Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
File: DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft (raw, json)
Hash identifier: +qugRo5DavRu2xXJ/ePBzss8bqVsSkczmhC/lwycwrg=
Subject key identifier: 53:5B:D7:2E:8B:34:E6:DA:54:48:DC:6C:D8:31:90:2C:1A:C7:9C:C9
Authority key identifier: DB:1E:7C:42:15:D9:A1:EE:A8:1F:0B:12:99:F6:76:0D:27:56:26:10
Certificate issuer: /CN=db1e7c4215d9a1eea81f0b1299f6760d27562610
Certificate serial: 1EDCE55D32B030844DADA1FD8E762EAAE5A2ED44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
Manifest number: 2E
Signing time: Wed 23 Sep 2026 23:26:54 +0000
Manifest this update: Wed 23 Sep 2026 23:21:54 +0000
Manifest next update: Fri 25 Sep 2026 00:45:54 +0000
Files and hashes: 1: AS218904.asa (hash: 2APSJj4sILOj/UlCFaW7JSoWtAv3v4pfE4ClbXw+p6M=)
2: DB1E7C4215D9A1EEA81F0B1299F6760D27562610.crl (hash: iZCFz7d6P3LBF6ceBH3VZdJeVfMbKt2XLsTc5reBx1k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:dc:e5:5d:32:b0:30:84:4d:ad:a1:fd:8e:76:2e:aa:e5:a2:ed:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1e7c4215d9a1eea81f0b1299f6760d27562610
Validity
Not Before: Sep 23 23:21:54 2026 GMT
Not After : Sep 25 00:45:54 2026 GMT
Subject: CN=535BD72E8B34E6DA5448DC6CD831902C1AC79CC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:1c:e3:0f:eb:3b:b6:9c:bd:b5:53:f1:c1:
50:aa:09:c9:2b:87:90:3b:30:ca:cb:c7:97:94:17:
c5:c2:04:4b:c7:c8:fc:06:24:71:4c:59:29:6d:63:
90:33:19:cf:3f:73:60:fa:cf:01:26:23:e5:76:38:
fa:7a:2d:7e:9c:87:7e:d5:cb:97:ab:d0:7b:1b:d0:
1c:02:5f:e2:1d:0a:34:1f:15:d8:a8:6d:76:59:b2:
fc:4c:cd:a7:04:50:a9:f1:82:79:48:a2:44:4d:b8:
57:17:a1:47:82:92:b1:22:c7:06:54:26:f9:ff:34:
10:8b:fa:0f:57:66:4c:b2:ff:d0:03:c2:0f:82:9b:
b2:2d:3d:1c:ff:b3:fb:95:61:f3:ab:4f:b1:6e:4a:
ba:76:b2:87:a4:83:8c:a4:de:12:92:86:86:f0:b3:
7c:f3:14:d8:13:d5:89:da:46:ba:17:44:bb:a9:e4:
07:62:ce:3a:04:80:fa:55:fe:91:cf:b8:78:89:ae:
92:f9:72:3c:61:af:87:3b:5d:20:de:65:71:9a:fa:
b2:b3:72:81:1a:cb:1f:23:9a:06:94:16:55:b6:63:
6a:f9:82:23:b2:7b:9f:5a:eb:c2:05:3f:9c:44:4d:
f0:18:45:7c:91:71:f7:c5:71:5b:23:47:fd:52:c4:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5B:D7:2E:8B:34:E6:DA:54:48:DC:6C:D8:31:90:2C:1A:C7:9C:C9
X509v3 Authority Key Identifier:
keyid:DB:1E:7C:42:15:D9:A1:EE:A8:1F:0B:12:99:F6:76:0D:27:56:26:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2d:66:59:71:cb:e2:27:fb:43:21:1a:50:83:b6:0f:61:55:
4a:8c:4d:cb:5a:27:8e:5d:41:08:72:c1:ab:7c:79:7f:10:70:
e0:df:df:a0:93:a3:46:e7:c1:70:e3:a7:2d:0b:8d:14:69:90:
63:eb:4a:f4:9c:09:8a:06:77:09:a9:85:31:46:77:21:f6:27:
b3:28:2b:19:30:ce:94:3e:f5:f9:ab:43:2a:d5:07:99:97:f2:
8b:c6:bb:13:88:99:fc:c9:fc:77:e6:5f:23:6e:71:80:8a:c5:
5a:3a:23:44:c7:af:e5:f7:e5:bd:50:eb:88:09:60:1e:69:85:
ab:67:2a:60:79:10:d5:d7:ff:04:28:42:71:a3:09:c6:b3:72:
88:90:23:df:9e:70:7a:7f:8d:6e:bc:89:15:f8:41:55:3e:2a:
d9:ea:b2:0f:ef:c3:47:0c:7e:6b:fc:e6:73:6d:49:d3:6f:2c:
ce:ba:01:e6:73:d3:7d:02:45:a6:bb:93:d6:1b:61:07:68:af:
e0:43:1f:19:c2:c7:c2:3b:ed:be:50:89:34:5c:ba:f2:af:e5:
82:28:9f:e6:6f:54:44:8f:4a:63:80:70:af:89:76:49:cc:64:
9b:80:6e:38:17:b4:85:6e:c3:3f:ee:da:d7:19:ff:0d:44:09:
dc:51:9c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:26:54 2026 by rpki-client