT6VLfv2YrxGDCtlD8O8+LOgYL1K1XLZ9bTtnm1gbIB4bGKqULYDl0wQ
vPL4jnl3Bz63730HYatWddnWp4eopwc92IZi6xPdBPsDu7ZP681kx3wB+Wb7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUC93LN8wZnbzgoiahf3HHVqoF4K8wHwYDVR0j
BBgwFoAULwjOzV5Xy6Dmi8p/dAG9Xts4f7gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2
OTgwLzIvMkYwOENFQ0Q1RTU3Q0JBMEU2OEJDQTdGNzQwMUJENUVEQjM4N0ZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0x3ak96VjVYeTZEbWk4cF9kQUc5WHRz
NGY3Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h
Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMi8yRjA4Q0VDRDVFNTdDQkEwRTY4
QkNBN0Y3NDAxQkQ1RURCMzg3RkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCG+dtE3kwEd8SXA9B4v
BOGF0G/nvSpLdHphK9xZiG2ihNVtqXMY7q8mk231+BuSjPcOn/bm1ps2oQX915hB
COdN3kYBlEFmSrIrWXBwjETDh8Z/e7WsdwW0hwqa/Qk7opHFYC4duLoxmxDdSKPz
ovQcJXEx8t/mR9aUj6+49SXMFr1iq+0+yAGTIDTktlwMiiHGC2RshTp+wEIiCm9x
BBcC1IKxvkPdd++gGRWSuoenacpW86sKK+4lSYF3AmjS8QNmJwoCadVTjhyqkH9H
5Ngd07pY5furpotyaSb1Pghe6c9DS+AMJuNMI6Ie5KBP8UHP/s51LzxPW3IiaJlp
IA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 02:40:36 2026 by rpki-client