Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File: 53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier: tDdLWKZ/zaKWtVvXASk4x++2DfDKX3vIKjVMCkdshno=
Subject key identifier: DA:B5:28:DB:C4:0A:8B:2B:8E:67:6A:01:06:27:C2:0C:E1:BB:80:07
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer: /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial: 05F91AA599CAEB31A40B6E5DFD2FE63A8FF0B57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number: 042C
Signing time: Thu 24 Sep 2026 17:07:17 +0000
Manifest this update: Thu 24 Sep 2026 17:02:17 +0000
Manifest next update: Fri 25 Sep 2026 18:14:17 +0000
Files and hashes: 1: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: XrtOevjprSb2wjg/53uuDE4mNQGi6CBukYIHoADGm6I=)
2: AS215171.asa (hash: gdJa6WG2GERDZaDbnz7OAqIN3lLaJy+y5wFkZsKkjzo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f9:1a:a5:99:ca:eb:31:a4:0b:6e:5d:fd:2f:e6:3a:8f:f0:b5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Validity
Not Before: Sep 24 17:02:17 2026 GMT
Not After : Sep 25 18:14:17 2026 GMT
Subject: CN=DAB528DBC40A8B2B8E676A010627C20CE1BB8007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:48:63:86:a4:23:54:9e:04:f8:06:14:77:
85:4c:cb:28:58:80:24:a3:de:2a:5e:6c:ae:cd:a1:
64:91:ce:6b:26:6a:31:e0:c7:3d:15:29:8d:eb:fe:
be:97:38:b1:a1:aa:20:04:f4:3b:0f:f2:e6:d5:d3:
43:33:2a:06:a2:62:dd:60:2b:33:5f:e5:1a:de:1d:
1c:9b:7b:80:28:4c:de:50:d4:e7:22:dd:d8:4f:73:
7d:3e:cd:63:99:28:f3:83:b2:26:fd:75:00:af:00:
56:21:92:eb:ee:98:b2:5f:88:96:56:af:ad:d4:07:
ff:f2:48:e6:8f:14:b4:0d:b5:70:69:1f:4a:c9:f2:
3c:0e:24:74:6b:00:7b:dc:86:ef:82:7f:31:fb:cf:
66:20:da:8c:47:85:1c:e6:4e:14:12:7f:7e:6d:d3:
1e:f3:a3:2b:d3:a1:94:fe:d2:d9:ea:56:bc:4e:bf:
3d:36:a4:b7:83:fb:c9:40:4d:de:b5:6f:23:28:58:
b5:fa:ae:36:c3:a7:23:87:8e:34:db:48:de:81:ba:
e5:fe:a7:5e:e1:00:cf:5a:19:37:36:dc:23:e5:4c:
dd:83:1d:64:02:c9:fc:90:8b:f1:f5:7f:77:fc:c9:
58:21:5d:08:33:87:71:92:33:d8:93:ec:de:28:7b:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B5:28:DB:C4:0A:8B:2B:8E:67:6A:01:06:27:C2:0C:E1:BB:80:07
X509v3 Authority Key Identifier:
keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0a:bb:28:24:84:f7:ab:35:9a:97:56:dd:26:79:5a:0d:11:
35:f4:c9:b3:c3:6e:36:7f:70:20:eb:eb:7c:dc:8e:b6:b0:6e:
0f:8d:1c:2c:ce:a8:65:9c:40:2e:7b:69:b6:60:29:bf:8e:13:
57:ae:e8:ab:ac:4c:d8:b2:6a:9e:c8:97:d5:6d:00:98:ff:e3:
c6:35:3c:6f:16:6a:2f:78:ad:c0:92:15:b5:32:70:76:38:b7:
3b:fe:38:42:b1:a3:19:3a:0a:f6:5d:18:c7:c7:cc:e2:33:c6:
6d:3e:09:c0:83:ab:d7:6f:99:04:a9:2b:ce:ce:b3:bf:fc:49:
21:be:06:87:df:54:10:0f:33:38:b2:17:61:2b:19:47:a1:d8:
59:d4:c3:f4:45:1b:cc:7c:05:e3:3c:69:98:24:d2:71:21:c8:
fc:20:e5:bc:e2:b1:92:4a:af:df:d9:eb:e5:34:44:1f:40:fc:
59:1f:78:a4:45:50:15:9a:b4:e4:32:b5:c1:f1:45:32:b9:e8:
43:09:4c:88:03:8f:dc:9a:03:64:5c:fc:32:ce:d4:6f:62:34:
3b:1f:4c:c2:17:a0:96:18:ff:18:9e:d3:dc:0e:45:ce:7a:cd:
80:36:29:c0:45:46:18:47:8c:e2:0e:94:40:97:f2:ca:a4:f9:
d3:b1:14:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:54:18 2026 by rpki-client