Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: nIaccfqGQHqlQN+lxnErQ6GVlPz9FKLv8dIyFdodGCI=
Subject key identifier: E1:2B:BE:4C:79:B9:7F:54:DD:76:79:F8:25:EE:B5:28:24:EA:A3:BC
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 350770AF13C7A607DC223D0AFD1A4BE3B493C1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 0559
Signing time: Thu 23 Jul 2026 03:21:42 +0000
Manifest this update: Thu 23 Jul 2026 03:16:42 +0000
Manifest next update: Fri 24 Jul 2026 04:06:42 +0000
Files and hashes: 1: AS203843.asa (hash: V8ALni8uGvnQlob1ieX97WK3dqsrOaJM1khRqBJJdKg=)
2: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: rGeVxQ5xJsAzvcNr2eSy9dtwQMCdA8lwuskdr6j7sTk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 04:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:07:70:af:13:c7:a6:07:dc:22:3d:0a:fd:1a:4b:e3:b4:93:c1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Jul 23 03:16:42 2026 GMT
Not After : Jul 24 04:06:42 2026 GMT
Subject: CN=E12BBE4C79B97F54DD7679F825EEB52824EAA3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:a8:a2:b6:ce:a1:ef:b4:34:9b:c0:6e:8f:
31:9c:74:6f:8e:23:c9:db:55:dd:0e:49:36:23:3d:
be:8b:b1:01:b4:59:e0:2a:c7:08:9f:e6:86:c2:8a:
0e:5f:88:fa:70:43:d5:43:54:db:38:8c:fa:6d:f9:
c9:04:7e:74:2d:93:3a:6b:10:e6:e2:c7:6f:b8:b0:
84:4b:2c:1a:ab:65:c9:cc:f9:cc:03:fc:ca:ba:33:
35:16:1a:26:2c:0d:66:8a:94:dd:bb:8d:e5:f0:7a:
03:54:75:e7:ca:40:bf:81:24:7f:68:2e:e1:38:58:
b7:1d:4c:7d:d4:99:f4:90:53:76:71:72:e1:54:ea:
0d:07:a9:cd:b1:1a:85:85:f5:cf:3e:16:92:0b:fd:
b7:be:d0:ad:1e:6b:63:e1:2b:d1:31:c0:43:4c:4a:
09:4a:e9:4d:be:8c:03:4a:b1:32:cb:86:fc:a9:84:
df:ee:a5:e3:72:03:c6:05:30:bc:d7:84:94:f0:9b:
63:3e:5f:ba:62:a4:19:7c:ec:db:33:b3:8c:62:e6:
b0:64:3c:0b:67:ca:a1:0f:25:74:e9:b6:b2:51:e1:
4d:b0:fa:f5:0c:52:b3:6d:70:6b:c3:45:13:59:fa:
ef:af:29:e8:2c:ee:5c:a5:90:a1:b5:04:fe:72:44:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2B:BE:4C:79:B9:7F:54:DD:76:79:F8:25:EE:B5:28:24:EA:A3:BC
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a0:e0:a6:11:50:7c:16:e2:48:78:6a:22:21:49:7e:04:0a:
0c:73:b2:0e:ae:07:c0:53:b8:e1:42:fb:c4:4c:77:c4:43:b4:
c1:4d:74:55:5b:ca:fb:1f:ef:6e:8e:66:a6:cd:ee:dc:e8:bb:
e3:a9:24:ab:6b:9d:b6:32:b7:7b:aa:b0:69:4b:3e:4c:c1:2b:
98:bf:f3:6e:09:59:78:01:1b:45:d8:8a:81:88:c6:0f:3c:a3:
64:93:0d:aa:4d:b9:72:05:b7:87:da:da:f3:f5:2d:5f:07:4c:
6d:fc:5e:0c:1a:e9:1f:d6:a4:05:12:5d:7d:ec:a9:7b:68:4d:
82:51:e9:a6:9a:7a:63:70:25:98:b4:ea:9e:3e:e7:6c:96:e1:
74:83:cb:99:44:93:93:e8:eb:de:6a:99:50:81:da:96:88:d8:
54:22:91:12:00:5c:7d:97:68:2c:24:65:95:a2:1d:5d:1f:25:
be:9e:cb:d6:f7:9a:47:01:9f:ff:ad:21:de:54:7c:f5:8c:67:
93:57:dc:03:8c:99:ba:9d:8c:fb:af:12:1a:b7:98:3a:11:24:
aa:25:9d:c1:5e:44:66:fe:34:11:15:63:cf:08:cf:72:ac:6d:
c4:86:af:9b:61:68:0c:b0:30:d2:98:f9:d0:62:7c:25:15:b6:
ed:47:bf:85
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUNQdwrxPHpgfcIj0K/RpL47STwd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDAyYmJiNDQwYjlkZDQ0MDg4ZGI2ODRlZTgyZmEyYTdk
YTA2ZmNmNjAeFw0yNjA3MjMwMzE2NDJaFw0yNjA3MjQwNDA2NDJaMDMxMTAvBgNV
BAMTKEUxMkJCRTRDNzlCOTdGNTRERDc2NzlGODI1RUVCNTI4MjRFQUEzQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX/6iits6h77Q0m8BujzGcdG+O
I8nbVd0OSTYjPb6LsQG0WeAqxwif5obCig5fiPpwQ9VDVNs4jPpt+ckEfnQtkzpr
EObix2+4sIRLLBqrZcnM+cwD/Mq6MzUWGiYsDWaKlN27jeXwegNUdefKQL+BJH9o
LuE4WLcdTH3UmfSQU3ZxcuFU6g0Hqc2xGoWF9c8+FpIL/be+0K0ea2PhK9ExwENM
SglK6U2+jANKsTLLhvyphN/upeNyA8YFMLzXhJTwm2M+X7pipBl87Nszs4xi5rBk
PAtnyqEPJXTptrJR4U2w+vUMUrNtcGvDRRNZ+u+vKegs7lylkKG1BP5yRF7LAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU4Su+THm5f1Tddnn4Je61KCTqo7wwHwYDVR0j
BBgwFoAU0Cu7RAud1ECI22hO6C+ip9oG/PYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4
ZWI4LzEvRDAyQkJCNDQwQjlERDQ0MDg4REI2ODRFRTgyRkEyQTdEQTA2RkNGNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBDdTdSQXVkMUVDSTIyaE82Qy1pcDlv
R19QWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2Y2ODU2MS0w
YTc0LTRjY2EtYmY4Zi0xMmZhYWFmYzhlYjgvMS9EMDJCQkI0NDBCOURENDQwODhE
QjY4NEVFODJGQTJBN0RBMDZGQ0Y2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6DgphFQfBbiSHhqIiFJ
fgQKDHOyDq4HwFO44UL7xEx3xEO0wU10VVvK+x/vbo5mps3u3Oi746kkq2udtjK3
e6qwaUs+TMErmL/zbglZeAEbRdiKgYjGDzyjZJMNqk25cgW3h9ra8/UtXwdMbfxe
DBrpH9akBRJdfeype2hNglHpppp6Y3AlmLTqnj7nbJbhdIPLmUSTk+jr3mqZUIHa
lojYVCKREgBcfZdoLCRllaIdXR8lvp7L1veaRwGf/60h3lR89Yxnk1fcA4yZup2M
+68SGreYOhEkqiWdwV5EZv40ERVjzwjPcqxtxIavm2FoDLAw0pj50GJ8JRW27Ue/
hQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:33 2026 by rpki-client