Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
File: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json)
Hash identifier: C9fz4FejiT7bvVB+X9ZdxHpg3XancNJPzM+qbQLnAHA=
Subject key identifier: 7F:63:6A:7C:F7:10:73:A1:6F:1C:A1:1A:7F:2A:8B:06:57:D2:DC:AD
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Certificate issuer: /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial: 6B81D53D5FCCD072515E621054F7C13EDF3CB488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
Manifest number: 0120
Signing time: Tue 21 Apr 2026 01:10:58 +0000
Manifest this update: Tue 21 Apr 2026 01:05:58 +0000
Manifest next update: Wed 22 Apr 2026 01:33:58 +0000
Files and hashes: 1: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: cgwF1D22PebR9l/j1rdytC+k55k+NPogdFPiE1P+H1s=)
2: AS204211.asa (hash: e40mm1w04l8pqH+S+LRtSq7rwuRJ9hfyzmkt5TzNy/Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 01:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:81:d5:3d:5f:cc:d0:72:51:5e:62:10:54:f7:c1:3e:df:3c:b4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Validity
Not Before: Apr 21 01:05:58 2026 GMT
Not After : Apr 22 01:33:58 2026 GMT
Subject: CN=7F636A7CF71073A16F1CA11A7F2A8B0657D2DCAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:6a:7f:c9:93:8a:a2:b9:5c:ad:06:94:5e:
14:34:f3:0b:c4:67:3f:81:fb:31:b4:f4:85:9f:00:
c3:b4:56:29:dd:25:85:f3:36:b7:5f:66:e5:02:8b:
0e:0a:1d:c1:e2:cb:36:e9:d0:e5:79:8b:63:5e:6d:
a2:fa:2d:94:6c:60:00:8b:36:c9:d0:a7:d6:29:1b:
21:33:30:68:ac:c3:e9:d3:78:7c:45:53:fe:0e:61:
df:9f:13:a2:55:38:6f:36:cc:d7:52:7b:f0:f0:4d:
58:22:28:f7:8d:84:38:74:ac:79:74:b1:9e:7c:3a:
1c:ea:70:02:b9:5c:81:eb:a9:42:82:5e:b4:b4:1c:
e4:25:02:b5:d0:cc:b4:95:0d:84:cb:96:7b:4d:4f:
cd:d3:24:29:16:5c:6b:f3:0d:e6:3d:64:8b:c0:22:
7d:aa:7e:9b:0a:c0:5e:e6:83:e7:c3:cc:2e:46:51:
51:56:41:8c:56:ce:82:c8:46:b7:6b:27:d5:61:24:
17:b3:46:de:2f:7f:81:0b:af:ba:1f:bd:60:ef:8a:
40:33:72:29:b5:00:c5:02:03:f0:de:a4:cd:f9:30:
10:65:8c:fe:8e:35:54:7e:5c:53:4a:9c:42:52:87:
4e:f1:45:70:c4:e1:d1:66:aa:2b:73:49:5b:b8:6a:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:63:6A:7C:F7:10:73:A1:6F:1C:A1:1A:7F:2A:8B:06:57:D2:DC:AD
X509v3 Authority Key Identifier:
keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7a:7d:2a:81:08:d2:a0:1d:cb:be:78:76:c5:2d:66:f1:39:
a9:dc:28:14:cd:52:cf:19:93:cc:56:82:18:11:c0:39:17:18:
0f:94:3c:68:d0:fd:eb:85:08:6b:df:cb:98:77:68:08:d4:11:
09:24:b6:4a:eb:4d:d7:bf:12:a8:f7:d9:08:4b:c7:3e:4c:d5:
85:01:39:66:94:32:ee:c4:81:35:45:1c:81:80:95:e1:e7:84:
d0:6a:98:13:91:5b:ee:60:9d:8d:19:7a:69:15:e5:0d:8d:f7:
78:4a:7f:80:9f:97:82:94:76:fb:1e:5d:5f:73:e1:f7:f8:b9:
8d:40:2d:75:55:72:5c:d8:85:a8:8a:23:b4:3b:04:e9:1c:54:
2a:4a:d1:88:84:0f:03:3e:19:2f:89:05:42:87:f6:af:61:72:
ae:15:fa:4f:47:c3:14:d2:20:8b:b2:5d:33:b7:e8:cb:b9:3a:
c7:fc:6b:71:a2:dd:68:a1:9c:3c:00:3b:67:fb:ab:f4:97:23:
23:85:f7:59:b5:23:78:07:b1:60:07:1b:8d:3c:ce:fb:e3:04:
0f:19:f9:81:b2:0a:83:4f:02:95:1d:45:be:7a:73:d3:68:e1:
9e:77:0a:05:cb:9b:76:60:80:b8:ff:98:16:e3:a5:e9:a3:c1:
ba:8a:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 16:36:29 2026 by rpki-client