Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
File: 1A715D4CFA1F15075FC610EDBB0905220D66929D.mft (raw, json)
Hash identifier: 2LgI82uLePWgAg8WuerUt4ssAp4zMn2gvPkqIhjM2Og=
Subject key identifier: 79:CC:82:D2:7E:CB:96:1C:29:45:2E:90:EB:78:36:BC:2C:61:53:B6
Authority key identifier: 1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D
Certificate issuer: /CN=1a715d4cfa1f15075fc610edbb0905220d66929d
Certificate serial: 0CDDA581DC1E718B67947CBBD9A401AA055EFC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
Manifest number: 011D
Signing time: Wed 25 Mar 2026 20:23:20 +0000
Manifest this update: Wed 25 Mar 2026 20:18:20 +0000
Manifest next update: Thu 26 Mar 2026 22:12:20 +0000
Files and hashes: 1: 1A715D4CFA1F15075FC610EDBB0905220D66929D.crl (hash: Hh+Rx2VTaYWuxtfQMDYvn9YYW/XlijRVjUXrbbtWM6M=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.crl
rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:dd:a5:81:dc:1e:71:8b:67:94:7c:bb:d9:a4:01:aa:05:5e:fc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a715d4cfa1f15075fc610edbb0905220d66929d
Validity
Not Before: Mar 25 20:18:20 2026 GMT
Not After : Mar 26 22:12:20 2026 GMT
Subject: CN=79CC82D27ECB961C29452E90EB7836BC2C6153B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:f6:c8:ea:da:b0:f6:64:46:94:dd:7b:d4:
a0:12:8d:1e:93:b0:34:6c:78:9d:1d:08:c6:63:74:
f7:5b:03:80:92:d0:11:ba:7e:94:6d:fc:96:05:0f:
d4:c4:70:38:2b:75:bb:91:0f:8e:6a:93:2f:a3:56:
ae:45:36:ba:c7:2e:58:99:94:d6:0d:65:a0:d7:9e:
a5:11:be:e4:5e:b9:51:ed:72:d9:9a:b0:98:7d:fa:
7f:7b:d2:87:11:a9:b8:5a:09:1f:de:e4:3a:ca:b3:
1f:4c:ee:6f:73:dc:60:f3:76:a9:de:36:da:06:61:
e0:65:72:f1:41:4a:eb:82:a3:5d:67:d2:e2:c2:80:
3d:c2:ce:50:2e:66:ef:18:2c:96:ab:86:21:de:2a:
6d:dd:61:db:a9:87:a5:1e:79:ae:c6:ab:c2:1d:d4:
ef:a2:64:38:4e:f0:f7:b5:32:b4:32:81:17:b7:3b:
e5:5e:d8:7a:16:65:8a:35:48:3f:39:a5:8f:ec:ab:
c9:29:c6:19:73:64:48:b7:6d:53:5e:9f:86:05:33:
2f:81:28:38:12:c1:a7:50:2a:85:10:fe:ab:2f:c7:
cd:30:1a:68:f1:c1:e2:52:c2:61:78:e5:c1:bb:90:
3f:97:2c:0c:c8:b5:c9:14:51:1b:65:b9:fb:77:4a:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CC:82:D2:7E:CB:96:1C:29:45:2E:90:EB:78:36:BC:2C:61:53:B6
X509v3 Authority Key Identifier:
keyid:1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:29:64:b7:36:46:3d:72:6d:b6:24:ab:34:f5:5f:e2:30:70:
a5:fd:dd:42:17:f8:e9:16:1d:97:7c:b1:5e:aa:76:e0:9b:4e:
82:77:85:a3:27:f0:82:ab:19:fc:e7:d5:ae:b8:c2:f7:35:32:
86:45:97:5c:a8:42:09:aa:ef:56:67:b4:31:33:52:f3:de:63:
ea:62:e7:32:33:2e:59:73:6d:81:5e:e4:ca:71:5c:b2:63:d4:
6b:79:a4:45:2e:41:95:11:98:68:21:c0:56:24:e4:a9:e6:b5:
f3:5d:77:d9:0d:6d:9a:cc:9c:f8:e2:6f:34:8b:6e:b4:f7:bc:
f5:96:e4:17:01:48:de:cd:1a:19:33:a3:09:ff:99:aa:37:79:
c9:6b:a2:dd:04:fb:90:15:0a:28:03:a6:e1:58:aa:7c:58:fa:
1b:e2:d3:dc:86:39:e6:29:48:11:a5:1d:9c:6e:53:ed:a6:50:
ab:1f:9f:3f:3f:4e:24:34:41:e2:50:97:ba:36:ed:0b:fa:d4:
32:7b:87:3a:69:c1:c9:cd:29:81:43:2a:d4:58:27:c7:f2:79:
67:ed:ad:78:71:db:14:0a:ee:35:8d:11:c8:6e:72:dd:bb:14:
21:6b:e2:27:47:c9:15:c3:e6:6c:40:04:60:ae:70:ff:4a:f9:
97:32:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:04 2026 by rpki-client