Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: NFxT7c7+OJy8VdEtUBKz4T0ShSbi+RsGyD8X5dTn1ds=
Subject key identifier: C6:AD:02:33:95:1C:C5:49:44:6B:21:16:EA:CA:5D:B6:63:B9:E2:0F
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 7260A7970FD9F3F706CD01748BF8DF0C290A91C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 0314
Signing time: Thu 26 Mar 2026 00:09:56 +0000
Manifest this update: Thu 26 Mar 2026 00:04:56 +0000
Manifest next update: Fri 27 Mar 2026 03:49:56 +0000
Files and hashes: 1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: tdohexoarsrsAJmnsYaMslrBPXlnEB9mZtu1qn6oKWo=)
2: AS215085.asa (hash: 5dFoAEB7HJFuEx1H1zqtHsVw/vCbtLiCdGIs1mPf9Xs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:60:a7:97:0f:d9:f3:f7:06:cd:01:74:8b:f8:df:0c:29:0a:91:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Mar 26 00:04:56 2026 GMT
Not After : Mar 27 03:49:56 2026 GMT
Subject: CN=C6AD0233951CC549446B2116EACA5DB663B9E20F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:ff:ff:4d:67:74:e6:9c:77:cd:fc:ba:c8:
55:5a:fa:13:9c:d9:42:6c:be:78:f4:7c:5d:88:4d:
a5:a4:10:ec:fe:3a:76:fe:79:55:a7:d7:35:e6:73:
7c:7d:4d:1c:ee:83:41:0d:95:aa:61:3a:f6:ad:38:
c9:8d:2e:90:6c:1a:e4:55:9a:b0:63:77:8d:1a:75:
1f:95:49:7f:d2:45:69:84:c7:00:da:b5:4d:28:94:
79:5b:41:61:80:2e:2f:6b:66:32:5a:ad:c6:92:20:
23:04:b7:b1:e6:fa:dd:e7:59:e2:1b:9b:cd:ce:a4:
bb:e7:4b:02:2c:49:71:83:8a:24:12:a4:8d:0c:fe:
3c:d3:a4:f4:84:7c:9b:cc:1a:a7:6c:9c:65:ef:f5:
da:18:7c:e8:13:5a:f4:e3:bc:55:d6:32:1e:18:b1:
b0:a5:84:10:18:da:b0:2a:73:c9:e6:aa:f9:87:81:
23:47:65:b3:58:12:21:19:0e:48:a5:40:69:30:13:
65:b0:ab:ed:a4:fe:3a:37:2d:6c:55:08:dd:29:36:
00:5d:6b:34:c7:5a:66:c0:9f:1b:cc:b1:18:44:27:
de:0f:46:9f:ed:7d:a2:18:4a:a7:52:e0:20:a6:4e:
22:44:c8:61:36:1b:b2:b7:f3:d7:01:19:66:da:3a:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AD:02:33:95:1C:C5:49:44:6B:21:16:EA:CA:5D:B6:63:B9:E2:0F
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4d:a9:cd:7e:58:b8:39:93:f9:a7:73:df:f8:96:63:a8:4b:
a6:d1:db:9e:6f:bd:4d:62:18:9c:4f:4f:fd:30:1a:33:d8:06:
f9:7f:28:29:6d:eb:8f:c4:2c:e4:76:7c:67:5e:78:45:a9:e2:
5d:e3:f8:67:4f:f7:7d:fc:bf:22:42:45:d2:ec:21:11:cf:45:
8d:e8:7d:cd:05:c0:57:db:2b:e6:20:3d:c9:44:2f:a8:b3:de:
d2:3c:13:83:20:a7:5e:ff:44:d1:25:4b:e5:42:e1:8d:4a:96:
72:40:6c:dc:54:48:98:32:ed:ff:23:6a:4c:21:91:5d:a8:53:
0a:27:58:cb:15:fd:4e:04:5f:c2:5c:11:dc:b8:51:10:10:e4:
60:ba:8e:61:f3:18:09:3a:46:e2:bc:cb:ec:8d:23:bc:7f:64:
fe:86:5b:c0:28:12:5c:c3:ee:9d:2e:70:d2:7d:38:18:09:b2:
54:26:20:e4:5c:64:54:23:fb:3c:21:c4:2c:e2:b2:46:58:b5:
06:36:54:66:bd:94:07:3a:6d:0d:a0:b6:1c:26:f5:b2:48:53:
88:4c:61:9c:4f:35:b7:10:17:93:57:b1:64:40:6b:8c:46:f7:
08:09:15:06:0e:9e:97:9d:79:a6:84:1a:d3:1a:96:3b:c0:61:
3b:c3:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:51:50 2026 by rpki-client