Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
File: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json)
Hash identifier: 6Rybv6BqMH3LBlhzv2XAI8eaNs1YZ48iXLUYYsKn1S8=
Subject key identifier: 04:68:30:01:D8:AE:14:78:DE:50:1F:DD:4F:D3:40:83:CA:62:17:5C
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Certificate issuer: /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial: 41D1CB052AC2753CB5BC949AC83782A68E5F70C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
Manifest number: D6
Signing time: Sat 07 Mar 2026 11:49:43 +0000
Manifest this update: Sat 07 Mar 2026 11:44:43 +0000
Manifest next update: Sun 08 Mar 2026 15:27:43 +0000
Files and hashes: 1: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: I77PV6sFLOJt4rQwDhlo2mM8/T1s7cjC3fmrZEVnzY4=)
2: AS204211.asa (hash: G7V8+Z6eugOHD3yF2ypcvdD1xtRfiD1alTcupzg5t/0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d1:cb:05:2a:c2:75:3c:b5:bc:94:9a:c8:37:82:a6:8e:5f:70:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Validity
Not Before: Mar 7 11:44:43 2026 GMT
Not After : Mar 8 15:27:43 2026 GMT
Subject: CN=04683001D8AE1478DE501FDD4FD34083CA62175C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:73:3f:55:b4:3a:49:07:20:21:36:71:9b:37:
9c:10:e4:c5:e2:a9:15:63:38:c9:1f:fd:89:5a:b0:
c2:15:e9:88:06:97:b7:bc:19:0b:dd:1c:f6:f9:c4:
45:27:26:44:0c:c5:27:08:22:b0:79:fb:1d:85:77:
cf:f0:13:f7:26:9b:ef:01:b8:0f:3d:05:6c:98:72:
13:09:6b:f2:4e:8a:93:45:d8:4f:e0:a6:eb:e1:f0:
28:a8:b8:c4:bc:49:da:e0:9f:af:e9:8f:4d:8a:af:
4a:fd:fb:b5:92:5b:91:be:d9:f5:16:cf:58:94:18:
12:0b:10:6d:e1:c3:46:59:a7:48:b0:58:49:8e:b5:
eb:99:bc:3c:ea:11:81:c8:46:3c:78:58:59:d5:2c:
aa:e2:91:32:d5:58:34:d0:48:05:57:60:da:b8:f9:
30:14:e9:6e:c1:fe:05:f4:c1:0f:82:f3:bc:9e:b1:
a6:10:50:f4:75:a4:8d:e9:fd:47:bf:8c:45:be:e9:
26:af:13:5c:50:ef:6e:ca:00:d7:00:9c:ea:14:55:
a4:79:20:f3:d5:0a:5a:01:c8:0c:d3:be:33:ae:44:
63:10:79:82:14:73:9c:33:27:f3:4c:5e:a3:1d:9e:
f8:fd:82:db:f8:d5:2a:8a:c0:44:8f:87:dc:db:e3:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:68:30:01:D8:AE:14:78:DE:50:1F:DD:4F:D3:40:83:CA:62:17:5C
X509v3 Authority Key Identifier:
keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:19:11:fe:55:22:9a:36:61:6d:cb:fc:8b:6b:47:e2:e5:0a:
59:a7:96:4c:97:19:70:18:8e:ec:30:d2:e6:c6:a6:a3:8f:4a:
b1:06:4f:02:30:2a:f4:ef:58:26:30:eb:7a:dd:0d:8d:e8:3b:
fe:b7:65:9c:8c:8c:17:de:0c:5d:37:f5:9d:52:2b:6b:ee:76:
02:ca:e2:69:02:d2:48:7e:ec:7a:f3:88:7a:de:03:da:89:38:
39:a5:52:ac:17:e4:80:23:84:51:63:f7:e5:ce:20:f7:04:8b:
10:d4:5c:a1:fb:02:90:af:9e:9d:da:be:2d:da:5a:35:47:4a:
28:84:39:0b:1b:c8:aa:84:46:88:a6:ba:0d:b4:43:16:59:ff:
a5:d6:d6:58:de:4b:e6:2a:9a:2d:ca:1d:8e:c5:47:26:23:5d:
53:6d:08:b5:93:51:88:3e:ae:18:99:13:1f:4d:0b:bd:b0:c2:
1a:bf:f9:b4:c3:c1:0b:c6:ee:c2:a7:96:9f:60:a6:cc:9c:f8:
3b:1d:59:1c:21:0c:d4:99:86:b9:aa:c3:ef:98:c9:c8:8d:0b:
3d:e2:fb:a4:df:46:03:cc:8e:92:53:7c:86:15:45:89:19:3e:
cf:19:37:e0:6e:c1:16:67:a2:7d:15:ec:94:a6:2a:ac:b5:d3:
7d:17:3d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:14:13 2026 by rpki-client