Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
File: C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft (raw, json)
Hash identifier: nj4ZXkAS9BtgdSrh+fvE1a/VB8bj9MN4zlt76nrOABw=
Subject key identifier: 80:CA:1E:7A:16:E1:1F:5F:03:31:4F:2A:E9:05:4C:EE:3A:80:98:91
Authority key identifier: C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB
Certificate issuer: /CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
Certificate serial: 4864C51340AD1F148109B091EEE5B7944E624D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
Manifest number: 64
Signing time: Sun 15 Nov 2026 05:28:31 +0000
Manifest this update: Sun 15 Nov 2026 05:23:31 +0000
Manifest next update: Mon 16 Nov 2026 09:00:31 +0000
Files and hashes: 1: AS201398.asa (hash: RZO4ieNHqVPcfn3XDiP+r+hyFXWvPYLfC8/YrW201iY=)
2: C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl (hash: RhTp4fUmX3/Qo9kW3ljvjyOyAvMtBbOMqqgqXiVvA6E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:64:c5:13:40:ad:1f:14:81:09:b0:91:ee:e5:b7:94:4e:62:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09b9b6b6b65abe29d9f086b07c6de1f1ed8ceeb
Validity
Not Before: Nov 15 05:23:31 2026 GMT
Not After : Nov 16 09:00:31 2026 GMT
Subject: CN=80CA1E7A16E11F5F03314F2AE9054CEE3A809891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:4f:96:8d:67:cc:fd:97:53:b0:57:39:b1:
8c:f2:25:34:6f:39:6d:b9:fc:b3:ee:bb:e6:e4:57:
fe:a6:75:fe:48:f1:2f:f5:7e:f9:bf:dc:c9:0f:34:
86:f2:87:88:7a:ac:01:2e:02:5c:fa:6b:ab:22:d6:
62:75:7a:5b:69:9d:5d:76:cd:3f:6d:37:4b:b3:8c:
93:fc:74:70:f2:6c:ee:81:fb:7b:6e:ef:c4:e2:d3:
2a:cf:19:8a:de:ab:48:15:fb:c9:09:a2:96:0b:59:
dc:f0:40:f5:9d:3b:e7:95:0f:48:4b:1e:c8:96:94:
14:8c:2f:13:19:2a:2f:12:f6:55:f2:77:dc:11:6c:
39:80:11:ed:80:7d:99:89:8f:7d:1a:6b:96:8e:eb:
24:42:f2:ce:9f:3d:0c:ae:47:a4:a8:57:61:52:27:
8c:30:08:b3:59:aa:eb:cf:27:c4:c7:7d:cc:b5:b3:
43:1d:e6:1f:b7:c5:ac:4b:c2:ed:ed:10:e6:22:d1:
7d:5e:78:d1:79:36:a8:ff:79:b9:9e:d7:f9:7d:ab:
76:4a:96:52:65:2f:07:50:e2:79:a3:22:88:7f:c2:
d0:68:a2:cb:cb:fd:e8:7a:82:48:61:aa:2f:5e:9a:
1c:0d:dd:e7:b4:96:22:ab:32:3a:ce:ee:cf:8a:9b:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CA:1E:7A:16:E1:1F:5F:03:31:4F:2A:E9:05:4C:EE:3A:80:98:91
X509v3 Authority Key Identifier:
keyid:C0:9B:9B:6B:6B:65:AB:E2:9D:9F:08:6B:07:C6:DE:1F:1E:D8:CE:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJuba2tlq-KdnwhrB8beHx7Yzus.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfd9a2c-87f1-48a9-b6ea-28ad097b75d3/3/C09B9B6B6B65ABE29D9F086B07C6DE1F1ED8CEEB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:de:03:f4:bf:96:a9:dd:16:da:10:58:46:6e:0b:67:6e:60:
06:b8:f6:c4:86:15:a7:54:07:f5:cc:6e:99:5c:ee:b9:2d:40:
db:cd:8a:0b:11:d3:51:17:4f:8e:68:02:78:e8:a3:ba:8f:c1:
37:5d:dd:ca:f6:a4:f8:4d:38:da:c1:33:bc:e9:94:d8:b2:48:
82:c7:c4:42:ba:79:53:57:63:bb:6c:a2:39:da:4f:87:43:f8:
54:b2:a2:28:ff:01:af:d3:6f:36:82:d3:c6:61:59:2d:6d:88:
7b:34:0a:71:2e:60:81:46:f0:53:6e:87:07:6b:c9:28:55:c9:
5c:2e:d7:12:b1:68:5b:41:25:91:f5:b2:2f:7c:41:6e:ec:8a:
4a:e8:dc:43:ae:5d:74:bf:1e:19:50:df:15:bf:6a:3a:4f:9a:
55:04:ef:2d:04:2b:1f:07:e3:db:f5:90:11:18:aa:86:b8:6e:
3f:1b:34:45:b4:25:74:c8:fa:b4:1f:f9:98:1f:01:7a:59:88:
aa:ab:56:68:60:03:59:94:c6:7b:f1:a3:f1:86:fb:49:90:cd:
4b:43:9f:36:e3:d6:b1:ca:0e:06:05:7a:2a:11:41:69:a4:da:
4c:9e:c6:09:dc:0a:17:75:5e:a6:39:7c:57:27:3b:27:95:b9:
97:a9:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:59:18 2026 by rpki-client