Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
File: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json)
Hash identifier: Pes1mWp/Vt1y+mpWLlln5meUyU+OI+xInJHDSQaWjYc=
Subject key identifier: 05:BB:C1:C7:1B:B9:3E:D2:22:10:8E:19:2F:9B:8E:98:28:B9:7C:5E
Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
Certificate issuer: /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Certificate serial: 3067432CBE929ED9240BEAE2BA6100F92920396D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
Manifest number: 0400
Signing time: Sun 29 Mar 2026 01:40:53 +0000
Manifest this update: Sun 29 Mar 2026 01:35:53 +0000
Manifest next update: Mon 30 Mar 2026 05:36:53 +0000
Files and hashes: 1: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: B/cJsoh5VA2b3jeakPNmo/6qfXI6FLzAFmYPVMorzWg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:67:43:2c:be:92:9e:d9:24:0b:ea:e2:ba:61:00:f9:29:20:39:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Validity
Not Before: Mar 29 01:35:53 2026 GMT
Not After : Mar 30 05:36:53 2026 GMT
Subject: CN=05BBC1C71BB93ED222108E192F9B8E9828B97C5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:70:5e:6f:23:99:f3:e7:0e:ac:27:32:a3:
ae:c2:5b:f8:e0:7b:00:06:24:c4:74:da:df:61:85:
10:8f:98:bc:88:a5:05:1c:70:cb:c6:3c:ef:82:fa:
ae:8b:4c:0d:7a:fa:a7:1e:f5:5b:91:85:22:88:82:
e7:2c:c4:42:6f:89:8b:4c:ff:e1:ef:3f:b1:08:e9:
db:58:4d:83:8a:92:30:7b:26:45:c9:e6:65:41:62:
3c:db:c3:f5:75:c1:aa:7a:fa:0e:a4:b1:10:71:08:
9c:3d:31:c1:87:e7:b5:06:14:85:3e:6d:8f:d3:44:
07:9e:da:26:a7:b9:54:a4:70:a7:09:48:6f:ce:9e:
22:93:e3:2c:07:99:96:49:da:05:f5:a8:cd:15:05:
b0:a8:1b:bf:36:93:bb:04:83:2c:aa:da:58:ab:6c:
e8:1b:18:2f:8f:ef:2b:6b:8a:6d:59:e8:df:74:5c:
7d:66:07:15:34:48:5d:83:07:7a:b3:6f:b8:9f:55:
dc:5e:cc:db:d0:7a:84:74:06:c4:0c:0b:c2:c8:d0:
1c:da:94:4a:cd:a0:fc:36:97:bb:38:f8:22:64:f5:
d1:32:a8:63:fc:11:d5:5a:d2:e0:38:8c:de:06:d7:
f4:9d:9d:24:7a:d9:f7:65:95:59:4a:33:1e:b0:7b:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BB:C1:C7:1B:B9:3E:D2:22:10:8E:19:2F:9B:8E:98:28:B9:7C:5E
X509v3 Authority Key Identifier:
keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:49:c8:ca:23:14:11:d1:01:d4:98:ca:7a:86:61:b0:e4:05:
8e:db:40:64:b1:90:0d:2d:17:98:cc:c2:d4:73:53:2a:5a:19:
7b:7a:f6:5f:c3:ae:e3:09:fc:41:39:6e:81:10:e3:23:7e:a3:
91:4e:85:70:bf:50:e0:21:08:50:c5:1f:a4:b1:59:9d:d3:09:
dd:30:d8:86:86:7c:06:29:6f:d3:31:c8:a3:de:cf:6e:95:7f:
0a:84:42:fb:46:78:be:62:9b:fa:85:25:c4:75:fb:73:5c:02:
f3:d7:d9:aa:d9:cf:6b:7d:74:40:1b:60:01:32:ed:c8:f6:a5:
51:fd:f7:45:3b:e6:18:c6:22:a3:eb:c8:a2:43:24:bf:c8:2c:
67:2f:33:1a:87:f8:a5:cc:5b:e7:48:e5:24:9c:b3:a0:b3:c6:
0e:3b:7c:8b:65:5c:a6:e6:ff:3c:e2:87:ac:aa:04:35:bb:98:
66:b7:38:49:0a:a7:3d:d8:d2:3a:45:53:43:e7:76:1e:78:ee:
a5:9d:3d:b5:f8:ef:5e:95:13:c4:67:a9:92:9a:e9:6d:cb:06:
0b:17:db:82:b3:df:e0:0a:a3:7f:e5:07:fb:3f:ae:3f:87:ee:
5d:b1:fb:65:6a:aa:07:81:b0:f0:7e:cb:91:96:79:3d:c8:ec:
6b:f1:71:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:18 2026 by rpki-client