Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: RimsR3uNwUQXU35Oy3qvF/RJ5nn4t9RGWHQJDwQtl1M=
Subject key identifier: B1:5D:6A:2D:55:A3:3B:E6:34:5E:5D:AB:E5:62:E8:59:F8:2D:F7:DF
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 71C8E5B0B5679B097333CF4155A65940EBE4D0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 0310
Signing time: Tue 12 May 2026 21:38:02 +0000
Manifest this update: Tue 12 May 2026 21:33:02 +0000
Manifest next update: Thu 14 May 2026 00:25:02 +0000
Files and hashes: 1: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
2: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: mCEgl7kuxM5yszYvzS3dLRIlGAdXTnt8LjLDmONqgiE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c8:e5:b0:b5:67:9b:09:73:33:cf:41:55:a6:59:40:eb:e4:d0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: May 12 21:33:02 2026 GMT
Not After : May 14 00:25:02 2026 GMT
Subject: CN=B15D6A2D55A33BE6345E5DABE562E859F82DF7DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:8e:11:c7:96:34:29:a1:12:13:28:12:3c:
d9:c6:0d:83:90:71:be:0e:6d:b3:33:5e:93:af:e5:
2b:c2:e7:71:ba:16:4c:a6:7d:98:26:74:0d:b5:de:
f6:86:7a:bc:9b:15:ec:c3:34:59:36:89:1f:92:bd:
e8:75:8f:a5:c2:98:e2:bb:d3:40:f4:d2:22:01:e4:
70:9c:90:f2:04:cd:09:b4:77:57:a3:57:88:f8:43:
1b:7b:20:e9:b8:43:ed:9e:17:de:88:1c:8a:40:e7:
a1:7c:af:1c:66:48:2a:d7:ee:6e:ab:38:80:41:71:
a6:08:b5:85:05:c7:e0:16:30:cb:ba:b9:0a:5c:50:
52:23:f3:3a:f6:35:fc:01:91:6f:a6:8d:18:bc:90:
da:d5:a3:f4:62:69:4c:1a:ca:c1:be:26:bd:c4:11:
5a:1c:56:1e:1a:52:03:c3:c7:31:19:34:06:bd:35:
53:4c:95:04:01:0a:fa:b6:41:ee:07:86:c1:b2:5d:
cc:d3:e6:ee:a3:96:60:d0:2e:88:59:8f:65:e6:3b:
2b:9e:bd:a8:e0:99:be:8d:da:e8:6f:87:13:b9:ec:
a5:32:21:be:4c:62:3e:11:d1:65:1a:22:86:51:5d:
fc:3e:17:41:68:18:48:34:4a:4f:c6:73:8e:b5:f2:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5D:6A:2D:55:A3:3B:E6:34:5E:5D:AB:E5:62:E8:59:F8:2D:F7:DF
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:41:15:3e:7a:be:a6:7e:6a:87:10:b8:44:f0:0f:5b:2f:3b:
d0:e6:4f:86:1e:43:74:73:b3:f0:af:cc:29:62:ef:77:5b:bb:
70:ea:14:e4:9c:fb:f6:81:bb:be:ce:a3:00:f4:74:99:91:ce:
64:cd:12:8d:43:f8:2a:2c:70:09:9b:9e:88:55:e6:7a:e2:1f:
52:24:4a:35:b5:dd:88:dc:e8:7c:04:af:02:f0:2d:a6:ff:70:
0b:b0:06:af:36:6b:be:1d:a7:44:cd:1f:0f:e0:24:03:f9:7e:
f0:3d:bd:07:4b:13:f5:3e:4e:fd:1a:36:c4:b4:60:d3:b6:00:
c4:7e:7b:b0:b9:cf:7b:c2:7f:a1:79:83:7d:53:78:68:ac:23:
87:d7:ab:7b:6e:76:3d:0d:d7:d2:9f:50:f7:fd:91:ac:9f:0a:
02:10:2e:ec:8d:52:40:3d:fb:f9:b8:93:c9:5d:04:f2:9b:66:
ef:cc:39:a8:1d:bf:89:49:c4:75:1f:27:49:d5:a8:6f:5b:e8:
eb:37:e3:de:b9:04:1e:61:8f:7e:62:87:20:d8:a0:93:23:07:
5c:a1:44:94:f1:ce:0d:ad:0d:cc:2f:54:3f:db:82:e1:59:a0:
2c:5e:4c:b5:46:b2:0d:7f:38:70:af:b5:29:57:ac:d2:1b:42:
12:4b:8d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:29 2026 by rpki-client