Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: h/JCUQfsvztV5HhCI4DwKHMBvX0uHysXMLW9fOSaEGI=
Subject key identifier: 8A:1E:1B:91:7B:6E:1C:DF:03:74:F6:52:8D:37:E2:A8:61:E8:E7:A5
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 4B535BB5F6E23357BCBF62BE393736789AE5922F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 03C6
Signing time: Thu 24 Sep 2026 08:17:43 +0000
Manifest this update: Thu 24 Sep 2026 08:12:43 +0000
Manifest next update: Fri 25 Sep 2026 10:37:43 +0000
Files and hashes: 1: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
2: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: JVNFmdf8gDh2oKhZBWZYvErO9gOxExnUaBvFi8xUmK4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:53:5b:b5:f6:e2:33:57:bc:bf:62:be:39:37:36:78:9a:e5:92:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Sep 24 08:12:43 2026 GMT
Not After : Sep 25 10:37:43 2026 GMT
Subject: CN=8A1E1B917B6E1CDF0374F6528D37E2A861E8E7A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:b0:db:15:8d:02:45:d2:86:2e:44:8b:b5:
91:74:e1:f7:e2:69:e8:13:db:9f:e6:e6:e1:4c:1e:
22:ec:4f:53:14:ea:bd:bf:eb:35:69:87:46:73:f1:
66:41:0d:cb:c0:3d:82:b6:c0:08:52:d6:8b:6e:b6:
62:6e:f7:3f:e7:ee:b8:a0:dc:b9:a9:a7:7e:8e:2f:
5a:74:30:c8:cd:98:07:69:f1:1e:6a:66:b1:cf:ef:
81:78:7e:e9:74:29:1b:e8:1d:20:44:ff:06:52:0f:
5d:44:c7:ab:de:ae:ec:35:39:5d:2e:e9:2e:10:b5:
84:de:cb:22:e9:3e:2b:34:42:ba:18:4a:54:a4:70:
e1:6f:7d:f4:c4:d8:a2:f3:67:f3:40:55:3e:ba:58:
d8:a8:7b:45:94:25:c4:e1:0d:9d:2b:ae:95:b6:94:
c1:5c:96:0c:0f:c7:77:88:10:ed:7e:43:18:73:25:
38:ff:86:e7:58:d0:5e:f1:5a:bb:5e:f3:eb:10:f6:
e9:e9:01:7a:9b:62:f1:c0:4c:60:91:d7:21:76:8b:
d1:84:40:b4:ad:6c:f8:3a:ee:9a:f6:e7:6c:a3:ca:
8c:8a:6c:8c:48:29:a3:34:85:61:47:ca:0a:df:b6:
b7:3b:55:3e:4d:30:ca:ef:ba:86:33:73:ff:d9:61:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:1B:91:7B:6E:1C:DF:03:74:F6:52:8D:37:E2:A8:61:E8:E7:A5
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f3:44:c4:d5:36:6e:df:92:e2:13:f8:89:d4:11:fd:02:aa:
a8:4d:43:c6:c6:71:0f:66:12:88:f8:67:23:89:3f:7d:5d:12:
41:52:cd:89:81:3e:86:ab:8b:16:30:42:73:ab:e4:7d:55:28:
55:a0:3a:89:80:fe:0b:6b:97:3a:d6:4e:dc:04:66:72:d5:58:
9e:d7:61:aa:ec:b9:16:c3:ca:36:f0:33:d9:fe:5e:2f:92:f1:
c6:b8:db:11:ae:fe:20:2b:3f:05:cd:aa:13:69:62:d9:bc:2a:
56:4e:59:ec:da:4b:5d:df:ee:84:5b:b6:1d:9e:8a:4c:b7:10:
ee:b6:4c:38:f2:7b:84:2d:6b:7b:d3:86:97:3c:bd:f7:2c:2c:
2c:98:f1:ca:7c:67:81:08:bf:21:b9:2c:3e:c5:81:75:32:22:
f6:12:fc:42:b0:f4:ef:e2:85:30:e7:2f:f4:8c:b4:09:22:19:
62:db:0b:c9:34:93:4f:9e:b3:de:a4:a2:40:f2:4c:aa:40:57:
6d:8e:68:0b:c8:45:82:7a:af:dd:71:21:a5:09:11:94:50:d0:
35:b9:6c:2c:b9:dc:1c:4b:ee:b1:ab:cb:88:1f:48:a6:f8:4c:
91:17:ba:e8:90:59:e4:e1:da:78:fb:a8:f6:f5:16:85:e9:f2:
37:86:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:04:51 2026 by rpki-client