Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: fCO4VE+PfeDYt2tgHz6CdeeA6aKbtcvxls62tFJMO+0=
Subject key identifier: CD:A9:BA:08:E8:44:26:38:C1:15:64:43:BF:92:9F:39:75:F2:CF:F2
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 1B03BB916967701DDC975A7A92DC9E5A8CCFC39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 0429
Signing time: Tue 22 Sep 2026 20:48:27 +0000
Manifest this update: Tue 22 Sep 2026 20:43:27 +0000
Manifest next update: Wed 23 Sep 2026 22:35:27 +0000
Files and hashes: 1: AS215085.asa (hash: H9lDTGKcl0CBBPreEFyuQCs9bvqxSyfGxBz82Rjt5hI=)
2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: usv+sSYYOHqJNWxmnBOfcUVzQJZB/22oV36Mq8q9mu0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:03:bb:91:69:67:70:1d:dc:97:5a:7a:92:dc:9e:5a:8c:cf:c3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Sep 22 20:43:27 2026 GMT
Not After : Sep 23 22:35:27 2026 GMT
Subject: CN=CDA9BA08E8442638C1156443BF929F3975F2CFF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:43:04:3c:ba:7a:12:bf:58:62:50:a0:db:
5d:a8:1e:fa:3e:e9:4d:72:4b:fc:38:4d:c4:2e:e4:
9a:d3:cb:48:41:d0:fc:86:a4:79:c0:d3:5b:6e:df:
55:fd:78:dd:f0:32:9f:d6:e8:c7:0d:d8:24:29:87:
7f:f1:5e:bf:c1:5e:9a:87:98:43:49:2b:3f:42:50:
be:a1:85:86:79:ad:89:f0:14:e0:d8:0b:ab:70:cc:
ef:5c:e0:a5:85:85:6e:6e:12:d2:35:96:b8:f5:2d:
66:f3:fd:10:6b:3d:bd:d7:9c:d2:0a:ff:a3:4d:20:
8d:fc:ab:91:49:d9:1c:cf:31:e1:b7:71:90:7d:ec:
04:06:05:12:5a:f0:93:68:f3:4c:93:db:52:5c:e9:
88:0a:f6:14:ff:74:fb:20:a8:7c:1b:97:42:2f:62:
43:4d:79:b6:d8:f8:dd:4a:af:67:87:7c:c3:c8:ca:
b7:93:ab:30:f6:bf:69:b6:65:3e:c4:3c:19:93:d2:
ac:cf:3f:ac:ab:97:e1:2c:0f:53:b1:ab:32:7e:8d:
a1:69:9a:20:6d:4d:e7:da:4b:68:8f:69:af:56:bf:
2e:f2:31:37:73:df:21:1e:a4:51:7b:0d:e9:c6:98:
82:67:d8:45:4a:e1:74:ef:d9:96:25:6b:f8:e0:73:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:BA:08:E8:44:26:38:C1:15:64:43:BF:92:9F:39:75:F2:CF:F2
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d5:dc:ad:c5:89:fd:49:18:1d:16:5a:8b:62:0c:05:66:f8:
7a:0b:bb:c5:cc:99:09:04:cf:de:8c:be:1f:5a:de:52:dd:33:
08:d8:ce:5c:88:8d:d3:b1:5d:0a:3e:f7:e9:36:a0:2f:66:ca:
35:48:d8:63:3c:27:06:b1:d1:66:d4:b4:fd:75:ad:30:de:76:
62:c3:61:68:a9:f4:3d:a8:80:d6:22:a8:11:45:06:54:ac:ac:
00:9c:05:6f:d8:e3:ff:a9:10:d9:a5:86:13:e3:2c:8b:f9:9b:
68:65:68:0f:a6:0d:6f:6c:4d:c4:7f:47:74:f1:98:19:c6:4b:
d4:68:b0:1c:79:ff:8e:db:34:f5:30:01:8e:6a:22:32:d8:97:
49:33:be:c2:e5:5d:e9:8b:3f:11:33:62:40:f6:49:63:c5:3e:
ac:0a:1a:7f:c7:9e:a9:1a:04:85:57:49:32:27:35:48:19:83:
20:f0:bc:fb:d2:de:8e:d2:99:30:1d:d9:6c:48:8a:77:de:f7:
37:0a:c7:cb:e5:50:86:36:9a:03:ae:d4:71:c6:f9:27:2a:eb:
16:63:55:9a:5e:a1:64:42:d5:20:e1:55:8d:25:3e:ba:a5:3b:
dc:a0:1e:ee:a3:4e:5f:50:5f:32:9a:08:60:28:bf:2f:05:26:
4d:38:52:a2
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGwO7kWlncB3cl1p6ktyeWozPw50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGFiN2UyMGJlYTVjY2I4NGY4MjZjNjRkYTE3NTdkMWRm
NWI2ZmY2MjAeFw0yNjA5MjIyMDQzMjdaFw0yNjA5MjMyMjM1MjdaMDMxMTAvBgNV
BAMTKENEQTlCQTA4RTg0NDI2MzhDMTE1NjQ0M0JGOTI5RjM5NzVGMkNGRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+kMEPLp6Er9YYlCg212oHvo+
6U1yS/w4TcQu5JrTy0hB0PyGpHnA01tu31X9eN3wMp/W6McN2CQph3/xXr/BXpqH
mENJKz9CUL6hhYZ5rYnwFODYC6twzO9c4KWFhW5uEtI1lrj1LWbz/RBrPb3XnNIK
/6NNII38q5FJ2RzPMeG3cZB97AQGBRJa8JNo80yT21Jc6YgK9hT/dPsgqHwbl0Iv
YkNNebbY+N1Kr2eHfMPIyreTqzD2v2m2ZT7EPBmT0qzPP6yrl+EsD1OxqzJ+jaFp
miBtTefaS2iPaa9Wvy7yMTdz3yEepFF7DenGmIJn2EVK4XTv2ZYla/jgc9HRAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUzam6COhEJjjBFWRDv5KfOXXyz/IwHwYDVR0j
BBgwFoAU2rfiC+pcy4T4JsZNoXV9HfW2/2IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2
YWJmLzAvREFCN0UyMEJFQTVDQ0I4NEY4MjZDNjREQTE3NTdEMURGNUI2RkY2Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJyZmlDLXBjeTRUNEpzWk5vWFY5SGZX
Ml8ySS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03
ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMC9EQUI3RTIwQkVBNUNDQjg0Rjgy
NkM2NERBMTc1N0QxREY1QjZGRjYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdXcrcWJ/UkYHRZai2IM
BWb4egu7xcyZCQTP3oy+H1reUt0zCNjOXIiN07FdCj736TagL2bKNUjYYzwnBrHR
ZtS0/XWtMN52YsNhaKn0PaiA1iKoEUUGVKysAJwFb9jj/6kQ2aWGE+Msi/mbaGVo
D6YNb2xNxH9HdPGYGcZL1GiwHHn/jts09TABjmoiMtiXSTO+wuVd6Ys/ETNiQPZJ
Y8U+rAoaf8eeqRoEhVdJMic1SBmDIPC8+9LejtKZMB3ZbEiKd973NwrHy+VQhjaa
A67Uccb5JyrrFmNVml6hZELVIOFVjSU+uqU73KAe7qNOX1BfMpoIYCi/LwUmTThS
og==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:37 2026 by rpki-client