Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
File: D332D8DC2488E4D202B591BEE081B6938818959F.mft (raw, json)
Hash identifier: icSSyA6TP8l2ItMpzwwx/owAXCS4Y97cQJzFyVfqako=
Subject key identifier: 81:06:0A:E3:53:A6:59:A3:2D:B4:31:65:BB:79:89:DB:EF:A1:98:04
Authority key identifier: D3:32:D8:DC:24:88:E4:D2:02:B5:91:BE:E0:81:B6:93:88:18:95:9F
Certificate issuer: /CN=d332d8dc2488e4d202b591bee081b6938818959f
Certificate serial: 62BDA6D69EE7A783CFC9EF5FF4D34B3D7AF7D9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
Manifest number: 30
Signing time: Sat 28 Mar 2026 09:04:02 +0000
Manifest this update: Sat 28 Mar 2026 08:59:02 +0000
Manifest next update: Sun 29 Mar 2026 09:30:02 +0000
Files and hashes: 1: D332D8DC2488E4D202B591BEE081B6938818959F.crl (hash: XIcVVI8kSDz9ATB1rbZdgQnUcDQw42vgnDNqO+37FoI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:bd:a6:d6:9e:e7:a7:83:cf:c9:ef:5f:f4:d3:4b:3d:7a:f7:d9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d332d8dc2488e4d202b591bee081b6938818959f
Validity
Not Before: Mar 28 08:59:02 2026 GMT
Not After : Mar 29 09:30:02 2026 GMT
Subject: CN=81060AE353A659A32DB43165BB7989DBEFA19804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:15:0e:20:6f:fa:45:35:1e:ac:aa:7e:4c:aa:
cf:de:6d:bd:a1:fa:87:c2:81:97:a0:6e:69:18:5a:
e9:aa:26:4d:ed:c2:aa:7b:87:89:82:bf:53:72:a0:
24:08:bd:19:32:4d:f1:74:ca:a7:9e:43:f5:83:ff:
60:50:da:c1:b9:2c:28:99:34:18:a3:10:c1:50:c1:
04:64:cc:40:2c:90:47:20:d9:32:4c:e5:87:bc:90:
16:a5:7f:22:e8:83:b2:cd:43:e1:24:ef:3d:32:a3:
7a:69:27:0e:d7:4c:ad:4f:2b:3f:21:91:9f:24:e6:
44:c8:57:97:16:14:21:d8:ff:45:61:e5:74:df:d2:
56:6c:69:c5:52:be:53:0e:d0:42:d1:b8:23:16:ce:
71:86:17:d1:df:a6:05:e1:c0:db:1b:93:e1:61:4f:
23:68:27:55:28:52:db:76:c5:92:83:fb:8c:6b:8c:
c2:bd:96:2c:ab:d5:17:85:a0:f8:5b:79:44:7d:28:
51:28:3f:0a:f0:aa:36:ea:2b:31:97:80:57:a9:e3:
4e:fb:12:65:63:ca:87:09:59:9e:cb:9b:af:c9:77:
f2:39:fb:81:15:63:88:8a:36:26:b4:ee:a1:13:fa:
77:ed:e1:f8:25:fa:bc:c1:9c:56:60:44:54:e9:06:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:0A:E3:53:A6:59:A3:2D:B4:31:65:BB:79:89:DB:EF:A1:98:04
X509v3 Authority Key Identifier:
keyid:D3:32:D8:DC:24:88:E4:D2:02:B5:91:BE:E0:81:B6:93:88:18:95:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zLY3CSI5NICtZG-4IG2k4gYlZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/D332D8DC2488E4D202B591BEE081B6938818959F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:45:69:5f:fb:81:31:f8:98:77:01:53:08:f9:06:5e:6e:76:
8a:95:bc:c0:47:5d:87:44:c9:bc:26:da:94:08:0b:eb:13:0e:
f3:56:ae:fb:f8:75:30:27:dc:75:02:4f:8b:0c:72:91:47:2a:
9b:04:5c:b2:d4:a3:b7:f8:bc:41:bb:b6:c0:d9:3d:53:9d:32:
1a:61:73:bf:ce:9d:58:30:2e:e0:81:ea:d4:e4:b3:c8:3b:17:
7f:97:ed:b5:67:0d:3a:87:3b:4c:5b:8c:a6:61:dc:90:78:9f:
71:f3:29:85:c8:23:7b:5f:7b:84:0b:6f:d7:7e:d4:37:e8:72:
fa:3d:a9:9a:08:bb:1e:4a:e9:de:79:55:dc:91:13:0f:fc:da:
ab:26:aa:5e:39:b1:2d:e9:4e:89:bd:3a:43:2a:6d:3e:ba:14:
e9:ec:d6:97:49:2d:57:43:00:97:e1:12:f6:1c:d6:4f:c9:e3:
70:d4:e3:a8:ef:4d:c6:3b:7a:08:21:5b:a5:36:d9:bd:6b:58:
29:c5:6f:d8:1b:40:d2:9a:bd:f5:d2:47:1a:b5:91:34:08:a4:
7c:cd:20:f1:6c:9f:19:33:ea:b2:73:65:b7:7b:61:eb:a5:68:
92:11:21:42:8d:1c:a9:11:ad:71:59:0f:ac:9e:83:e8:95:b3:
be:58:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:08 2026 by rpki-client