Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier: PVjWnUX7/gojz00pH0LOoNLjyeYJzIH0eY7oQIrkjUA=
Subject key identifier: A0:84:75:CD:43:67:7F:2B:EC:2E:00:7C:86:45:13:8B:98:C8:B1:05
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer: /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial: 3B34B1E08160808C0AFB52E5C8AD8B97061575B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number: 017F
Signing time: Wed 25 Mar 2026 02:14:41 +0000
Manifest this update: Wed 25 Mar 2026 02:09:41 +0000
Manifest next update: Thu 26 Mar 2026 04:09:41 +0000
Files and hashes: 1: AS215375.asa (hash: e0esF+VqvtsleiiMJnSuBMND1Z/LxmcXfmjsUwN+NLI=)
2: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: RoyVVLcWu7MVxGxN3Xoet94d0Ina13QeM0arLDXVXH8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 04:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:34:b1:e0:81:60:80:8c:0a:fb:52:e5:c8:ad:8b:97:06:15:75:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Validity
Not Before: Mar 25 02:09:41 2026 GMT
Not After : Mar 26 04:09:41 2026 GMT
Subject: CN=A08475CD43677F2BEC2E007C8645138B98C8B105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:fd:f5:1a:ba:37:a9:e8:56:96:76:1c:8b:
07:ae:0a:1a:cd:e3:40:ae:97:aa:f6:57:21:57:f2:
3c:cb:2a:d2:08:b4:3e:ce:9a:f6:9c:71:e2:56:50:
8c:bd:c6:d3:a0:d0:25:52:4e:ea:c4:c3:a2:5b:21:
c7:99:96:4b:b0:63:4a:47:5b:8f:48:d9:59:26:3a:
18:86:79:24:d2:fd:7e:f0:24:25:01:3c:72:28:df:
9a:48:61:a4:e6:2e:95:9d:a9:2a:f0:62:6e:71:43:
8e:77:cc:ae:a0:2e:ec:b7:27:7f:61:3e:c3:6d:11:
2a:f5:36:e4:e0:26:4a:33:00:01:e5:48:fe:81:8b:
b0:cb:63:cd:1a:5b:25:aa:5d:9d:b1:de:e8:d2:44:
80:fc:78:4e:9f:13:a2:b5:73:3f:d8:8f:86:92:a0:
c4:43:55:44:84:90:e1:17:3a:13:af:4f:54:9f:fe:
b1:de:2e:15:70:12:4d:fb:44:b0:5a:fa:24:89:8b:
0f:11:38:f0:62:ba:1f:1f:87:f1:43:8d:c4:a0:da:
dc:cd:c6:4a:e1:7b:e6:b5:d8:5f:7f:36:00:f5:2c:
55:30:63:53:9e:ac:36:f3:4c:6e:d1:bc:60:6a:e1:
b3:89:e4:39:57:e5:6a:4e:14:e3:26:04:a2:52:48:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:84:75:CD:43:67:7F:2B:EC:2E:00:7C:86:45:13:8B:98:C8:B1:05
X509v3 Authority Key Identifier:
keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7c:46:4c:08:eb:bd:5a:b5:f6:53:a7:be:7a:fc:34:32:d9:
34:d3:47:a0:07:7f:6e:6c:61:a1:2a:79:25:87:72:fb:5e:8c:
5e:3d:48:99:cb:2a:3f:52:8d:cc:d1:f1:0f:51:8a:7f:fe:40:
3d:cf:1e:57:3d:d6:52:f3:2e:ef:30:4f:b2:23:fc:7c:92:b3:
ff:2c:04:fd:63:e3:c9:84:b7:7b:8e:90:0f:2b:8e:f1:36:ff:
2b:bb:03:00:5c:9c:ac:5f:12:32:e1:cd:22:d3:ab:9a:c6:e3:
0d:31:83:29:a2:6b:ac:4c:69:6b:1e:53:a2:b3:79:e1:b4:9a:
8f:f4:19:b1:7d:26:fd:eb:11:2a:8a:9c:8d:b6:ce:f6:72:08:
7c:9a:83:bf:93:bc:df:62:1b:98:ab:21:bb:db:28:aa:62:33:
17:01:a6:4c:0f:6d:9c:da:28:2c:13:ea:7b:d9:52:4c:ad:f7:
f3:f5:70:54:c3:61:b1:a4:8b:ac:3f:bd:19:9f:41:a4:38:5f:
3a:fb:d9:84:8c:2d:f4:06:01:3f:d4:24:6d:22:d7:47:0d:5f:
4e:48:ec:9f:b5:e4:3c:0e:ba:bd:cc:3e:45:56:f1:b1:c4:fb:
21:7d:5b:8c:85:49:e3:bb:9e:9a:bc:3d:0e:84:83:17:b1:8f:
8c:23:00:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:46 2026 by rpki-client