Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: Fw+STq0vIZ3Eqmu1uA6R16hDrmyJWoO4W9n5L/t/p1E=
Subject key identifier: DA:36:ED:1D:48:F0:65:0F:E4:09:32:94:91:3D:A8:08:D0:64:37:FC
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 7FAC46A47DA4F0911480859ED41387EF4F4D3D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 03C4
Signing time: Tue 05 May 2026 15:16:17 +0000
Manifest this update: Tue 05 May 2026 15:11:17 +0000
Manifest next update: Wed 06 May 2026 15:33:17 +0000
Files and hashes: 1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: dye4ZdNl7LVLd9aXDHCyTrHJQBBBdnydZkXRvkBP+5E=)
2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 15:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ac:46:a4:7d:a4:f0:91:14:80:85:9e:d4:13:87:ef:4f:4d:3d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: May 5 15:11:17 2026 GMT
Not After : May 6 15:33:17 2026 GMT
Subject: CN=DA36ED1D48F0650FE4093294913DA808D06437FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:0b:2d:ed:11:c7:cb:1c:71:c8:5c:7e:65:
42:8b:ce:56:c2:5a:e2:e1:5b:25:a5:5f:d3:60:3f:
86:74:2b:fb:f2:b5:af:00:6c:c8:53:d1:df:73:37:
f3:c0:af:22:da:66:ee:5f:af:9b:e6:c9:03:2f:b3:
44:b1:41:04:82:0a:3e:cb:cc:e8:d6:d2:c5:d0:b1:
63:c8:bd:dc:22:8d:7a:c2:c0:07:52:ff:19:b2:50:
78:34:16:71:e4:2a:12:9a:86:8a:d8:75:50:5a:88:
68:91:6d:6a:a3:d9:fa:5f:90:f3:14:72:e3:49:c7:
fd:3f:31:17:0b:4b:9e:67:65:82:c3:65:1a:8a:d3:
a9:42:53:aa:b1:25:88:98:1d:11:55:0c:2e:24:40:
99:36:35:5c:e2:64:a2:a5:9b:fc:95:04:0a:8b:37:
82:71:fd:e4:65:67:7d:db:5c:a8:cf:8c:3a:3b:6a:
81:16:16:e1:ea:a4:cb:c0:d7:c8:c1:43:95:f4:5f:
6f:76:ba:1a:a0:8b:d5:c9:1f:44:c7:73:16:72:f3:
70:cc:85:fa:79:d9:7a:b3:5d:a2:5d:9c:63:29:9f:
0f:d9:00:4d:45:2d:6b:1c:c7:38:cf:9c:1c:85:64:
dc:5a:17:b6:ed:86:17:25:e8:95:0a:10:02:c6:ef:
64:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:36:ED:1D:48:F0:65:0F:E4:09:32:94:91:3D:A8:08:D0:64:37:FC
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7d:1f:b1:91:2f:dd:f9:e8:56:5b:b0:5a:6f:8b:c3:73:cf:
3c:cf:4a:f9:9e:fc:9e:2f:31:41:25:5d:d1:02:d6:ed:29:a5:
1c:8f:db:cc:03:0a:54:a1:1b:1b:f3:6d:3c:78:22:e6:e6:74:
cf:9f:b1:64:8b:8a:49:9b:01:3c:30:36:c0:1f:86:d0:0c:3f:
39:89:3b:f1:d6:4e:9c:77:6d:67:ed:08:40:e0:30:50:b6:61:
ce:8c:29:fa:0f:1b:1a:be:8d:e8:c7:84:33:aa:7d:31:bc:a6:
08:77:73:1a:60:b5:0b:2b:02:c3:dc:85:f3:6c:8b:bd:3d:8d:
2b:d6:15:f3:56:f2:06:d0:2c:5c:49:44:c2:66:fd:56:d5:fb:
93:d6:75:83:74:d0:b4:a5:9f:c5:2f:00:ef:08:99:e0:42:e8:
fc:87:09:ad:a9:4d:2e:f6:56:84:ba:fc:75:16:5e:ab:6a:0c:
63:6b:52:b1:43:7d:2a:cf:23:49:f4:e2:69:1d:21:f8:0b:fd:
9e:83:99:c3:35:16:d5:16:18:93:cb:0c:d0:cb:ac:47:48:30:
b9:64:21:b7:59:a2:a9:4d:51:fa:c3:b3:a7:14:2e:42:29:52:
68:bf:0d:94:7a:72:c3:a0:ae:33:f1:f9:b0:27:6d:bb:d8:f6:
86:c3:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:43 2026 by rpki-client