Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: M9QZCOQzXUbcuiVr+bGLk3fh1+X0lX2ANH1awoy9Qc0=
Subject key identifier: 61:E5:CB:95:A1:DE:18:A7:75:53:62:22:12:ED:F1:23:91:EE:97:2A
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 30C4BDFD5461B45D0BFD737BB75D25EEA1DA0B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 05AC
Signing time: Wed 23 Sep 2026 14:08:52 +0000
Manifest this update: Wed 23 Sep 2026 14:03:52 +0000
Manifest next update: Thu 24 Sep 2026 17:34:52 +0000
Files and hashes: 1: AS203843.asa (hash: V8ALni8uGvnQlob1ieX97WK3dqsrOaJM1khRqBJJdKg=)
2: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: isnheYlFUNrNHynLDsWpGML8crvPM2Ksw4O22cvFFiw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c4:bd:fd:54:61:b4:5d:0b:fd:73:7b:b7:5d:25:ee:a1:da:0b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Sep 23 14:03:52 2026 GMT
Not After : Sep 24 17:34:52 2026 GMT
Subject: CN=61E5CB95A1DE18A77553622212EDF12391EE972A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:4f:c3:82:a7:a1:1a:93:05:81:98:46:fd:
b9:96:f4:7d:58:3e:a0:3d:c9:dd:8f:08:51:2e:9d:
55:aa:dd:3b:8a:5d:b5:75:8d:34:5a:d5:97:c9:02:
36:ff:29:17:c7:a5:8e:a4:2c:6e:1f:98:ac:55:c3:
c9:7a:ea:97:86:c3:c0:3f:aa:37:5e:4d:9b:b5:e4:
26:90:83:e4:23:ed:4e:a9:72:9d:fc:c4:33:30:a8:
4a:2b:a6:65:e6:aa:2c:ab:3b:63:61:fb:a6:42:bf:
77:76:94:03:04:1a:cf:f4:60:97:aa:c6:55:c5:70:
64:48:84:56:43:3d:10:6d:c1:a0:7d:ea:5a:16:6e:
83:87:5d:e2:56:8d:7b:e9:1e:ec:93:33:35:bd:10:
49:21:2a:39:b0:d6:06:1e:14:4f:73:5a:ae:7a:5c:
84:27:62:6c:e1:f7:17:8e:85:78:34:3f:50:d1:7d:
87:ef:2e:98:1b:5e:31:fc:45:c8:53:2a:0d:5e:0f:
b0:43:65:85:3c:8e:db:e2:ce:bc:da:63:dc:21:3d:
27:e7:4e:db:7a:8d:56:e7:43:93:d8:cb:bb:56:92:
be:3a:f7:38:0b:47:89:b4:d7:bc:6e:86:f7:6f:a7:
76:4e:dc:28:a4:b9:d2:7d:23:33:54:95:22:70:dd:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E5:CB:95:A1:DE:18:A7:75:53:62:22:12:ED:F1:23:91:EE:97:2A
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:aa:ce:7b:2a:23:79:65:3f:2b:fb:21:2a:47:f4:31:d1:cf:
e8:bd:64:df:c2:4b:b6:06:f7:29:fb:c7:dd:4d:5a:df:50:d2:
9c:7a:b9:3d:e1:12:a4:1a:50:e3:72:fc:43:eb:be:9f:9f:a0:
c4:86:58:97:d0:fa:50:c8:69:13:18:fb:d2:f4:17:d0:01:2f:
cf:3b:e6:78:3b:74:84:e7:b0:a0:87:ba:e1:ac:fc:93:71:8e:
82:ce:a9:f6:75:d4:bf:76:7b:3b:76:af:dc:7f:a3:53:aa:b0:
30:2b:23:22:e6:6b:d0:8c:d3:e0:22:d5:20:56:15:4d:89:4b:
11:02:b2:74:a8:8b:98:02:d1:f6:f8:4c:84:49:33:11:e6:1e:
d4:72:92:81:1a:a2:c8:26:f3:0f:ec:13:7f:9e:d8:a4:17:82:
cc:f9:a7:0b:0a:d6:58:1c:16:0e:ad:d4:a4:48:d7:ab:74:5d:
76:b4:07:af:a4:ba:27:be:05:e6:f2:8e:4c:17:1e:6f:9b:11:
fe:ae:48:c4:db:46:29:2d:b8:4c:0b:a4:92:04:8c:76:57:99:
99:e9:6d:a4:93:76:15:85:6d:47:c9:4d:6b:34:1e:51:94:4f:
db:a4:46:66:34:99:0b:88:8e:d6:ac:85:c6:b7:e6:b3:7e:81:
0c:f5:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:12:08 2026 by rpki-client