
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File: 193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier: Mq4yG0TvP61FOopoeVVVsuAR4P390qj/YtD4gO/0mE0=
Subject key identifier: 32:A7:75:3E:86:3A:6F:F4:BB:6D:79:DC:E8:0F:E0:00:62:39:F7:05
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer: /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial: 38175CF8DBF5A5E7D8563DFBB8E804E7A5BC94E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number: 0320
Signing time: Thu 26 Mar 2026 15:00:57 +0000
Manifest this update: Thu 26 Mar 2026 14:55:57 +0000
Manifest next update: Fri 27 Mar 2026 16:35:57 +0000
Files and hashes: 1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: f33JWFRWOitRvYzrvjbxABYy7vkLx8e/4K2J/QEbWV4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:17:5c:f8:db:f5:a5:e7:d8:56:3d:fb:b8:e8:04:e7:a5:bc:94:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
Validity
Not Before: Mar 26 14:55:57 2026 GMT
Not After : Mar 27 16:35:57 2026 GMT
Subject: CN=32A7753E863A6FF4BB6D79DCE80FE0006239F705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:37:a6:30:ea:08:33:8e:01:3c:6c:b6:29:
b9:c8:2d:13:be:32:c4:fd:19:f9:39:6f:2d:07:ca:
10:45:8d:14:70:d4:d8:7b:7a:94:e8:48:04:b0:88:
84:7b:02:28:43:72:77:ee:f4:a0:82:bc:22:b3:51:
26:f2:4e:d7:26:6e:4c:c1:b7:b0:54:86:76:da:bb:
b6:10:ef:2b:d6:df:08:3d:c6:5e:3d:ee:87:9f:3a:
94:e1:8f:f4:7d:f7:7d:6d:08:22:9b:bc:ef:11:a9:
48:51:06:75:e7:1a:c7:4b:b6:20:4c:bc:8b:d9:50:
92:54:b6:72:4c:58:cd:b0:ce:f5:62:d5:2a:df:e8:
a4:d7:4f:a0:71:34:72:97:b7:d1:0c:db:89:2b:db:
87:e6:71:22:6c:30:f5:b5:30:b9:97:7a:7d:4f:dc:
c7:ca:2e:20:64:8d:00:23:ec:2c:5f:ad:b7:25:18:
79:4f:f6:11:53:42:0e:d0:35:5c:f5:55:95:88:89:
e7:86:9f:cf:79:9a:a1:de:15:9f:62:68:78:83:45:
08:ae:f6:4f:4d:d2:5c:4e:93:61:1c:af:d4:6f:c1:
08:fb:dd:d4:68:e4:f1:e1:93:ce:65:b2:67:35:e9:
d3:48:dd:3f:23:84:6c:fb:5b:93:cd:55:e9:61:49:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A7:75:3E:86:3A:6F:F4:BB:6D:79:DC:E8:0F:E0:00:62:39:F7:05
X509v3 Authority Key Identifier:
keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5e:26:52:ba:dd:45:db:94:33:2c:1b:be:e8:00:05:ab:1d:
b3:2f:80:3b:7f:57:7a:42:ad:5e:a5:ab:23:32:d7:a9:a4:3d:
94:f3:a8:8c:ff:5e:80:27:8a:29:93:44:f1:46:e9:b4:71:66:
01:05:2c:68:43:18:16:7d:c0:00:24:ff:76:73:3c:77:bd:39:
93:04:20:3b:5a:76:13:97:9a:59:84:24:4c:d8:16:4d:ca:31:
b4:51:60:ce:ed:9d:34:70:c7:3b:4c:14:1c:76:41:17:b9:9d:
92:90:01:e9:f0:c7:20:a4:45:30:9b:85:15:9e:38:b8:a5:69:
7b:b0:a0:67:87:e4:07:41:62:c7:e5:d5:df:78:3b:b8:7a:47:
cf:13:96:9d:40:47:80:64:57:cc:78:2c:b2:8c:54:c3:09:b6:
8a:6a:1a:8d:a8:59:c0:af:1a:05:63:ee:53:1c:3a:9d:19:b8:
90:a8:ab:b2:38:cb:ec:af:45:02:d6:d3:ab:0d:c8:46:72:4e:
55:56:07:3d:62:cd:cc:24:cc:3d:e4:c8:9d:70:b1:06:82:1c:
9f:54:b8:af:e5:df:44:90:6e:32:8d:12:6f:46:b5:a0:fe:08:
73:18:e8:6c:f7:97:7c:5e:c9:15:90:26:5a:45:9e:71:3f:b2:
77:58:aa:cd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOBdc+Nv1pefYVj37uOgE56W8lOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkzYjk3MjY0NjY1M2M4ODZkNDAwMWNkYWQ3M2VjNGU0
NzNkYTE3MzAeFw0yNjAzMjYxNDU1NTdaFw0yNjAzMjcxNjM1NTdaMDMxMTAvBgNV
BAMTKDMyQTc3NTNFODYzQTZGRjRCQjZENzlEQ0U4MEZFMDAwNjIzOUY3MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY2DemMOoIM44BPGy2KbnILRO+
MsT9Gfk5by0HyhBFjRRw1Nh7epToSASwiIR7AihDcnfu9KCCvCKzUSbyTtcmbkzB
t7BUhnbau7YQ7yvW3wg9xl497oefOpThj/R9931tCCKbvO8RqUhRBnXnGsdLtiBM
vIvZUJJUtnJMWM2wzvVi1Srf6KTXT6BxNHKXt9EM24kr24fmcSJsMPW1MLmXen1P
3MfKLiBkjQAj7CxfrbclGHlP9hFTQg7QNVz1VZWIieeGn895mqHeFZ9iaHiDRQiu
9k9N0lxOk2Ecr9RvwQj73dRo5PHhk85lsmc16dNI3T8jhGz7W5PNVelhSSs9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMqd1PoY6b/S7bXnc6A/gAGI59wUwHwYDVR0j
BBgwFoAUGTuXJkZlPIhtQAHNrXPsTkc9oXMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk
OGVmLzAvMTkzQjk3MjY0NjY1M0M4ODZENDAwMUNEQUQ3M0VDNEU0NzNEQTE3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0dUdVhKa1psUElodFFBSE5yWFBzVGtj
OW9YTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MmM0MDVmMS1j
MzJkLTQ3Y2UtODk0My0wNzUyZWQxM2Q4ZWYvMC8xOTNCOTcyNjQ2NjUzQzg4NkQ0
MDAxQ0RBRDczRUM0RTQ3M0RBMTczLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACl4mUrrdRduUMywbvugA
Basdsy+AO39XekKtXqWrIzLXqaQ9lPOojP9egCeKKZNE8UbptHFmAQUsaEMYFn3A
ACT/dnM8d705kwQgO1p2E5eaWYQkTNgWTcoxtFFgzu2dNHDHO0wUHHZBF7mdkpAB
6fDHIKRFMJuFFZ44uKVpe7CgZ4fkB0Fix+XV33g7uHpHzxOWnUBHgGRXzHgssoxU
wwm2imoajahZwK8aBWPuUxw6nRm4kKirsjjL7K9FAtbTqw3IRnJOVVYHPWLNzCTM
PeTInXCxBoIcn1S4r+XfRJBuMo0Sb0a1oP4IcxjobPeXfF7JFZAmWkWecT+yd1iq
zQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:25 2026 by rpki-client