Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: WgoOlenFpJAv1NwXUM+BDxFfB7EPdOyL4w9tWGrlRy4=
Subject key identifier: 29:9F:F0:FC:DD:94:EE:F4:EA:2E:BA:AD:2D:7A:12:FB:DA:01:BF:DE
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 27F9D4EC6B191A99F497FA854D415EFF90513117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 02D2
Signing time: Sat 28 Mar 2026 05:56:14 +0000
Manifest this update: Sat 28 Mar 2026 05:51:14 +0000
Manifest next update: Sun 29 Mar 2026 08:47:14 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: zh4aU2koZmsrJYWm0wyjPeQzmqldLeDCE29Ctodu4bU=)
2: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f9:d4:ec:6b:19:1a:99:f4:97:fa:85:4d:41:5e:ff:90:51:31:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Mar 28 05:51:14 2026 GMT
Not After : Mar 29 08:47:14 2026 GMT
Subject: CN=299FF0FCDD94EEF4EA2EBAAD2D7A12FBDA01BFDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:73:77:8f:a7:37:37:f8:d4:42:98:08:c8:c9:
12:bf:59:2e:60:88:10:6f:78:4a:0a:55:6a:e2:b4:
cd:b9:ba:12:c4:f5:17:06:98:9b:1b:f2:ce:3c:d4:
24:98:a1:9e:ef:11:cb:b4:db:5b:9b:0d:97:0e:8a:
d7:ce:ff:9f:bc:c1:ea:94:67:c1:80:9e:09:2b:7b:
94:82:c0:67:50:ea:9d:9f:e5:71:55:33:f1:b4:f2:
8d:7d:8e:76:50:b1:6d:e3:ba:55:c4:1c:b5:07:9d:
5e:d7:10:fc:db:3c:62:58:17:45:88:ef:ae:30:1b:
af:87:8f:6f:c1:75:64:78:98:72:20:6d:de:14:0b:
3e:a6:df:8e:25:d9:21:4d:d1:8a:4d:74:8d:e5:10:
45:c6:f8:ff:fd:96:e1:5d:f1:7f:f9:c5:a4:a8:0b:
04:13:a8:97:a9:bc:0d:7a:c0:6e:2c:bc:47:d8:49:
7b:db:d8:36:64:39:12:a7:8f:e3:7e:8b:c0:b1:e0:
f1:52:d1:4d:02:c1:b5:dd:66:f7:13:12:f6:b5:aa:
9c:f2:00:7e:2f:19:b5:be:67:73:48:ac:ec:5a:0f:
76:f3:d5:71:f4:7a:7e:98:32:ad:0b:b7:97:63:9f:
14:78:c6:2f:fc:57:2d:c9:5f:1d:fd:e0:9c:4f:73:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9F:F0:FC:DD:94:EE:F4:EA:2E:BA:AD:2D:7A:12:FB:DA:01:BF:DE
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b0:99:5a:0b:12:65:78:a4:c3:8f:9c:80:a0:20:8b:9a:f6:
75:fa:3c:73:b8:68:c1:d4:20:08:03:f2:5a:37:76:34:04:72:
56:42:42:11:16:25:56:01:53:a7:ed:bf:4a:f9:7f:94:dd:40:
df:3d:73:39:24:ed:98:57:e1:d8:4e:2a:10:ef:e2:8d:a5:94:
9b:c8:bb:c7:9d:45:7a:d8:7d:4e:09:e7:1a:bb:fb:a0:ac:c9:
f4:79:73:3f:ed:29:c1:67:93:d7:4d:04:22:ce:8d:1f:71:76:
14:9a:42:83:8c:21:1e:30:96:95:08:43:64:bb:42:32:5e:f2:
49:ce:ac:3f:c1:d5:61:18:f6:c3:f8:88:b3:99:9b:53:4d:61:
fc:c2:cf:e4:5d:35:9c:7f:b4:33:58:5c:8d:2e:b8:2f:e9:80:
35:c5:f4:10:a3:80:1c:d7:1d:cb:de:cc:bb:3c:6a:08:1f:17:
34:0e:bb:3a:c2:30:5a:9e:1a:c4:3a:48:5f:59:1b:35:17:75:
4b:b6:f4:71:1c:43:01:c2:72:79:ae:ff:f7:d8:e3:eb:23:f5:
80:eb:87:15:5f:3d:de:4d:f7:f7:d1:b3:36:c9:a8:b2:76:f7:
e0:80:90:49:dd:25:5f:de:0e:ae:f4:ba:e0:e1:af:62:6e:c7:
d8:a4:49:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:41 2026 by rpki-client