Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File: A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier: iR2kp/xVO9zheV57V9pg1FYpzZ5RWcxy3yqiEmA4HF4=
Subject key identifier: A6:7F:5A:70:F4:59:A3:57:41:B2:F1:7E:62:BB:EB:6B:16:97:10:27
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer: /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial: 26F317702E7E7FFFFA8DA55B55DF48B48C6D1B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number: 06AC
Signing time: Wed 25 Mar 2026 19:57:24 +0000
Manifest this update: Wed 25 Mar 2026 19:52:24 +0000
Manifest next update: Thu 26 Mar 2026 23:08:24 +0000
Files and hashes: 1: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
2: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: F+RuFmWDvVyfXb8NlhOhT5GtHs8sZlKTGDH+HcYGu7M=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f3:17:70:2e:7e:7f:ff:fa:8d:a5:5b:55:df:48:b4:8c:6d:1b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Validity
Not Before: Mar 25 19:52:24 2026 GMT
Not After : Mar 26 23:08:24 2026 GMT
Subject: CN=A67F5A70F459A35741B2F17E62BBEB6B16971027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:0e:0a:58:92:77:6e:00:28:bf:cd:62:31:
7c:0f:26:d0:65:65:be:b3:a6:71:c2:35:37:2e:ae:
7a:20:43:18:88:57:0e:f1:cf:42:e9:9f:77:dc:69:
bf:85:99:02:a8:0b:b1:57:77:0d:d9:d7:7f:2a:ca:
8f:f9:03:a0:e6:8d:75:41:22:a1:d5:c9:ea:fd:bd:
2b:92:39:f3:8e:b7:9e:2e:a6:07:b9:89:b4:c0:7d:
d6:11:f0:1f:b7:33:c9:10:d5:ae:05:4c:bc:20:23:
96:1c:93:8b:bb:18:e9:f3:4d:91:e4:2f:3a:ef:e5:
ef:ec:9e:ac:44:4a:c7:76:bb:d7:ce:d4:12:78:54:
b4:89:cf:ee:6f:cd:cb:5e:e4:98:90:61:08:68:94:
a4:0a:ff:fc:7f:d5:be:11:78:c2:4f:bb:eb:0c:4d:
d0:51:ee:97:6a:08:38:9c:08:9d:21:00:16:15:9c:
e8:b3:01:2a:81:01:36:bf:1a:52:b4:1a:ba:c0:72:
18:81:e4:1e:06:a1:67:c5:bb:27:59:74:50:de:03:
5c:95:22:7e:8a:c6:1e:23:07:75:37:c8:cc:fc:1f:
8f:33:c5:84:ec:08:ec:e0:e4:9b:b6:c1:90:fc:a5:
b3:dc:66:90:1f:4e:dd:7d:b8:ba:17:03:55:15:88:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7F:5A:70:F4:59:A3:57:41:B2:F1:7E:62:BB:EB:6B:16:97:10:27
X509v3 Authority Key Identifier:
keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5e:6f:4d:a6:9a:0f:32:d2:d6:c3:5e:56:15:b6:b9:2e:01:
9c:87:42:a6:3e:c7:c8:aa:c7:98:74:c0:d7:7a:ce:6e:8c:bd:
a7:38:92:22:8f:4c:fe:d2:2f:62:43:6f:df:9b:88:f6:10:e2:
49:33:82:72:8a:3f:1c:a7:69:79:77:35:32:cf:f4:e3:6f:0d:
5c:75:ee:3e:bd:45:b4:d4:6b:da:1e:65:0b:98:b6:0f:d5:37:
f1:6a:39:02:eb:a7:4b:3c:1b:68:12:fb:1f:82:de:54:f6:51:
dd:63:de:f5:12:50:9c:d5:44:be:24:fb:74:63:88:1a:59:38:
92:7a:df:51:84:11:d4:5d:76:71:37:ef:74:bf:77:d5:46:23:
09:89:ef:36:db:22:a5:3b:18:ac:dd:f6:a3:25:d6:df:27:12:
0b:e3:28:70:13:9f:41:30:8d:3d:41:4b:b4:8c:c8:99:4e:35:
7b:82:88:21:61:75:88:96:bd:03:fa:1c:dd:ee:9c:c5:93:2e:
b3:15:9c:11:3a:5b:12:44:ff:ba:43:cf:44:cd:04:67:a8:ef:
70:75:3b:ae:b7:b5:e6:68:46:35:b8:c3:2b:c7:03:0b:f3:8c:
85:c5:3c:74:3d:53:29:db:fa:f6:75:7e:e5:24:28:76:e3:7f:
a8:3d:0a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:13 2026 by rpki-client