Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: +6H7XLNHVU647Yvgx572E5CkPzXDk+9MvWwcToUU8iA=
Subject key identifier: 33:10:61:75:59:57:AF:B4:B3:E9:B5:F2:58:91:1F:02:95:BD:56:38
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 12AE3340C4D8A7F4829DBB05E96AB56BAB93FE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 03C7
Signing time: Thu 23 Jul 2026 06:34:43 +0000
Manifest this update: Thu 23 Jul 2026 06:29:43 +0000
Manifest next update: Fri 24 Jul 2026 08:58:43 +0000
Files and hashes: 1: AS215085.asa (hash: U3O4zRuQeb7MG2IwgLoOGYNSGnZPEXOar9EBCzjvh3o=)
2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: bWOYmvRWuZmaXKPMbYdWA0B8VDhPMYPCKhps8Hjhb28=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 08:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ae:33:40:c4:d8:a7:f4:82:9d:bb:05:e9:6a:b5:6b:ab:93:fe:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Jul 23 06:29:43 2026 GMT
Not After : Jul 24 08:58:43 2026 GMT
Subject: CN=331061755957AFB4B3E9B5F258911F0295BD5638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:0a:c3:44:84:5d:6a:ea:f4:c8:a0:9a:58:
bc:de:7c:f4:ce:16:21:28:08:3a:32:f7:80:dc:1d:
47:a0:11:6b:a0:8c:cb:f6:09:ed:e5:5e:55:5f:01:
9b:72:65:37:6b:4b:20:6f:59:60:16:04:63:a6:8a:
f6:9a:ef:d3:3a:ca:8e:19:2a:62:5f:ba:4c:4b:bb:
3d:92:4d:5f:46:e1:b0:64:91:ff:2d:0c:7f:4f:db:
e9:d0:79:42:8d:30:73:a2:b2:ca:99:46:ff:4e:b6:
da:ed:f8:e1:bd:ae:95:bd:5f:33:e8:8e:b5:32:8a:
ec:91:52:a6:14:c2:43:ed:26:a5:81:5c:27:53:b6:
d8:90:8d:44:74:8a:57:7c:6e:26:05:5d:ca:99:a3:
36:11:31:6a:3c:27:41:0e:22:5d:89:12:27:ec:66:
70:67:7a:82:cf:32:13:24:0b:9b:26:b4:26:34:d6:
5c:de:c8:34:c4:39:45:e1:06:65:ce:06:08:65:1b:
09:33:29:c0:8f:e4:12:30:0d:2e:6e:07:81:93:ec:
d2:f1:b5:ba:98:c8:69:cd:25:94:e8:eb:eb:a4:49:
2b:9d:ef:af:fa:7d:09:48:d0:92:a1:05:13:97:7b:
bc:5e:84:6c:39:2d:b5:17:3f:8c:53:9e:71:17:89:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:10:61:75:59:57:AF:B4:B3:E9:B5:F2:58:91:1F:02:95:BD:56:38
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2c:7e:6d:36:32:3d:c4:41:08:5b:78:72:d5:f1:68:31:6a:
a9:af:cf:41:78:a5:18:32:dd:90:d6:e6:12:1a:96:f8:0f:db:
6f:76:de:93:53:27:98:87:d1:3f:63:23:cd:89:b5:04:37:8c:
6d:bf:dd:18:b8:06:74:b2:ac:1d:a0:a3:7b:a9:6d:11:9a:96:
55:67:5d:a3:89:90:b2:ec:70:f2:f4:6f:0d:1d:f4:44:ee:68:
a2:a6:80:39:e2:75:0f:d0:89:1e:3b:71:fc:64:af:7b:e9:ed:
1b:81:11:da:27:09:05:55:67:36:2f:50:e0:39:8b:b8:ff:fb:
f0:55:ca:df:e5:f8:aa:10:11:0b:2a:e4:43:86:fb:95:a1:4e:
e9:f3:b4:1e:32:53:65:9a:36:d1:a8:5b:d5:70:55:26:46:8a:
91:1f:b4:35:b8:97:bd:09:c4:ed:d7:b9:dc:c0:b5:06:a8:4d:
08:a6:54:58:ca:99:bf:fc:f9:06:0b:d1:0b:77:d4:b9:d1:c4:
b4:e9:c2:93:7d:72:a4:c1:a0:96:a2:68:98:19:14:39:bd:e3:
91:b6:29:34:e2:0b:28:1e:7c:8a:d0:0d:e2:87:86:3c:0c:08:
43:e3:e4:cf:d5:ce:c0:bb:fd:88:65:fb:a7:d4:7b:55:8a:26:
44:a2:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:51 2026 by rpki-client