Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: IqWP+ETFl6SrDUpTZJ8UCl9YKDr8Xy117anZOdZpBRQ=
Subject key identifier: BC:A8:B3:C0:6B:E2:5A:6F:8E:83:19:37:60:13:DF:76:0D:4E:25:3F
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 587FFA3E9826A10F291AA2BB3E66E74CECF96BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 04BA
Signing time: Thu 05 Nov 2026 06:04:03 +0000
Manifest this update: Thu 05 Nov 2026 05:59:03 +0000
Manifest next update: Fri 06 Nov 2026 09:30:03 +0000
Files and hashes: 1: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: 7bLO5behIIxh8QOWdCdYKrNmYUJrIUwnhfkYG+jVAro=)
2: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: KcM1b9RryZ7Ci9mAImtzHnHdHPyy3F6hHFMO/8+6Nag=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7f:fa:3e:98:26:a1:0f:29:1a:a2:bb:3e:66:e7:4c:ec:f9:6b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Nov 5 05:59:03 2026 GMT
Not After : Nov 6 09:30:03 2026 GMT
Subject: CN=BCA8B3C06BE25A6F8E8319376013DF760D4E253F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:b9:b2:19:19:c2:bb:35:9e:c9:67:b8:98:
66:c1:c1:d1:aa:b4:74:00:d3:65:23:58:50:3a:85:
a3:23:8c:b7:5b:c1:b5:87:1a:51:80:36:2f:ce:5f:
c8:4e:90:c5:4f:e3:8e:de:9d:8b:f2:d0:2a:ef:8c:
29:3c:ea:98:e2:3b:d0:0f:95:35:75:01:4c:26:7b:
18:f8:af:45:94:86:21:29:d0:df:7f:7e:e0:83:6a:
18:64:5a:1f:f2:bb:a2:15:7d:42:3e:09:67:53:59:
c8:cf:6a:3b:e0:65:07:28:4f:2c:7a:4c:a2:31:80:
5c:90:af:3a:2a:d8:0a:f4:8c:21:d6:6e:14:e8:be:
4c:d4:96:71:0e:43:b0:b5:0c:48:81:5d:fc:f6:29:
46:66:e9:23:b0:53:92:57:64:57:0d:60:f3:78:e8:
98:09:79:60:96:90:7e:b0:bd:67:9d:e8:de:54:f3:
47:b2:4d:4b:4d:dd:46:90:e4:88:c9:e8:e5:6c:71:
71:8b:61:3f:8d:84:a9:aa:45:10:1c:42:aa:d5:99:
83:97:93:5b:17:34:8e:d3:d1:fc:68:20:e7:66:65:
af:13:0a:cd:45:a8:93:8f:98:30:0f:53:3d:14:89:
18:b9:f3:c0:31:76:52:85:c3:2f:cc:22:76:d8:e8:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:B3:C0:6B:E2:5A:6F:8E:83:19:37:60:13:DF:76:0D:4E:25:3F
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:a8:b0:15:18:f0:15:e7:d3:ea:3a:9b:98:ff:8b:d0:34:81:
c3:5c:23:67:9f:d4:61:c1:9e:a1:63:bc:74:47:f2:62:87:b7:
96:5f:7d:9a:83:d6:3b:dc:c9:c1:1a:83:c8:b7:f9:12:91:e4:
a5:2c:33:e0:63:ad:21:1b:70:f4:3b:01:b0:86:1a:99:57:b0:
55:16:d8:b7:80:e5:4a:86:2a:98:21:02:7d:b9:18:58:0d:2e:
cb:8f:c6:49:2a:b6:78:0b:1d:28:09:d4:9c:0a:c7:68:58:3f:
a3:aa:09:58:e8:36:14:2d:f4:f4:18:18:f0:5e:0c:44:ae:ad:
cc:c1:92:48:3a:c2:75:0a:1d:77:e6:f8:8d:c6:1a:f5:8f:84:
ae:1f:71:81:a7:54:05:57:5a:40:47:ab:53:e0:cd:52:1f:94:
ba:0a:6d:46:2f:0d:0c:eb:c9:43:f6:a2:c1:10:02:98:c7:4b:
02:63:ae:8b:c0:2f:8c:8e:c8:e0:4c:95:ac:6a:a3:24:f9:8b:
c4:b3:4c:f3:54:ed:89:ca:92:4f:20:a0:94:62:dd:cc:59:45:
c0:31:76:8f:2e:37:95:a8:49:89:fe:d3:c6:b8:89:c4:30:74:
b0:6a:f5:3e:54:61:f3:c8:a3:94:5f:17:96:48:e4:6d:b3:3c:
b6:c0:f2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:42:34 2026 by rpki-client