Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
File: D332D8DC2488E4D202B591BEE081B6938818959F.mft (raw, json)
Hash identifier: obUzHammz/OsL4qJfYByEN1InSNAqw8u9aMnXSIDWIQ=
Subject key identifier: D5:80:87:90:0A:BD:77:D8:97:25:54:AA:5D:4B:5E:59:AD:13:18:21
Authority key identifier: D3:32:D8:DC:24:88:E4:D2:02:B5:91:BE:E0:81:B6:93:88:18:95:9F
Certificate issuer: /CN=d332d8dc2488e4d202b591bee081b6938818959f
Certificate serial: 7F7E0907D0A1A6AE80A4E9369C031B4C96181962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
Manifest number: 0128
Signing time: Wed 23 Sep 2026 09:14:48 +0000
Manifest this update: Wed 23 Sep 2026 09:09:48 +0000
Manifest next update: Thu 24 Sep 2026 11:50:48 +0000
Files and hashes: 1: D332D8DC2488E4D202B591BEE081B6938818959F.crl (hash: stqZFbwFOpcY8bmtrhzUyGu7y2SNDW0BDMvXcivfqs4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7e:09:07:d0:a1:a6:ae:80:a4:e9:36:9c:03:1b:4c:96:18:19:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d332d8dc2488e4d202b591bee081b6938818959f
Validity
Not Before: Sep 23 09:09:48 2026 GMT
Not After : Sep 24 11:50:48 2026 GMT
Subject: CN=D58087900ABD77D8972554AA5D4B5E59AD131821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:02:8b:1c:22:7b:d2:33:ed:fe:1d:17:77:
89:d0:21:96:ea:e9:49:e6:59:e3:82:e3:0e:88:ea:
1b:83:16:5b:6e:8f:ec:9b:c0:c3:8e:61:9b:f9:c4:
fc:8d:a3:f0:41:65:95:fb:2d:34:a6:09:36:cc:15:
1d:4f:4f:9f:71:37:d6:f6:55:3b:f0:8c:64:06:3a:
b9:af:b7:14:53:4b:20:0e:07:e7:a3:f9:d2:ff:aa:
15:68:60:58:1e:5b:dd:ef:8c:52:cc:2f:61:40:0a:
01:bf:ae:b3:71:91:1a:82:da:9b:95:7b:83:d0:3a:
3a:3e:f6:aa:00:31:b2:8a:90:2b:bf:18:8b:24:ce:
b9:a7:3a:34:20:a5:01:ee:74:4a:4a:80:4f:4b:69:
4b:86:d0:31:ee:0a:c8:01:06:c5:c8:ce:0d:af:94:
ea:b0:70:8b:18:42:c7:a9:27:25:a5:99:24:0f:38:
d4:84:38:1b:71:8a:54:25:f5:2e:be:13:79:07:45:
3a:e4:81:ec:37:7f:da:05:f1:c1:6b:73:58:5e:b2:
c0:e3:2f:e2:21:81:ee:16:ba:36:df:a1:8c:4d:91:
e2:ec:62:3c:6d:0c:b6:d7:b7:ea:ce:97:15:c4:67:
39:e5:76:dc:d3:41:8d:bd:45:26:b8:9f:6e:01:41:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:80:87:90:0A:BD:77:D8:97:25:54:AA:5D:4B:5E:59:AD:13:18:21
X509v3 Authority Key Identifier:
keyid:D3:32:D8:DC:24:88:E4:D2:02:B5:91:BE:E0:81:B6:93:88:18:95:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0d:25:00:17:d9:eb:ca:3a:b4:34:9a:3e:e3:1e:17:8c:a0:
7d:09:7d:46:92:8e:ff:b4:8d:48:a5:4f:06:2c:d8:d7:0a:2e:
17:b3:94:8b:3a:b2:84:bb:08:2a:70:b4:11:9e:5d:ff:20:c5:
87:ba:6d:49:b6:e2:9d:a7:68:95:74:82:5b:52:36:c4:12:92:
4a:0c:8a:a8:4e:16:e3:c8:64:af:24:df:d2:d1:dd:86:8b:92:
a7:62:4d:b2:19:34:cb:dd:5a:16:e9:d9:7f:c8:1a:b1:41:ad:
9e:be:00:30:de:da:fc:43:19:02:f8:ed:8a:7b:90:df:f1:a8:
2c:bc:2f:9f:79:1a:36:9d:9e:d0:30:99:9f:86:5d:96:48:b7:
ec:ad:5f:8b:d3:73:de:b3:e8:6f:71:3c:30:b1:30:db:39:d1:
9b:49:84:03:f8:e4:da:01:49:20:ab:44:16:9d:b9:df:c5:2b:
69:da:82:51:a7:2a:38:6e:79:a0:c3:05:cf:5b:c7:ac:95:51:
33:75:6a:3d:d1:29:7c:fc:d9:07:bd:db:30:c8:24:4d:21:d7:
49:ef:ab:70:15:30:59:4b:a7:aa:2c:3d:8d:8c:7e:8d:e1:77:
7a:a4:ae:0a:23:9a:07:d5:d3:11:7a:83:b5:25:8e:dc:de:6b:
24:a1:ce:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:55 2026 by rpki-client