Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: jHL8kOOeHycEmC2sK9NrcXQEJz/qxOfLHtsfWVLkpi4=
Subject key identifier: 01:59:3F:F4:7D:17:5F:2E:A4:57:0B:1C:0A:26:B1:FE:F8:15:C9:00
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 4D41EB1BEAE4BDA519BBA26680DC81EC2681186E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 0388
Signing time: Sat 21 Mar 2026 01:02:10 +0000
Manifest this update: Sat 21 Mar 2026 00:57:10 +0000
Manifest next update: Sun 22 Mar 2026 02:23:10 +0000
Files and hashes: 1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: dXz1yhYMuXl7brI4xAempJva8/NNoH1LNxtxgYn3EEk=)
2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:41:eb:1b:ea:e4:bd:a5:19:bb:a2:66:80:dc:81:ec:26:81:18:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Mar 21 00:57:10 2026 GMT
Not After : Mar 22 02:23:10 2026 GMT
Subject: CN=01593FF47D175F2EA4570B1C0A26B1FEF815C900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:d2:e0:aa:e7:97:a1:46:bf:53:d0:77:14:
62:64:af:d1:41:2a:e3:2a:b0:01:df:85:46:dc:d3:
6d:1a:11:d8:dc:a5:2c:7d:2c:89:23:5e:6d:00:e1:
5d:57:d4:21:b7:d9:03:e4:cb:b3:8e:c9:26:9d:a0:
90:a4:ad:1c:d6:af:3d:ec:97:d2:bf:b7:01:e9:8d:
82:5e:d7:84:30:50:b3:b2:b5:f3:ae:1f:6c:01:8e:
98:53:1f:94:2b:7b:02:dc:7d:57:2d:0b:15:11:2c:
df:66:57:5b:3b:01:55:aa:07:02:fe:b9:2f:cb:66:
a0:cc:b1:6f:be:30:72:7f:6c:30:45:0c:68:65:4b:
4e:88:91:e8:02:f7:22:1f:cc:4f:f3:f3:66:4b:d6:
0c:c6:17:06:93:f6:58:ed:e5:ff:b4:e4:92:bb:58:
0b:eb:48:d1:52:bd:6b:fd:91:bc:5b:81:b9:7f:31:
5a:ef:e2:ef:f3:9a:25:35:a6:f5:38:db:89:3e:11:
15:c3:39:53:57:8e:32:11:95:12:47:35:e6:c6:da:
64:a7:c5:83:b9:42:70:40:a2:5b:b6:10:56:e9:68:
23:fd:d2:97:b3:1e:d8:39:7e:2a:ae:2e:26:81:70:
7f:ce:60:23:3e:b9:e0:82:b0:1e:76:72:59:48:af:
e5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:59:3F:F4:7D:17:5F:2E:A4:57:0B:1C:0A:26:B1:FE:F8:15:C9:00
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d0:ab:ba:bf:a7:39:fa:60:a3:1b:6c:fb:24:c8:56:74:1a:
00:b5:a9:5b:42:32:38:18:af:81:82:fa:16:09:19:bc:6f:71:
67:ee:3c:49:6a:b5:44:62:a4:d5:78:c2:39:2b:5f:4f:57:0a:
ce:29:22:ff:5a:56:b1:0a:b1:75:03:9a:0f:1b:75:80:9b:5d:
82:46:72:12:a3:b6:27:63:e8:39:a8:6a:a3:38:7d:94:3f:90:
ea:53:ee:5c:95:7b:02:10:d7:da:a9:95:f6:48:bc:64:dd:d9:
19:78:b1:2b:51:5d:bb:3c:25:d8:b3:10:2f:aa:a7:34:90:c7:
20:5d:57:4b:58:c8:8a:99:7f:61:39:dd:b1:aa:77:5d:4d:b0:
60:ec:cc:d9:1e:e7:7d:42:a3:f5:45:41:af:cd:ee:d3:3a:3d:
b9:51:d1:a9:40:47:0f:6d:6a:a5:c0:5f:69:a4:b1:72:7e:05:
32:57:6f:32:e1:4e:57:75:98:8a:ef:d1:1e:c0:93:cf:48:e8:
92:05:44:6e:b1:c5:b2:26:7a:6c:44:f9:1e:67:cd:95:84:04:
f6:33:60:4e:51:9c:cb:68:07:d5:6b:33:66:e8:f1:ad:c3:7d:
3d:97:d0:28:2f:5e:5d:9f:6c:67:4a:67:38:34:cc:5b:aa:15:
f2:07:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 09:19:26 2026 by rpki-client