Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: UzbYk2+RYDVOAv3cQLZK0iI00HQ8EHNWZ64S0vlBuI0=
Subject key identifier: 1C:AA:20:21:AC:80:80:96:B6:CA:59:D4:B4:33:79:23:6B:90:95:4A
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 3CC9F969CDD1C0A1A06B39194333444ED6370D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: 0197
Signing time: Thu 23 Jul 2026 20:04:33 +0000
Manifest this update: Thu 23 Jul 2026 19:59:33 +0000
Manifest next update: Fri 24 Jul 2026 22:30:33 +0000
Files and hashes: 1: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: w+d7912BQGqfa80A6ctflbawUDkizUbulsgp4fTWBH4=)
2: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: XTrRc7BvhR1v4bi5yv/rUwu+Cr89uiOaZylHW/FtRgY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c9:f9:69:cd:d1:c0:a1:a0:6b:39:19:43:33:44:4e:d6:37:0d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Jul 23 19:59:33 2026 GMT
Not After : Jul 24 22:30:33 2026 GMT
Subject: CN=1CAA2021AC808096B6CA59D4B43379236B90954A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:2f:8d:e7:ff:f4:43:28:b4:e6:bb:8a:75:
b7:f6:ad:a8:54:c9:59:2b:be:49:79:a5:1a:60:1f:
cd:70:bc:75:9a:8d:bd:fe:ee:5f:96:fa:64:fa:ba:
db:2b:a2:91:24:2f:21:9e:7a:df:55:e1:88:1c:a5:
f8:99:cb:40:be:6d:a6:4a:29:5e:fc:96:bb:f6:7e:
76:aa:c8:52:7f:f8:f2:4f:29:76:d0:91:25:15:03:
cf:29:a2:41:b1:7a:2d:d3:a3:34:7c:2e:5f:4f:fb:
a8:2e:b6:0f:4e:05:50:dd:97:da:96:be:ce:32:2f:
24:07:89:65:d8:85:78:96:72:d4:fa:51:97:e4:41:
56:5c:b5:a7:6c:64:65:79:c3:98:26:9a:05:a9:b0:
01:85:98:8b:66:89:9f:91:81:c2:28:ea:37:61:48:
a0:43:f5:40:fa:4b:d9:8d:19:ac:d6:3c:0f:68:42:
25:29:c1:4b:d5:17:27:1b:e6:68:2a:0b:47:54:f5:
3b:7c:fc:71:42:06:d2:27:d2:33:4a:75:b6:d6:dd:
65:7d:07:9c:7e:3c:17:05:c4:22:67:e7:57:41:8c:
b5:f2:9f:3f:1a:28:bf:bb:f6:65:42:d5:65:50:62:
6b:3e:d4:53:68:a3:69:0d:d3:c2:66:3f:8a:42:ea:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AA:20:21:AC:80:80:96:B6:CA:59:D4:B4:33:79:23:6B:90:95:4A
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:78:c8:fd:c2:79:af:2e:9f:0d:46:4d:d9:5d:2c:36:b6:c6:
6c:b7:95:44:99:cd:13:8e:f8:40:6b:26:b1:a7:b8:fb:93:73:
5e:65:57:0c:de:de:31:af:d3:b8:f1:db:e0:83:f2:58:ba:65:
1d:58:ec:31:6e:72:2a:4b:87:5b:0b:fe:19:d2:bb:96:c2:b2:
e1:a2:90:88:75:ea:b4:26:b9:a4:ec:f8:07:85:6d:7e:4b:78:
08:db:41:ad:bc:74:a1:95:02:8c:d5:35:2d:f3:36:e9:0c:8a:
08:7c:f2:1d:d9:aa:21:9d:33:a6:5f:ff:03:d5:66:0e:9b:34:
14:7c:0e:37:be:57:3d:bb:8d:20:29:2f:95:45:d6:97:e9:ab:
60:3b:40:0b:fa:6b:a3:56:86:c1:61:71:f5:03:ad:01:7a:0e:
e1:e4:84:d3:47:d5:e6:a6:9d:e1:b7:f3:2c:4e:2b:65:3f:2d:
55:e3:62:d0:f4:78:bf:75:fd:18:d9:21:2e:fc:d7:38:81:47:
f6:6a:ea:25:39:42:75:0d:75:05:e8:d1:fa:0f:21:22:f3:05:
78:fc:35:55:e5:00:71:04:24:43:d7:99:d6:18:04:61:ae:5f:
37:b4:0b:14:4e:f9:77:3f:dc:24:8d:be:43:06:67:fa:6e:95:
41:e0:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:03 2026 by rpki-client