Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
File: 3491246EC3E1BE5219E15F1079BB12148609075C.mft (raw, json)
Hash identifier: rnPRn47MfqDY1jUP9ttzJzZEqaK6gJ43647i8MQVM7o=
Subject key identifier: 75:FA:06:49:4B:69:F7:AC:90:51:D6:B9:E3:E6:6B:29:CB:4E:2C:CB
Authority key identifier: 34:91:24:6E:C3:E1:BE:52:19:E1:5F:10:79:BB:12:14:86:09:07:5C
Certificate issuer: /CN=3491246ec3e1be5219e15f1079bb12148609075c
Certificate serial: 1061E3D2B2B9989B0E97050007AB334CDB4E9063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJEkbsPhvlIZ4V8QebsSFIYJB1w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
Manifest number: 2F
Signing time: Fri 25 Sep 2026 13:06:55 +0000
Manifest this update: Fri 25 Sep 2026 13:01:55 +0000
Manifest next update: Sat 26 Sep 2026 14:13:55 +0000
Files and hashes: 1: 3491246EC3E1BE5219E15F1079BB12148609075C.crl (hash: vbP2jBprdt54NZz4+MkUaKmZ4CuElXPxR+ykuiNyuaM=)
2: AS219157.asa (hash: W0SNHyIdOBlk/PqFSsz1uEHMFtmzaSHOyyOQWUgxKu4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJEkbsPhvlIZ4V8QebsSFIYJB1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:61:e3:d2:b2:b9:98:9b:0e:97:05:00:07:ab:33:4c:db:4e:90:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3491246ec3e1be5219e15f1079bb12148609075c
Validity
Not Before: Sep 25 13:01:55 2026 GMT
Not After : Sep 26 14:13:55 2026 GMT
Subject: CN=75FA06494B69F7AC9051D6B9E3E66B29CB4E2CCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:c4:76:f3:a9:ea:c8:a8:5b:69:60:8f:0e:
ff:e4:80:98:0c:95:b9:1a:4f:e7:10:8e:b5:22:ac:
ab:c4:97:07:e6:5d:4d:db:d4:b5:b0:3a:e9:31:14:
6a:a7:26:53:50:73:c3:ad:95:d2:e3:b6:dd:f1:5f:
d7:cc:54:8f:af:5d:d7:fd:b2:f0:77:38:db:4e:a5:
da:99:4e:e2:a9:1d:26:a5:52:6d:42:a9:54:22:8c:
9b:9d:b5:28:9f:9e:dc:90:00:f9:a7:56:55:92:f8:
62:ea:7d:4a:a3:38:63:83:20:88:08:86:00:98:93:
e0:22:10:98:70:19:c0:ac:61:3c:da:73:9a:22:cd:
41:60:c2:7a:bd:b6:ef:d5:1a:27:3e:1f:5b:ed:3d:
73:02:1d:32:59:9a:b5:44:00:18:82:c5:af:67:b8:
6b:23:dd:2b:4f:48:49:78:a8:82:2b:eb:37:c9:b1:
eb:37:ef:70:c6:ea:77:fe:b3:3c:c6:a3:e1:79:ce:
c4:41:12:55:db:a4:de:b1:68:5f:74:3e:b3:cb:1a:
f4:d5:ab:f5:32:6b:47:34:10:03:04:0a:5f:37:70:
e5:62:39:0e:0e:da:0a:95:cf:9f:57:0e:f7:59:d6:
23:b6:65:d1:fc:95:7a:0c:db:1f:b3:d8:a8:2f:94:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FA:06:49:4B:69:F7:AC:90:51:D6:B9:E3:E6:6B:29:CB:4E:2C:CB
X509v3 Authority Key Identifier:
keyid:34:91:24:6E:C3:E1:BE:52:19:E1:5F:10:79:BB:12:14:86:09:07:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJEkbsPhvlIZ4V8QebsSFIYJB1w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0d:74:93:d8:79:50:4e:bc:1a:c8:fc:4e:dc:7a:28:01:82:
a8:da:4c:b2:b8:c6:ad:f6:a8:00:57:59:5d:51:85:a3:3a:9e:
96:e1:30:8f:53:5f:98:21:c5:71:8b:a6:b8:1e:c2:f0:aa:d8:
d4:da:81:ba:bd:0c:6f:35:50:34:7b:90:42:0c:b1:6d:93:14:
10:30:39:d9:7b:42:28:c0:b9:c3:8d:ff:22:f8:28:19:1b:b9:
84:2d:2e:6b:33:48:88:34:12:52:ea:e0:86:18:0e:ee:77:6d:
87:93:d9:53:9a:70:29:fd:13:58:6a:8c:36:e1:81:bb:0c:96:
02:ed:67:28:8d:7b:61:88:91:01:e2:6a:4c:23:e3:12:72:25:
2a:39:1d:89:47:72:1d:6b:07:5e:8f:89:30:14:8f:90:45:32:
ab:d0:9e:73:b9:19:1f:bb:88:f5:88:5f:22:c2:d9:1d:9a:24:
ae:b8:2e:13:1a:26:2d:e7:7a:0e:59:63:a4:86:6e:88:1c:e5:
f1:b5:cf:33:92:99:4a:76:cb:f0:bd:54:13:c9:56:41:32:3c:
5a:fa:21:90:87:15:3a:96:bf:1b:0c:be:8f:26:15:89:fc:b8:
ef:b9:60:ca:f2:20:13:32:a1:f1:42:79:d6:30:bd:9b:60:b5:
14:5f:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:54:07 2026 by rpki-client