Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File: 53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier: 6TyI2iK3nRvgKX4uXgJMusOekug/cjgXGMlFf6NQkz4=
Subject key identifier: 01:B7:34:9A:27:17:6E:D1:A5:9B:25:B3:8E:56:CC:38:AF:29:11:6C
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer: /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial: 6334A559B90AAD53BD816AD57DA132F964603AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number: 03D7
Signing time: Thu 23 Jul 2026 19:22:17 +0000
Manifest this update: Thu 23 Jul 2026 19:17:17 +0000
Manifest next update: Fri 24 Jul 2026 21:47:17 +0000
Files and hashes: 1: AS215171.asa (hash: gdJa6WG2GERDZaDbnz7OAqIN3lLaJy+y5wFkZsKkjzo=)
2: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: 0FCwq4lMnwp/LqTemqYm383qEoU+5ejpT2fftMyXFWE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:34:a5:59:b9:0a:ad:53:bd:81:6a:d5:7d:a1:32:f9:64:60:3a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Validity
Not Before: Jul 23 19:17:17 2026 GMT
Not After : Jul 24 21:47:17 2026 GMT
Subject: CN=01B7349A27176ED1A59B25B38E56CC38AF29116C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:71:42:39:fc:eb:3c:03:3a:b9:59:a0:b0:
e2:11:93:45:a0:f7:ba:4e:3f:44:77:f2:7b:16:6f:
06:16:71:08:d5:20:68:b5:6a:98:2e:9a:b1:5a:41:
b2:ff:90:12:76:1a:6a:58:70:51:f7:bc:6d:c2:36:
de:5f:fc:04:fd:d8:cc:b2:6f:b3:66:4f:0f:bf:b8:
56:ec:b9:ed:f6:94:c8:b4:ae:98:4a:e8:aa:07:91:
38:1b:df:55:88:c3:c3:1d:31:67:5d:eb:90:e6:b9:
2a:58:83:3d:b5:a5:58:51:3b:59:08:88:da:53:b6:
91:55:83:78:60:c3:34:f2:b7:28:a0:5c:d3:1c:3a:
2a:ae:a2:68:30:7f:ff:17:74:2d:8a:36:00:78:32:
ab:68:71:d5:f2:b3:75:2a:09:61:b1:99:30:a4:40:
81:59:ee:10:d3:11:f4:fa:06:5e:f4:55:15:ce:3d:
20:f7:ed:37:9a:47:77:1e:d8:16:64:37:e5:c1:d2:
34:db:26:3e:99:ef:74:ab:35:5a:7f:ab:e5:e6:fe:
0e:60:33:43:8c:ba:86:af:da:3b:e7:6a:6a:a8:02:
05:74:72:e4:5c:13:8a:8f:10:18:72:c2:ad:72:00:
c8:69:33:29:c2:33:da:1f:e1:9b:c3:c0:3d:63:72:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B7:34:9A:27:17:6E:D1:A5:9B:25:B3:8E:56:CC:38:AF:29:11:6C
X509v3 Authority Key Identifier:
keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:06:7c:37:13:bc:37:39:64:b6:df:63:7a:92:69:71:95:d3:
29:9f:e0:d8:62:fe:61:13:db:72:90:89:24:c0:d2:49:94:30:
a8:9b:b5:30:f5:16:52:f4:09:5c:8e:b0:86:77:26:8d:85:16:
24:f6:e2:42:4b:91:63:fc:fe:ab:9a:50:02:3f:2d:2a:f3:4f:
28:ca:9f:8c:4c:7d:56:3b:81:07:3e:61:26:48:a8:50:74:52:
5e:de:ce:b7:1f:50:97:64:ba:5d:2f:05:f8:fe:f9:33:23:69:
10:bb:2c:b3:3f:78:d6:aa:b5:7d:f5:a9:96:51:9e:5f:df:70:
a7:00:88:a4:95:94:21:1b:28:7f:8c:07:ba:d2:3a:15:4c:32:
07:38:47:07:9d:c3:64:35:da:4f:94:e8:3e:90:7f:4a:8b:72:
79:13:d9:34:73:67:1d:9d:76:57:d0:b2:5a:bd:ca:f8:6b:2c:
e3:2c:f7:a6:f9:3a:b3:13:b5:49:91:89:26:7e:37:b0:5c:bd:
4b:67:8e:ed:c4:25:d9:27:d2:20:d5:96:73:5d:50:51:8e:4c:
32:9a:c3:c2:fb:c8:7a:5e:ad:29:4b:fe:e2:5d:20:b9:1f:c5:
1e:25:c7:b2:63:83:81:50:52:87:6c:2f:d2:6a:1b:66:6b:27:
99:39:1b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:20 2026 by rpki-client