Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: fHHliySrFZbq+s8pz0XFS1tX3EZ2+xk3FbL8UbLriZM=
Subject key identifier: 46:FC:8D:AC:6D:5B:C3:A2:8C:85:05:BF:28:B2:9E:D5:B7:EB:DD:55
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 206CF0B7E5C1E87307FFFDAB3605E502CC1EF751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: 0137
Signing time: Wed 13 May 2026 00:02:54 +0000
Manifest this update: Tue 12 May 2026 23:57:54 +0000
Manifest next update: Thu 14 May 2026 02:42:54 +0000
Files and hashes: 1: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: SrjYxvKXUUuvokU7dSNLdiG4dFc4AVmQHgyy2g7v/TI=)
2: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: J1HG0OMrjIFaGXRRNUqDlj9Wjr3EYNiVY9djg5Z3eOw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6c:f0:b7:e5:c1:e8:73:07:ff:fd:ab:36:05:e5:02:cc:1e:f7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: May 12 23:57:54 2026 GMT
Not After : May 14 02:42:54 2026 GMT
Subject: CN=46FC8DAC6D5BC3A28C8505BF28B29ED5B7EBDD55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:f7:ea:3b:25:35:8b:c9:21:a6:0e:02:00:
36:ac:6b:a8:31:82:a8:27:2e:4e:79:ff:90:48:32:
37:24:9e:5f:7f:3f:f7:43:19:27:c7:53:27:8b:50:
a1:46:9e:34:41:26:a3:86:16:b5:0a:43:39:c6:75:
c6:10:fd:9d:7a:67:8f:3c:2a:02:34:04:fd:ec:5b:
0d:5b:98:1e:2e:a4:cf:6f:93:09:ca:21:32:93:24:
64:a5:2c:0b:08:72:69:41:da:24:d9:d7:8e:ae:4f:
11:a0:69:91:f6:ab:10:e4:06:97:38:56:b4:ea:d2:
54:87:5d:31:2e:ad:a3:7c:9e:db:1f:b3:ad:bb:3d:
69:5c:b5:53:a7:c9:a3:39:b3:9e:1f:69:34:82:c2:
ec:15:a9:21:9f:b8:67:49:bc:6e:6e:65:39:ae:35:
a2:60:30:24:92:b9:c1:d0:2b:ba:bb:1a:1b:cd:15:
33:98:a7:6c:92:49:8c:f7:18:3c:06:be:97:20:d8:
d6:ca:83:6c:8f:b0:03:40:1e:4f:e4:d8:9b:d8:d1:
82:4e:a3:97:f4:22:cd:b7:14:0a:07:a0:31:65:bb:
6d:02:38:58:48:66:9d:cd:bf:71:90:6d:53:b8:54:
c1:8a:14:40:11:b8:de:20:d7:ac:78:c4:7d:da:63:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FC:8D:AC:6D:5B:C3:A2:8C:85:05:BF:28:B2:9E:D5:B7:EB:DD:55
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e2:10:82:c3:5d:bc:e6:9e:29:b0:74:97:a0:08:ea:9c:d2:
1e:6c:bd:3e:5c:51:9b:e5:fb:a0:b7:ab:ac:57:99:38:43:00:
01:b4:e7:4c:00:66:f0:d5:b4:ad:3a:01:7c:e8:ac:4f:e9:9e:
d1:ec:97:7f:d8:d0:34:a1:1d:f4:5c:64:62:da:a1:ea:de:3b:
20:99:90:c8:c3:60:30:43:04:06:97:74:db:74:69:f1:85:67:
d1:5e:80:ac:68:d9:ba:84:59:bf:02:36:2c:d6:21:8a:2c:c0:
60:0a:26:d3:b5:6d:d2:e3:87:ef:53:c7:46:82:bd:5f:bd:3f:
6d:60:b8:bb:eb:50:88:8e:72:54:72:bb:51:b1:90:ae:db:83:
5b:46:1e:d4:f8:13:7f:dd:18:2b:8c:4b:cf:78:fc:9a:17:87:
db:73:b8:ca:b2:f2:a1:71:f9:08:e0:24:3e:d9:e1:95:4b:5b:
f2:87:80:5f:77:c4:aa:37:d4:af:2f:fc:7e:69:a1:5d:f2:b1:
95:83:1e:12:32:04:d0:aa:b6:f6:11:64:94:42:58:ab:bd:89:
22:c2:fc:db:40:d2:9b:df:44:dc:ec:84:13:8f:b0:07:f4:cb:
d4:d2:9c:3a:c3:bb:35:70:9c:75:d0:ef:8b:57:3f:41:c6:af:
f6:7f:ea:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:22:17 2026 by rpki-client