Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3fd1ac3e-dbd1-46e9-b910-32b2d31b7735/2/D91D9CC0BDED03E722D11A119E3EBBBD03C4A62F.mft
File: D91D9CC0BDED03E722D11A119E3EBBBD03C4A62F.mft (raw, json)
Hash identifier: SX9tJ1bAEVyOr/pznNJCqXS5a7Wf0JG7WRmzT8R4ABc=
Subject key identifier: 47:9B:BB:DB:CC:CE:D3:93:7D:00:31:1E:E4:AE:38:38:07:F5:86:B1
Authority key identifier: D9:1D:9C:C0:BD:ED:03:E7:22:D1:1A:11:9E:3E:BB:BD:03:C4:A6:2F
Certificate issuer: /CN=d91d9cc0bded03e722d11a119e3ebbbd03c4a62f
Certificate serial: 7B49DEAAFB6035920407A82BA2A9B402B86624EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2R2cwL3tA-ci0RoRnj67vQPEpi8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3fd1ac3e-dbd1-46e9-b910-32b2d31b7735/2/D91D9CC0BDED03E722D11A119E3EBBBD03C4A62F.mft
Manifest number: 0A
Signing time: Thu 24 Sep 2026 09:20:09 +0000
Manifest this update: Thu 24 Sep 2026 09:15:09 +0000
Manifest next update: Fri 25 Sep 2026 10:18:09 +0000
Files and hashes: 1: D91D9CC0BDED03E722D11A119E3EBBBD03C4A62F.crl (hash: +EmgIv9JrJVEg6LQhdlmZDmzNyVGrwnB/6Dw9bRTF1Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3fd1ac3e-dbd1-46e9-b910-32b2d31b7735/2/D91D9CC0BDED03E722D11A119E3EBBBD03C4A62F.crl
rsync://rsync.paas.rpki.ripe.net/repository/3fd1ac3e-dbd1-46e9-b910-32b2d31b7735/2/D91D9CC0BDED03E722D11A119E3EBBBD03C4A62F.mft
rsync://rpki.ripe.net/repository/DEFAULT/2R2cwL3tA-ci0RoRnj67vQPEpi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:49:de:aa:fb:60:35:92:04:07:a8:2b:a2:a9:b4:02:b8:66:24:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91d9cc0bded03e722d11a119e3ebbbd03c4a62f
Validity
Not Before: Sep 24 09:15:09 2026 GMT
Not After : Sep 25 10:18:09 2026 GMT
Subject: CN=479BBBDBCCCED3937D00311EE4AE383807F586B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:08:e3:3b:c5:2f:56:9f:6d:ed:fb:80:34:
1b:34:f3:39:e5:a6:0a:2e:8e:5c:01:40:b6:ce:64:
ca:d3:9c:e4:05:ad:84:ea:5b:50:00:aa:d0:f6:df:
33:60:d9:6d:d4:37:de:05:3f:79:82:f9:cd:c3:cc:
a6:9e:08:e6:7d:d9:bf:7b:19:9a:40:74:23:7a:4f:
43:de:6b:e9:98:42:0f:99:19:89:af:d6:39:37:d0:
ee:c1:66:9f:30:23:fe:72:1f:b6:0e:d0:f6:62:43:
af:df:0f:5e:34:ba:4f:e7:e2:00:d2:dc:28:73:a3:
fb:9e:96:30:29:8f:59:f0:fa:43:60:3b:31:30:21:
5a:9e:59:8e:47:36:c1:30:41:07:f5:d0:2f:47:d4:
23:33:e2:46:a7:1d:d1:16:a7:8d:92:04:9d:6a:5c:
ef:33:cc:73:b5:fc:c2:82:29:9f:c9:28:c8:de:a2:
30:62:5d:cf:04:b6:30:8e:19:c8:67:e3:90:52:a8:
95:8f:ea:4a:2f:00:03:5f:86:60:07:16:62:14:89:
bf:30:54:0c:96:a8:76:7b:7c:c7:15:3f:6f:b0:2c:
62:65:61:0f:64:46:a2:69:55:c5:2b:d2:93:9d:5d:
37:b6:1b:2a:7c:88:67:12:9d:3e:f7:b7:71:29:a6:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9B:BB:DB:CC:CE:D3:93:7D:00:31:1E:E4:AE:38:38:07:F5:86:B1
X509v3 Authority Key Identifier:
keyid:D9:1D:9C:C0:BD:ED:03:E7:22:D1:1A:11:9E:3E:BB:BD:03:C4:A6:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3fd1ac3e-dbd1-46e9-b910-32b2d31b7735/2/D91D9CC0BDED03E722D11A119E3EBBBD03C4A62F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2R2cwL3tA-ci0RoRnj67vQPEpi8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3fd1ac3e-dbd1-46e9-b910-32b2d31b7735/2/D91D9CC0BDED03E722D11A119E3EBBBD03C4A62F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2e:55:d4:12:04:d7:6d:84:82:73:cb:bf:df:70:37:15:7d:
a8:71:7c:49:2a:e3:4a:86:6d:2f:33:b6:2e:d4:52:30:22:49:
ad:5c:77:f7:b8:78:fc:07:50:62:6f:b2:cb:4c:5a:f0:51:ab:
fe:12:3f:72:5b:6f:2f:83:77:a2:0c:0b:13:92:74:a2:25:74:
4b:f2:6c:ae:9b:19:87:4b:e3:41:79:5d:43:d2:87:62:de:cf:
5b:b0:74:95:37:46:f9:e4:1c:61:cf:34:47:8d:f0:c0:c5:d8:
82:ca:46:51:f4:18:23:24:12:82:58:08:09:c7:ed:4f:5a:3b:
92:03:fc:74:42:74:96:35:8a:e7:35:80:11:e8:4b:79:d2:43:
51:cc:05:e4:0c:1e:9d:e8:06:2e:99:73:c6:c4:aa:3c:1d:f6:
f8:8c:9e:e7:9b:7a:71:fe:a4:3b:48:86:b4:21:bd:f8:d6:51:
63:23:46:4e:62:2f:29:d2:54:78:bc:40:04:71:eb:16:c1:4e:
67:f7:ad:8f:7e:e3:89:41:54:66:41:22:76:68:f6:a7:22:a9:
9a:a2:d5:26:9a:66:80:0b:1f:3a:a0:54:67:38:69:6e:c3:83:
7e:5e:66:9d:0d:71:4e:7e:41:fb:de:53:49:bb:8d:56:51:91:
c1:a7:9f:9d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUe0neqvtgNZIEB6groqm0ArhmJOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDkxZDljYzBiZGVkMDNlNzIyZDExYTExOWUzZWJiYmQw
M2M0YTYyZjAeFw0yNjA5MjQwOTE1MDlaFw0yNjA5MjUxMDE4MDlaMDMxMTAvBgNV
BAMTKDQ3OUJCQkRCQ0NDRUQzOTM3RDAwMzExRUU0QUUzODM4MDdGNTg2QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvAjjO8UvVp9t7fuANBs08znl
pgoujlwBQLbOZMrTnOQFrYTqW1AAqtD23zNg2W3UN94FP3mC+c3DzKaeCOZ92b97
GZpAdCN6T0Pea+mYQg+ZGYmv1jk30O7BZp8wI/5yH7YO0PZiQ6/fD140uk/n4gDS
3Chzo/ueljApj1nw+kNgOzEwIVqeWY5HNsEwQQf10C9H1CMz4kanHdEWp42SBJ1q
XO8zzHO1/MKCKZ/JKMjeojBiXc8EtjCOGchn45BSqJWP6kovAANfhmAHFmIUib8w
VAyWqHZ7fMcVP2+wLGJlYQ9kRqJpVcUr0pOdXTe2Gyp8iGcSnT73t3EppgXZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUR5u728zO05N9ADEe5K44OAf1hrEwHwYDVR0j
BBgwFoAU2R2cwL3tA+ci0RoRnj67vQPEpi8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2ZkMWFjM2UtZGJkMS00NmU5LWI5MTAtMzJiMmQzMWI3
NzM1LzIvRDkxRDlDQzBCREVEMDNFNzIyRDExQTExOUUzRUJCQkQwM0M0QTYyRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJSMmN3TDN0QS1jaTBSb1JuajY3dlFQ
RXBpOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZmQxYWMzZS1k
YmQxLTQ2ZTktYjkxMC0zMmIyZDMxYjc3MzUvMi9EOTFEOUNDMEJERUQwM0U3MjJE
MTFBMTE5RTNFQkJCRDAzQzRBNjJGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQi5V1BIE122EgnPLv99w
NxV9qHF8SSrjSoZtLzO2LtRSMCJJrVx397h4/AdQYm+yy0xa8FGr/hI/cltvL4N3
ogwLE5J0oiV0S/JsrpsZh0vjQXldQ9KHYt7PW7B0lTdG+eQcYc80R43wwMXYgspG
UfQYIyQSglgICcftT1o7kgP8dEJ0ljWK5zWAEehLedJDUcwF5AwenegGLplzxsSq
PB32+Iye55t6cf6kO0iGtCG9+NZRYyNGTmIvKdJUeLxABHHrFsFOZ/etj37jiUFU
ZkEidmj2pyKpmqLVJppmgAsfOqBUZzhpbsODfl5mnQ1xTn5B+95TSbuNVlGRwaef
nQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:21:15 2026 by rpki-client