Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: r3AbeUg5xidtF6397TG7Gs/XPDlgo2pA0crQ+a3PxIQ=
Subject key identifier: 4D:9F:7D:3F:C5:7C:91:E6:EB:A1:C8:99:C8:46:17:6A:EC:B7:39:08
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 6B30EAB5EAA5A40DC1EB8FCF5D42C5FB8FADE597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 04F8
Signing time: Tue 12 May 2026 03:33:22 +0000
Manifest this update: Tue 12 May 2026 03:28:22 +0000
Manifest next update: Wed 13 May 2026 06:59:22 +0000
Files and hashes: 1: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=)
2: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: dD7hzxtSi22ldluUYQ0XBw5eKsK9s+vyhqa3evJvwj4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 06:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:30:ea:b5:ea:a5:a4:0d:c1:eb:8f:cf:5d:42:c5:fb:8f:ad:e5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: May 12 03:28:22 2026 GMT
Not After : May 13 06:59:22 2026 GMT
Subject: CN=4D9F7D3FC57C91E6EBA1C899C846176AECB73908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:8c:eb:83:67:a4:39:de:85:b5:69:7b:53:
f6:46:d6:2d:c0:46:82:be:1c:d7:dc:66:71:c2:77:
28:1f:4c:ce:c4:5f:81:a6:2e:05:e3:a3:02:fe:e2:
ee:59:c4:f3:90:3a:85:f8:19:5e:01:8f:eb:a2:5f:
c2:bf:6a:54:a1:bc:25:64:36:e1:4e:51:b7:55:54:
b4:f1:31:03:8b:12:9a:52:05:be:b9:da:d1:91:e5:
f9:a3:f1:97:3a:21:10:8e:be:92:f0:dc:08:6b:a4:
de:e0:ca:36:9d:aa:b6:da:8c:a0:70:ec:3a:a4:15:
f6:85:69:33:24:7a:0d:bd:ab:61:5c:f8:18:c0:fe:
5c:e6:ef:30:e4:df:cb:6b:ff:0f:05:7d:af:5d:61:
35:56:71:f8:86:68:ff:7a:99:a1:83:bd:68:62:eb:
2c:a8:f3:a7:c5:22:f0:bc:d1:21:d1:5c:12:ff:7f:
52:c6:f6:8b:b7:c6:f7:23:71:02:19:aa:0a:14:f0:
0f:f2:48:da:f1:6f:53:00:c5:59:68:09:be:c6:17:
e0:35:69:a1:17:10:73:90:18:bf:33:b2:a3:43:45:
44:23:f6:0a:4b:57:a4:0b:d8:c3:7b:ab:a0:73:49:
56:1f:49:b5:8c:ba:c6:85:76:1c:13:fe:6f:15:df:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9F:7D:3F:C5:7C:91:E6:EB:A1:C8:99:C8:46:17:6A:EC:B7:39:08
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e2:75:a0:fa:81:3e:53:c3:5e:64:a9:0d:a3:06:d8:12:72:
9c:69:29:b9:7f:fe:54:15:6b:72:57:f1:21:17:28:49:ca:b0:
ac:12:1f:68:07:79:16:64:1d:cb:cc:7b:25:f3:f3:32:77:5e:
31:a8:5b:65:a1:f8:e8:ab:a2:ce:e2:84:84:52:03:e2:ea:0d:
79:ba:f9:5a:72:70:c2:ca:f3:0a:db:d1:c2:6b:67:35:f7:79:
95:2a:93:ca:a6:8c:aa:f3:ae:00:9d:a2:4b:c0:fd:5a:c8:7b:
43:85:79:60:3d:48:71:ed:cc:1f:2b:4f:46:cb:40:b7:31:f4:
3b:a1:c8:1f:1c:03:85:c8:44:f3:46:67:08:42:e0:4e:2b:0e:
0a:d8:16:80:d0:2d:ce:c0:bb:97:74:17:c1:9c:f3:a2:6a:5c:
6e:64:80:e5:1d:a3:7c:c0:79:46:d2:0b:97:ed:7f:66:06:86:
22:9c:d7:60:c2:3e:a8:27:ec:76:92:59:d4:5a:0b:9f:3e:dc:
d6:3e:bd:cc:0c:92:d0:3f:17:e1:ee:de:01:9d:4c:0f:e0:c5:
4d:15:8b:86:31:5c:3d:98:61:e7:05:2d:39:70:4d:0a:85:db:
cb:98:2f:27:f8:35:53:6d:2e:1e:34:47:50:9d:e0:b9:9d:6d:
dc:52:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:18 2026 by rpki-client