Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.mft
File: 7A52DCCEACF368A06878893555D774D9895F595A.mft (raw, json)
Hash identifier: thFaW796MuxdVDwbxHVhAaGyyyGUSi51lEEXzc0KO8U=
Subject key identifier: 99:89:DB:44:CF:91:B4:D8:A1:17:16:32:94:1C:A6:3E:47:11:A9:65
Authority key identifier: 7A:52:DC:CE:AC:F3:68:A0:68:78:89:35:55:D7:74:D9:89:5F:59:5A
Certificate issuer: /CN=7a52dcceacf368a06878893555d774d9895f595a
Certificate serial: 067B8413DC8A81DD556F999D31A13A76A51DEB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elLczqzzaKBoeIk1Vdd02YlfWVo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.mft
Manifest number: 2E
Signing time: Wed 23 Sep 2026 22:41:53 +0000
Manifest this update: Wed 23 Sep 2026 22:36:53 +0000
Manifest next update: Fri 25 Sep 2026 00:14:53 +0000
Files and hashes: 1: AS218832.asa (hash: 54tkvEtBJCf3Is5IzKEM0iUioVT4Vi7w+l532kOHpmI=)
2: 7A52DCCEACF368A06878893555D774D9895F595A.crl (hash: Rg5dgCmqFhDDkRFzTLAv6jnv96qeKf4HOwr30l5thFA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.mft
rsync://rpki.ripe.net/repository/DEFAULT/elLczqzzaKBoeIk1Vdd02YlfWVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 00:14:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7b:84:13:dc:8a:81:dd:55:6f:99:9d:31:a1:3a:76:a5:1d:eb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a52dcceacf368a06878893555d774d9895f595a
Validity
Not Before: Sep 23 22:36:53 2026 GMT
Not After : Sep 25 00:14:53 2026 GMT
Subject: CN=9989DB44CF91B4D8A1171632941CA63E4711A965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:2c:18:b3:88:23:c6:55:8a:c5:63:cf:39:
51:51:ce:41:7c:c9:9e:31:29:a9:68:85:52:cf:fc:
69:db:9d:98:24:3b:5b:09:37:dd:03:1d:23:b6:9a:
77:e9:7e:9d:af:a8:b8:ff:42:13:e0:e0:85:e5:a2:
93:12:16:fc:2e:82:bd:2f:30:e6:f7:93:74:69:82:
25:f8:c7:86:a8:6a:c6:41:04:7c:af:34:a0:08:9b:
00:a2:0b:e6:a4:3d:b9:fe:bb:79:a4:d9:6b:bc:da:
f3:e9:a4:ae:ef:27:0f:6e:09:4c:82:84:e2:97:8a:
5e:54:f2:45:df:32:b5:f1:ca:da:fb:33:c2:b0:51:
fb:30:a9:77:7f:b4:26:7e:8e:31:ae:54:b7:38:81:
2d:4b:91:ae:d5:75:2d:0d:94:d1:74:14:29:99:00:
0a:5f:f4:dc:4f:aa:2b:63:31:f2:3f:e7:bd:9c:63:
96:46:ad:af:e9:9a:21:bd:f8:20:4a:4e:8f:da:76:
a5:04:12:7c:dd:a5:a1:43:f8:c9:d8:9a:67:fc:8d:
68:df:b5:74:37:1b:d7:91:d5:ac:2e:47:a7:44:fe:
76:e8:ae:62:97:0b:0d:ee:b0:78:e4:94:2c:c4:87:
dc:1a:f9:5f:98:8b:94:72:96:02:ad:82:37:50:c8:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:DB:44:CF:91:B4:D8:A1:17:16:32:94:1C:A6:3E:47:11:A9:65
X509v3 Authority Key Identifier:
keyid:7A:52:DC:CE:AC:F3:68:A0:68:78:89:35:55:D7:74:D9:89:5F:59:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elLczqzzaKBoeIk1Vdd02YlfWVo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4b:7c:fd:99:70:d1:2c:9b:32:3a:dc:e4:7c:cb:0b:e9:d4:
cd:97:13:13:b9:a7:c2:e7:a0:b1:b3:5c:92:9a:23:21:de:73:
99:1f:95:16:a8:cf:88:3f:4a:77:77:2a:1e:3a:a8:d2:74:76:
16:4d:ab:9b:3d:40:3a:a5:c7:c8:50:10:48:9f:b2:93:3d:03:
57:a8:af:c4:e8:df:9b:a3:35:37:43:14:4b:2c:70:32:4f:f0:
3b:7e:38:cf:73:cd:6d:d4:d3:34:f4:fa:d4:14:9f:e2:70:0f:
a2:d0:34:cd:75:59:1b:f0:3b:23:1a:b9:e6:d0:1e:1b:06:0d:
3f:68:11:2b:70:2c:87:6d:6e:78:d4:71:fc:e6:56:77:4c:96:
33:09:be:f8:65:ef:6e:58:f4:bf:75:c5:ab:c9:29:4b:67:6a:
01:7f:9c:b7:f9:f9:4b:1e:2c:0d:2f:6c:f8:0c:05:3d:78:e8:
02:77:81:cf:63:ce:b2:8e:21:3d:25:93:54:ba:9f:73:9c:59:
06:e9:93:ff:ac:e7:9a:b4:96:53:54:ca:0a:b3:57:0e:32:e6:
8f:14:02:f6:e8:8e:38:bb:1a:e5:b3:3f:d0:27:75:48:59:2b:
49:3c:10:57:8f:36:c3:78:30:b5:bf:ec:87:5f:29:8a:30:23:
cf:91:98:6a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUBnuEE9yKgd1Vb5mdMaE6dqUd61QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2E1MmRjY2VhY2YzNjhhMDY4Nzg4OTM1NTVkNzc0ZDk4
OTVmNTk1YTAeFw0yNjA5MjMyMjM2NTNaFw0yNjA5MjUwMDE0NTNaMDMxMTAvBgNV
BAMTKDk5ODlEQjQ0Q0Y5MUI0RDhBMTE3MTYzMjk0MUNBNjNFNDcxMUE5NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCisCwYs4gjxlWKxWPPOVFRzkF8
yZ4xKalohVLP/GnbnZgkO1sJN90DHSO2mnfpfp2vqLj/QhPg4IXlopMSFvwugr0v
MOb3k3RpgiX4x4aoasZBBHyvNKAImwCiC+akPbn+u3mk2Wu82vPppK7vJw9uCUyC
hOKXil5U8kXfMrXxytr7M8KwUfswqXd/tCZ+jjGuVLc4gS1Lka7VdS0NlNF0FCmZ
AApf9NxPqitjMfI/572cY5ZGra/pmiG9+CBKTo/adqUEEnzdpaFD+MnYmmf8jWjf
tXQ3G9eR1awuR6dE/nbormKXCw3usHjklCzEh9wa+V+Yi5RylgKtgjdQyFShAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUmYnbRM+RtNihFxYylBymPkcRqWUwHwYDVR0j
BBgwFoAUelLczqzzaKBoeIk1Vdd02YlfWVowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi
ZDQyLzMvN0E1MkRDQ0VBQ0YzNjhBMDY4Nzg4OTM1NTVENzc0RDk4OTVGNTk1QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VsTGN6cXp6YUtCb2VJazFWZGQwMlls
ZldWby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zY2JmYWQ5Ni03
OTQ3LTRlNDktYWNlMS04YmY4OTk5M2JkNDIvMy83QTUyRENDRUFDRjM2OEEwNjg3
ODg5MzU1NUQ3NzREOTg5NUY1OTVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckt8/Zlw0SybMjrc5HzL
C+nUzZcTE7mnwuegsbNckpojId5zmR+VFqjPiD9Kd3cqHjqo0nR2Fk2rmz1AOqXH
yFAQSJ+ykz0DV6ivxOjfm6M1N0MUSyxwMk/wO344z3PNbdTTNPT61BSf4nAPotA0
zXVZG/A7Ixq55tAeGwYNP2gRK3Ash21ueNRx/OZWd0yWMwm++GXvblj0v3XFq8kp
S2dqAX+ct/n5Sx4sDS9s+AwFPXjoAneBz2POso4hPSWTVLqfc5xZBumT/6znmrSW
U1TKCrNXDjLmjxQC9uiOOLsa5bM/0Cd1SFkrSTwQV482w3gwtb/sh18pijAjz5GY
ag==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:57:34 2026 by rpki-client