Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: rW1c939j6LPCyjKkb0vQSDGpRvUwCw3O2pUbLOGtKqc=
Subject key identifier: 85:4F:99:D7:23:C5:79:C7:9F:33:7C:A1:61:F1:7D:D0:F2:DF:C2:93
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 65DB16CE8B6008B006E0CA7D841021DECDEAFC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: F4
Signing time: Wed 25 Mar 2026 05:28:34 +0000
Manifest this update: Wed 25 Mar 2026 05:23:34 +0000
Manifest next update: Thu 26 Mar 2026 08:36:34 +0000
Files and hashes: 1: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: 84K3GoOG1uIFfq6bmbl7a7v+8tx9nMFIDl4oJ37TasM=)
2: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: J1HG0OMrjIFaGXRRNUqDlj9Wjr3EYNiVY9djg5Z3eOw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 08:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:db:16:ce:8b:60:08:b0:06:e0:ca:7d:84:10:21:de:cd:ea:fc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Mar 25 05:23:34 2026 GMT
Not After : Mar 26 08:36:34 2026 GMT
Subject: CN=854F99D723C579C79F337CA161F17DD0F2DFC293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:67:4e:34:33:38:7a:12:fa:33:79:10:79:71:
9a:7f:08:90:81:4a:de:b6:b1:b1:6d:a0:ad:17:5f:
26:6c:5a:54:d0:5e:ea:bb:87:9f:c7:d7:85:13:c1:
4a:f8:a3:98:89:12:d9:a4:0e:c1:94:c9:6f:bb:8c:
29:be:93:9b:3f:e6:b6:a2:11:4a:83:d7:2d:13:bd:
9c:04:2f:42:01:41:f8:eb:88:cb:0f:04:8d:0d:17:
8d:46:d8:b9:00:6c:d1:de:11:78:d4:de:a4:08:a7:
75:f4:2d:24:75:f9:51:17:2a:9c:a7:c9:1b:43:6c:
99:17:92:3a:0e:df:86:cf:cb:ef:05:1f:6c:bd:33:
b1:ac:cb:e7:c3:f4:39:86:18:0a:66:77:65:0f:67:
26:1d:94:85:8b:31:92:2e:47:8a:bf:70:f1:c2:73:
ce:1f:d9:d2:d6:28:f9:5c:39:6f:96:34:52:a5:c1:
a9:ac:87:cd:ff:94:b6:fa:d9:43:11:02:ad:b7:b9:
43:cf:5b:3b:0d:92:a2:46:8d:00:c3:1a:12:45:04:
50:2f:ea:64:99:7b:f9:2a:fd:78:eb:8c:e4:4b:7c:
f6:93:dc:fb:18:e2:e2:a6:e9:f3:87:f1:03:fa:90:
58:cb:c0:d4:e8:5f:8e:8b:ba:25:15:99:16:de:5d:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4F:99:D7:23:C5:79:C7:9F:33:7C:A1:61:F1:7D:D0:F2:DF:C2:93
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fb:b3:6d:35:63:0f:77:b1:bc:ed:8e:39:c5:a6:51:10:13:
1c:2b:6d:01:78:8d:89:67:9f:db:67:42:87:47:d0:4a:25:ae:
33:cd:c2:2b:f8:dc:08:58:ec:12:6a:2b:d5:91:d5:17:54:fd:
64:81:d7:18:49:d0:68:e3:86:c2:c5:f3:62:92:3d:6b:49:0a:
0a:24:11:bb:ff:0a:bb:bf:4d:f7:34:f7:55:38:83:04:76:70:
86:17:32:c1:a5:b2:0c:9f:0d:13:6b:1b:63:16:46:41:0e:1f:
5b:60:95:6f:af:fc:99:ef:1c:9b:f2:e4:f4:7f:20:9d:ec:cf:
97:1f:24:0f:19:07:35:5a:a4:57:bf:2e:ec:ab:9f:b1:2d:d2:
b6:62:b9:26:00:e1:e9:52:c4:79:62:28:c1:30:56:5e:77:69:
4e:ce:a5:dd:c6:37:cb:ba:7c:54:4f:6a:fc:f4:5a:0c:ae:fd:
60:7f:e6:09:cc:a1:27:06:f6:85:71:d9:59:18:4c:10:f7:71:
ea:7d:20:7a:17:19:ea:4f:ce:5a:01:a8:73:fe:73:c1:38:af:
5c:a3:15:c8:38:80:a6:68:64:aa:19:ea:6b:15:51:a5:f6:6f:
88:cd:dd:6e:e7:b1:b5:1c:43:ee:a4:90:15:10:24:95:47:a7:
22:5d:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:15 2026 by rpki-client