Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File: 53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier: Oy/uCQ2OKWPDj42yVoWs0PzCldVC+1UxzGs+Uj1iJYo=
Subject key identifier: 2D:AD:95:A4:29:E7:FC:13:D0:44:06:00:11:08:52:13:E1:2A:54:73
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer: /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial: 227153215DC5ABE824ACB0BC35EF265279CBCAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number: 0339
Signing time: Sat 28 Mar 2026 08:08:16 +0000
Manifest this update: Sat 28 Mar 2026 08:03:16 +0000
Manifest next update: Sun 29 Mar 2026 10:12:16 +0000
Files and hashes: 1: AS215171.asa (hash: gdJa6WG2GERDZaDbnz7OAqIN3lLaJy+y5wFkZsKkjzo=)
2: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: xqdQziSh9EhonmdjSNhkKGap2OKjXhCsR7TwLoOc4+c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:71:53:21:5d:c5:ab:e8:24:ac:b0:bc:35:ef:26:52:79:cb:ca:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Validity
Not Before: Mar 28 08:03:16 2026 GMT
Not After : Mar 29 10:12:16 2026 GMT
Subject: CN=2DAD95A429E7FC13D044060011085213E12A5473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:6b:f5:7e:06:aa:bf:5a:2d:d6:c2:f0:41:
35:6f:b3:f3:14:f2:a8:7f:4f:3e:c7:27:96:22:78:
04:80:ee:18:b5:ca:3f:a0:0e:55:86:dc:0f:fc:4c:
44:e2:d7:09:31:d7:59:e5:1e:dc:86:df:c5:f8:6e:
3a:41:54:76:aa:ca:2a:9f:49:e2:92:35:14:46:2c:
31:1c:7d:39:bb:b0:d6:8f:86:5a:22:de:0c:3f:c2:
78:43:67:72:bd:69:53:39:34:23:fb:2b:4d:f6:6e:
3f:e1:20:88:dc:4f:ae:9e:5c:ad:54:98:1f:a3:62:
2d:a4:e0:70:6d:84:95:98:98:f5:f4:18:22:b4:8e:
46:b4:97:22:c0:32:f2:91:15:51:89:cd:07:60:e2:
eb:e0:3e:5b:f7:84:b8:a5:89:c1:a6:9c:2b:9a:2b:
2b:1d:1d:47:79:bd:f2:51:b0:49:e0:f5:3d:43:a0:
e6:3c:ef:4e:22:0d:cf:98:42:7c:17:8b:ac:3a:17:
eb:ad:c4:51:f3:7f:80:4f:a4:36:bc:0c:ee:79:09:
35:32:a6:74:c8:ec:33:e1:d6:bc:5f:c0:d4:28:b1:
77:b6:07:b5:57:e8:5c:35:2d:9a:32:d9:44:74:60:
9a:3d:4c:a3:4b:e3:3c:ba:c7:54:ab:4f:65:65:a1:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AD:95:A4:29:E7:FC:13:D0:44:06:00:11:08:52:13:E1:2A:54:73
X509v3 Authority Key Identifier:
keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:46:31:4c:25:69:8c:65:ff:b2:42:02:0b:dd:17:be:a3:a4:
d5:19:56:03:6c:df:d1:cc:7a:05:bb:5a:1a:c6:fd:4f:2c:3a:
e7:d0:1e:35:58:3d:1f:aa:d2:56:e9:6b:46:cf:87:b7:27:0b:
91:de:97:08:44:36:97:92:df:c2:4b:a8:f9:23:d6:c6:5c:76:
93:79:6b:ca:a7:11:34:49:39:46:41:6c:1a:37:c3:df:30:e0:
fd:5d:0d:f1:88:4d:3a:30:3c:13:be:4c:89:d7:47:b0:88:4c:
c7:fa:f0:3e:b6:65:84:fc:09:1e:74:fc:5a:1b:9f:41:bc:9b:
9f:8a:5b:80:f2:62:d6:f7:c7:88:ef:ea:e7:cb:95:62:d4:e8:
97:d0:45:ea:00:d2:ad:f6:ca:a9:78:4d:97:57:1c:f8:57:f8:
e2:db:0a:89:6b:9f:4c:c3:26:05:ec:1a:99:e6:78:60:cb:04:
65:0c:1f:35:e0:3a:c0:83:28:dc:2f:f0:65:ce:bc:c9:ed:13:
d5:07:a2:93:c5:1f:b8:d3:13:c8:83:90:65:92:d5:23:4b:eb:
c2:1c:f8:bb:60:39:90:6a:31:02:3c:0a:dd:c8:7e:9d:9c:e6:
17:3c:96:b3:5c:96:74:e0:af:93:66:14:58:c3:84:19:34:a0:
57:e9:09:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:46 2026 by rpki-client