Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: Ai+3Ggbc76y0SpBzhNFPj1tbxTdjT/TfSIRdXIBCmuY=
Subject key identifier: FA:4D:2E:32:2D:73:29:D8:2C:5C:25:72:0A:71:B1:23:45:07:AF:D3
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 6CC116A80289CE1E09D5BC163B2DB349A89AFF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 04B7
Signing time: Wed 25 Mar 2026 07:49:39 +0000
Manifest this update: Wed 25 Mar 2026 07:44:39 +0000
Manifest next update: Thu 26 Mar 2026 08:59:39 +0000
Files and hashes: 1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: qQpBaKgpU2OyhewKbPVkuwNVCBHIlbL9zIpO0azsF+M=)
2: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 08:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c1:16:a8:02:89:ce:1e:09:d5:bc:16:3b:2d:b3:49:a8:9a:ff:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Mar 25 07:44:39 2026 GMT
Not After : Mar 26 08:59:39 2026 GMT
Subject: CN=FA4D2E322D7329D82C5C25720A71B1234507AFD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:b6:03:71:99:6f:80:37:d9:2a:87:23:e6:
f6:eb:87:c4:7e:f0:75:30:1e:24:05:85:d6:8e:02:
bd:15:19:2c:f0:e1:b6:ef:f2:7f:69:bf:55:eb:8f:
84:e4:67:ff:80:e8:b7:69:c8:7b:78:27:d3:cc:3d:
e9:d5:df:9d:3b:67:6a:7f:ce:95:4a:64:82:93:2f:
10:c6:84:37:34:01:a4:31:d4:7d:b5:bf:c8:59:c4:
87:1c:14:f2:e2:ac:6d:9d:1c:2b:0c:41:41:ce:5d:
98:75:12:af:7e:dd:7b:52:6d:07:29:5a:d5:60:df:
1d:4b:ad:a5:80:ca:f4:e7:b2:1b:a6:94:b0:d0:7d:
67:da:23:d8:b2:1d:0b:6b:b2:33:4c:02:65:eb:2e:
27:e6:b3:6b:bf:d0:f2:69:a4:a3:7a:b1:ed:4f:62:
e8:79:ab:ed:c4:0c:cc:d1:5d:fd:26:c3:53:d9:d1:
f0:52:f7:88:19:df:21:d5:d5:90:cd:9e:a8:a3:7d:
47:8a:d9:6a:a9:a9:33:b1:1e:88:9b:cf:69:be:6e:
db:91:c0:ee:57:4c:ea:72:49:ca:8f:77:9d:96:39:
03:9e:5f:0d:e0:ef:4b:27:d7:f2:85:cd:1e:f0:0f:
3c:42:73:3d:e7:da:63:c7:59:ce:d5:ed:ae:fa:cc:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4D:2E:32:2D:73:29:D8:2C:5C:25:72:0A:71:B1:23:45:07:AF:D3
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:79:04:c9:28:7e:89:88:1d:00:9f:62:33:fc:1a:27:ac:8b:
76:99:24:19:9a:1f:39:63:4a:39:21:2f:28:50:f5:d4:3e:bb:
d2:ed:1b:e0:a8:a7:4d:27:7c:13:ab:94:08:e0:1f:43:a9:e8:
0a:49:e6:02:e7:f7:45:06:cd:db:43:2e:f8:39:74:52:c4:d9:
b0:80:39:a4:b7:bd:f1:43:17:d5:e4:96:10:4f:e2:69:72:6c:
db:7e:c0:2d:51:5e:9f:d9:b6:2e:2d:6e:42:31:09:40:ab:2b:
c5:8f:63:b0:f0:fa:0e:62:a8:79:d0:63:bb:55:03:1a:55:45:
6e:ce:76:1f:93:2c:38:ac:9b:ef:4e:0d:95:45:0e:47:e3:77:
59:73:dc:9d:a0:5d:6e:b7:c2:71:00:04:67:b9:96:25:fb:94:
68:43:05:c0:65:62:a6:4f:d9:ec:31:bd:20:95:28:72:57:84:
6a:4f:3a:9e:e5:be:be:11:32:32:d5:77:33:ee:9a:93:28:62:
07:18:e8:f1:d5:f9:e4:b5:b0:9f:74:1c:6f:fd:1f:c0:0c:e9:
25:3c:45:35:d3:7d:80:81:29:1a:ac:fd:8e:b4:3b:a3:8a:db:
8c:3b:a1:c1:aa:57:ee:a2:ff:f3:20:6a:e7:d5:50:f0:f8:6b:
90:8d:62:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:13:01 2026 by rpki-client