Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: 31a7vkJy1DGZqd0OpJLnTkut0T80gHDW6NYgLp2r3XQ=
Subject key identifier: 5D:65:86:05:06:FF:C9:25:A0:56:33:E8:A9:AA:DB:A2:99:35:F8:4C
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 2E42946DD75304E6512CA1261B73928EF617BF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 043D
Signing time: Mon 03 Aug 2026 18:13:05 +0000
Manifest this update: Mon 03 Aug 2026 18:08:05 +0000
Manifest next update: Tue 04 Aug 2026 19:28:05 +0000
Files and hashes: 1: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: 7bLO5behIIxh8QOWdCdYKrNmYUJrIUwnhfkYG+jVAro=)
2: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: aEncTCcVIzEPgz13eLh2WHVsvpmDT+4HhwbH4Hf/6qk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 19:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:42:94:6d:d7:53:04:e6:51:2c:a1:26:1b:73:92:8e:f6:17:bf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Aug 3 18:08:05 2026 GMT
Not After : Aug 4 19:28:05 2026 GMT
Subject: CN=5D65860506FFC925A05633E8A9AADBA29935F84C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:bf:53:ba:8c:8f:ea:0a:48:cd:44:e9:5f:
7a:70:8f:7e:98:d3:f6:0f:8c:38:1e:5a:af:fe:13:
17:35:23:46:4f:6b:56:eb:d1:55:e2:d5:df:cf:43:
82:6e:97:be:17:af:37:7b:e2:a7:9c:1a:5e:00:31:
69:00:a2:7e:38:83:93:3f:8b:96:b3:43:b7:11:36:
d9:b3:f3:8b:88:26:5d:c1:da:f2:f5:8d:76:29:67:
ae:af:74:c2:07:04:05:54:ed:e2:6c:28:f5:05:3f:
fd:60:e0:28:db:19:ee:58:4b:37:57:6d:3a:04:ba:
51:ef:c0:f6:5a:8a:64:b8:f6:46:4f:5a:7b:20:39:
19:a3:8e:11:06:13:82:2a:d5:09:83:08:1d:90:7f:
07:e5:13:e4:7c:18:61:84:fd:4e:68:9d:66:98:ad:
10:23:42:d0:1f:c1:cc:23:0e:02:b7:fc:5e:f8:7b:
b7:18:65:c7:1a:02:99:55:cb:df:94:10:18:51:90:
0c:d9:74:d0:7a:df:33:28:f0:9a:6a:1e:fb:39:1f:
16:60:45:49:60:de:26:f4:04:9a:87:76:46:5f:0f:
82:1a:f7:73:90:6c:f4:c6:67:be:44:b2:e7:f4:28:
ec:db:c4:84:e1:33:2a:86:de:84:75:1f:82:4f:8c:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:86:05:06:FF:C9:25:A0:56:33:E8:A9:AA:DB:A2:99:35:F8:4C
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:46:f5:ea:c1:95:c6:3e:c5:e9:a4:29:db:61:5e:00:c0:c8:
dd:cc:c0:01:01:bc:ea:bd:d4:77:b1:17:77:6e:40:b9:18:d2:
7d:ca:4f:45:24:4d:47:6a:5e:bd:4d:04:09:d3:55:a1:5d:4c:
56:fc:1a:d4:98:7d:cf:27:20:64:68:aa:55:1d:b0:22:f4:0a:
74:a2:e0:5f:04:4c:1f:7e:1c:2e:35:d1:b0:2b:f3:df:9a:b6:
29:5f:8a:4c:1d:93:bd:2a:04:a2:7d:5b:67:ec:65:15:3d:ed:
7f:00:8c:1f:4c:e7:03:52:a5:20:b5:19:d2:54:bb:e3:53:57:
12:e2:2f:1a:4b:d4:82:58:67:de:2a:de:b0:66:e1:15:1a:92:
29:ee:54:f2:9d:fb:fa:34:b8:a8:0b:6c:80:be:fd:c4:40:1b:
87:db:a3:a5:e2:d1:60:82:e2:a4:1f:41:8a:97:61:94:d0:ca:
b3:eb:9f:40:19:69:9c:d9:1f:d8:23:89:f6:f7:cb:b1:ba:0c:
56:fa:12:d9:9c:f3:06:fc:68:70:2b:f7:34:d0:cc:d8:c7:67:
b3:60:40:e6:49:f6:b3:6c:88:65:3e:7d:d7:ba:95:b9:37:84:
39:50:ee:bd:ba:19:ca:59:a3:c6:49:0d:b3:26:dd:20:4b:95:
09:44:36:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 08:52:42 2026 by rpki-client