
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File: 53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier: wvJhmn5C3l/tbjDnuBssCjz7lXz924cJfS7gnIqzNlM=
Subject key identifier: 01:CD:5F:C2:01:62:7A:CC:06:AF:E6:FE:3F:FC:B5:AA:11:3B:B1:4A
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer: /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial: 6580365FA6AE6E8F3D2417E10A5F9CC7A0D401EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number: 0377
Signing time: Tue 12 May 2026 18:20:15 +0000
Manifest this update: Tue 12 May 2026 18:15:15 +0000
Manifest next update: Wed 13 May 2026 19:33:15 +0000
Files and hashes: 1: AS215171.asa (hash: gdJa6WG2GERDZaDbnz7OAqIN3lLaJy+y5wFkZsKkjzo=)
2: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: Uy71kdifO7zXiQF72Xs4/NQvpl8r4r+lpJC25x1x2Pc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:80:36:5f:a6:ae:6e:8f:3d:24:17:e1:0a:5f:9c:c7:a0:d4:01:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Validity
Not Before: May 12 18:15:15 2026 GMT
Not After : May 13 19:33:15 2026 GMT
Subject: CN=01CD5FC201627ACC06AFE6FE3FFCB5AA113BB14A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:60:f2:0c:16:b8:04:2f:21:6b:ef:ad:40:
23:53:0d:f5:83:d5:a2:7f:ba:ab:4d:60:8e:2f:09:
c0:53:64:28:e3:4c:8d:27:5b:4b:d6:97:31:87:3e:
88:b9:4a:81:6e:4e:07:97:9f:76:5e:ae:c0:30:53:
20:63:25:65:1e:1e:6b:57:d7:3b:89:53:53:c8:ed:
b1:a0:65:d8:30:23:45:ad:6c:62:68:14:d5:d4:5d:
11:11:72:9d:a4:12:ac:59:c7:5a:cc:2a:a7:92:07:
94:b6:17:9d:5f:2b:c4:bd:72:cc:ba:75:85:e3:9b:
8d:bc:fb:e5:e7:2c:ac:ed:eb:08:75:b6:13:00:5a:
ae:2a:31:a0:56:fd:2f:b6:6e:31:c4:99:10:1b:a2:
6e:f5:02:90:5a:59:63:38:f2:6e:e4:54:13:76:11:
fb:12:f4:98:aa:0c:99:a0:67:9b:a6:59:65:e9:3f:
1d:58:e1:0b:76:7f:03:ef:5f:52:74:f4:31:23:c8:
68:d7:77:55:07:73:db:3c:7f:48:0f:b1:bd:97:3b:
50:0c:23:6b:26:b0:f2:ef:3a:5c:4e:d6:7f:0f:fa:
12:3c:f7:62:db:d7:0b:09:d3:c8:4f:35:28:4e:c9:
87:90:97:16:ff:26:0c:a0:8c:70:5b:99:98:42:20:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CD:5F:C2:01:62:7A:CC:06:AF:E6:FE:3F:FC:B5:AA:11:3B:B1:4A
X509v3 Authority Key Identifier:
keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:89:1e:8e:29:60:40:e8:9a:41:81:78:f3:1a:51:51:9b:07:
51:40:52:c6:d1:61:79:ff:43:67:f1:bd:75:b4:08:b0:25:e7:
76:48:d5:dc:6f:97:96:80:56:1b:f3:74:9c:1c:d5:99:19:b3:
00:ac:95:6e:e3:bc:dc:9c:60:61:b7:13:c3:ef:43:62:7f:6c:
d2:05:81:99:59:f4:4e:26:06:db:99:3f:af:89:d4:bd:cd:68:
c5:16:70:87:53:e5:4c:97:63:64:5b:bd:52:c2:b7:15:27:d1:
6e:6f:40:86:15:90:a1:93:f7:4a:5e:8c:05:c6:00:58:e4:91:
78:a6:81:97:f5:d2:8c:27:c6:8b:90:c6:b3:d3:d6:9a:10:0b:
d5:34:50:cd:87:b4:12:4c:86:39:97:f3:6a:9d:08:50:7d:40:
7d:1a:14:da:86:4b:88:bc:b6:13:f3:31:f8:6d:ae:3a:ef:89:
25:4c:0e:b3:64:a3:3e:71:e0:5c:3a:b0:6e:25:11:a0:21:5b:
80:d9:26:84:0f:f7:95:cb:bd:09:9b:66:33:da:1a:1e:2f:b9:
3d:5a:aa:0b:da:c8:0b:5e:57:7d:dc:93:58:7e:2f:69:3e:5c:
f8:e9:26:01:ee:15:6c:98:8c:34:4d:d4:bd:84:e7:06:7c:49:
79:1a:6f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:58 2026 by rpki-client