Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: AGHDA+N31dmkqOKToN0lhQvTqBwVUja7qTT8dDHtZco=
Subject key identifier: 01:B6:73:04:8B:27:EF:7A:0D:1B:DA:7F:7D:B2:D3:9F:23:3D:A6:C6
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 7AB742D1080263C6C5C8EEC0ED7365B01A029DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: 01ED
Signing time: Sat 26 Sep 2026 10:48:33 +0000
Manifest this update: Sat 26 Sep 2026 10:43:33 +0000
Manifest next update: Sun 27 Sep 2026 11:12:33 +0000
Files and hashes: 1: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: XTrRc7BvhR1v4bi5yv/rUwu+Cr89uiOaZylHW/FtRgY=)
2: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: TS9UmHZ3vhaJOP0+HYgIcA/t0lcmSuua6Qo2uKosasA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b7:42:d1:08:02:63:c6:c5:c8:ee:c0:ed:73:65:b0:1a:02:9d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Sep 26 10:43:33 2026 GMT
Not After : Sep 27 11:12:33 2026 GMT
Subject: CN=01B673048B27EF7A0D1BDA7F7DB2D39F233DA6C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:21:77:22:63:95:3a:bb:23:26:53:6b:1f:
d8:ca:1d:be:2b:df:b3:1f:d9:96:ac:dd:cf:ca:0c:
bd:42:38:7d:ba:44:05:ed:2c:e0:37:1f:88:7e:2a:
8b:63:57:c4:63:91:bd:5b:f7:c3:51:60:5c:93:57:
2c:77:b2:f2:31:ee:af:3c:c9:34:bb:38:1c:b6:16:
0d:c3:98:f6:44:75:30:2a:dc:ae:9c:98:70:2f:07:
e1:99:09:07:9b:e6:cd:4b:ee:e2:d5:a0:f9:91:5c:
fd:f2:b2:8e:3f:89:bf:d2:8f:d1:2f:91:71:d8:b0:
85:67:3a:7d:53:0a:6c:11:86:2d:f0:6a:00:e3:d4:
73:53:fa:aa:87:4f:f8:d4:cf:97:63:1b:d4:63:4f:
ae:3d:0e:d8:c0:ce:8d:ff:af:40:aa:1d:fb:64:1b:
25:5e:57:1d:d6:07:90:6f:86:6a:b7:d9:ce:d8:c5:
37:a3:7c:aa:11:a7:a8:14:48:2e:15:f3:c6:11:bc:
c3:2b:7e:5b:33:db:69:c5:3c:96:04:5a:34:32:1a:
0b:46:79:e8:b1:fc:96:81:e6:f0:b0:a0:d5:1d:d0:
9a:90:f1:e5:08:14:53:32:66:68:a7:fe:dd:7e:9f:
2b:eb:a2:04:dd:02:d5:ff:09:0d:ca:2f:de:cb:b6:
a0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B6:73:04:8B:27:EF:7A:0D:1B:DA:7F:7D:B2:D3:9F:23:3D:A6:C6
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5a:ef:29:e6:5c:43:ea:ea:ec:ac:3f:2a:c6:76:e6:3a:db:
81:ad:93:66:34:77:04:b3:3d:00:bf:a3:3b:bf:83:0f:29:e9:
3f:f3:50:8c:d4:72:fa:4e:51:07:79:a0:ed:0d:90:15:bb:5a:
6d:cc:1b:9d:2b:88:9f:29:fb:11:ad:e0:10:97:66:d5:36:6f:
6a:c4:87:33:aa:dc:53:bb:86:86:7a:38:1e:31:c5:d2:4c:90:
09:48:42:ff:a0:b0:f0:57:9b:b5:df:88:8d:a2:d3:53:f4:d0:
3d:7f:c8:b4:fb:9b:01:8e:39:7a:8e:b8:57:97:b2:31:fe:5c:
6c:b8:36:dd:f8:05:b3:11:36:db:04:4b:83:88:71:7f:d4:04:
4f:bd:52:ee:d0:61:7d:1f:1e:60:f8:5b:6b:5b:05:1f:ef:b4:
4a:6f:a6:55:f1:9b:73:41:fc:20:cf:03:56:4a:35:b3:aa:31:
5d:62:0a:7a:95:2d:ff:2d:ca:c3:15:0b:ca:5a:a3:ad:f7:e6:
2f:cc:d8:b1:50:68:cc:69:37:dc:58:03:69:6e:21:3a:c7:2b:
17:0e:c2:3b:bf:25:b2:a3:f7:3b:aa:86:a1:37:e0:e2:1f:3f:
68:7b:71:b4:19:cb:27:ed:75:ed:0f:49:13:8c:1f:5e:db:4b:
96:15:18:22
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUerdC0QgCY8bFyO7A7XNlsBoCnaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDBhNTE2YjUwNDI2MjAyYTQyNGYwZWJmY2I3ZDJiZDRm
NzQ0Zjk2NDAeFw0yNjA5MjYxMDQzMzNaFw0yNjA5MjcxMTEyMzNaMDMxMTAvBgNV
BAMTKDAxQjY3MzA0OEIyN0VGN0EwRDFCREE3RjdEQjJEMzlGMjMzREE2QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6iSF3ImOVOrsjJlNrH9jKHb4r
37Mf2Zas3c/KDL1COH26RAXtLOA3H4h+KotjV8Rjkb1b98NRYFyTVyx3svIx7q88
yTS7OBy2Fg3DmPZEdTAq3K6cmHAvB+GZCQeb5s1L7uLVoPmRXP3yso4/ib/Sj9Ev
kXHYsIVnOn1TCmwRhi3wagDj1HNT+qqHT/jUz5djG9RjT649DtjAzo3/r0CqHftk
GyVeVx3WB5Bvhmq32c7YxTejfKoRp6gUSC4V88YRvMMrflsz22nFPJYEWjQyGgtG
eeix/JaB5vCwoNUd0JqQ8eUIFFMyZmin/t1+nyvrogTdAtX/CQ3KL97LtqD5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUAbZzBIsn73oNG9p/fbLTnyM9psYwHwYDVR0j
BBgwFoAU0KUWtQQmICpCTw6/y30r1PdE+WQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4
NDhjLzAvRDBBNTE2QjUwNDI2MjAyQTQyNEYwRUJGQ0I3RDJCRDRGNzQ0Rjk2NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBLVVd0UVFtSUNwQ1R3Nl95MzByMVBk
RS1XUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02
YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMC9EMEE1MTZCNTA0MjYyMDJBNDI0
RjBFQkZDQjdEMkJENEY3NDRGOTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVrvKeZcQ+rq7Kw/KsZ2
5jrbga2TZjR3BLM9AL+jO7+DDynpP/NQjNRy+k5RB3mg7Q2QFbtabcwbnSuInyn7
Ea3gEJdm1TZvasSHM6rcU7uGhno4HjHF0kyQCUhC/6Cw8Febtd+IjaLTU/TQPX/I
tPubAY45eo64V5eyMf5cbLg23fgFsxE22wRLg4hxf9QET71S7tBhfR8eYPhba1sF
H++0Sm+mVfGbc0H8IM8DVko1s6oxXWIKepUt/y3KwxULylqjrffmL8zYsVBozGk3
3FgDaW4hOscrFw7CO78lsqP3O6qGoTfg4h8/aHtxtBnLJ+117Q9JE4wfXttLlhUY
Ig==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:43:32 2026 by rpki-client