Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
File: D332D8DC2488E4D202B591BEE081B6938818959F.mft (raw, json)
Hash identifier: qY8e9SndznZlCF+3AxGDNb2mzVMakqnQ/JgFWz2dk4E=
Subject key identifier: 38:9E:16:7A:A7:04:27:8E:79:0D:3B:D3:AF:99:40:BA:6D:6A:9B:E6
Authority key identifier: D3:32:D8:DC:24:88:E4:D2:02:B5:91:BE:E0:81:B6:93:88:18:95:9F
Certificate issuer: /CN=d332d8dc2488e4d202b591bee081b6938818959f
Certificate serial: 5EE11D424D8373CA282A528A419BB5E138940F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
Manifest number: D3
Signing time: Fri 24 Jul 2026 00:18:54 +0000
Manifest this update: Fri 24 Jul 2026 00:13:54 +0000
Manifest next update: Sat 25 Jul 2026 03:55:54 +0000
Files and hashes: 1: D332D8DC2488E4D202B591BEE081B6938818959F.crl (hash: NYyT3LS0mopLbKh/JAWJb8INxNVefMl2VdRuJbiSffk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e1:1d:42:4d:83:73:ca:28:2a:52:8a:41:9b:b5:e1:38:94:0f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d332d8dc2488e4d202b591bee081b6938818959f
Validity
Not Before: Jul 24 00:13:54 2026 GMT
Not After : Jul 25 03:55:54 2026 GMT
Subject: CN=389E167AA704278E790D3BD3AF9940BA6D6A9BE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5f:f2:7f:1d:d5:ad:cb:76:cc:7e:90:f5:fb:
ee:0a:2b:2d:64:82:6b:37:4d:e2:55:6c:2d:64:a9:
59:e8:3b:17:1f:a4:33:26:49:3e:70:53:b7:1f:f6:
6a:63:69:90:c5:d0:c6:dc:36:1f:8c:dd:a2:b1:af:
c6:0a:9a:70:2b:cb:85:b5:6b:97:f3:f2:cc:f5:c0:
8a:c9:0a:89:8f:0a:0e:f1:82:25:c3:6d:96:e0:7d:
9f:a7:e2:0e:c7:70:e2:d1:73:0f:b2:10:b5:4c:f3:
91:6d:08:0b:08:0a:5f:0c:5a:be:ee:ad:5c:f0:f8:
fc:2a:18:7b:75:4c:c2:d5:f1:f0:b8:30:3e:02:69:
25:9c:ca:40:fc:5a:3e:27:64:e4:32:bf:a5:64:34:
dd:3d:6d:c9:96:2f:2e:7a:71:24:f7:1e:e9:11:17:
31:0b:b8:92:60:04:1f:b1:79:d1:ed:1d:4e:6d:3b:
7b:be:ff:2c:02:74:fb:25:98:fc:50:e1:de:aa:99:
f9:12:32:8f:74:15:4f:16:43:5e:8f:c3:b8:e0:d8:
10:12:ed:ed:ec:ef:bf:a5:07:a8:68:18:d8:14:29:
a2:b9:3e:ee:bb:33:27:45:93:f0:7d:75:f2:36:30:
17:e6:98:13:89:88:0a:d4:14:f6:42:f8:01:0e:0d:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9E:16:7A:A7:04:27:8E:79:0D:3B:D3:AF:99:40:BA:6D:6A:9B:E6
X509v3 Authority Key Identifier:
keyid:D3:32:D8:DC:24:88:E4:D2:02:B5:91:BE:E0:81:B6:93:88:18:95:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2d:bb:02:97:bd:a3:62:0a:75:eb:da:7d:fa:70:33:b4:f4:
7f:a8:9f:a9:fd:fc:0a:ba:89:81:8e:3b:bc:99:ba:42:0e:0f:
5b:18:18:71:61:37:eb:c4:ef:f1:2d:0f:fa:f7:cc:64:e0:fb:
39:c0:72:b3:75:28:c1:1f:22:f1:25:8a:c7:c6:5c:b6:50:c7:
29:5e:5c:8f:c7:f6:2b:6c:6b:82:e5:bc:f1:3b:c6:cb:6f:d8:
fc:ca:c1:50:66:c3:3b:d5:86:9b:08:3b:70:fe:5f:49:9d:66:
34:20:98:51:46:fc:2e:03:17:79:c4:c8:4e:69:45:d2:4f:dd:
9a:93:94:60:fb:31:66:f2:9d:09:9c:c9:1c:01:9d:4d:39:61:
94:d4:9f:8e:0d:14:90:1b:9e:7b:97:d2:e8:21:06:07:41:23:
66:7b:37:c1:3a:46:95:5c:5f:5c:be:4a:1a:6a:fb:5f:b7:0b:
2e:5d:22:ac:f6:8d:62:00:3e:ae:cf:52:ae:d0:3a:4f:16:c1:
c5:79:d8:bb:5c:e7:fb:1d:a9:c9:3f:1f:ee:03:89:c3:bb:c0:
56:a8:0e:e5:d1:59:ef:26:5e:95:d4:53:00:19:b3:cc:5d:d0:
79:95:38:70:9c:3f:67:f9:93:8c:24:75:06:a6:9a:70:05:b4:
0d:18:69:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:06 2026 by rpki-client