Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
File: A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft (raw, json)
Hash identifier: 1RwBns7nb0GPnDirWvK9MTFCCNS9ccOHD8E4FJzJCP4=
Subject key identifier: 52:0D:C5:6F:20:4F:8C:D5:D0:7A:DC:A6:4A:D6:20:FD:FA:10:46:85
Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
Certificate issuer: /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Certificate serial: 6CEA81BAC4E500E8176E75CF67FB766F42C89AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
Manifest number: 01A0
Signing time: Thu 23 Jul 2026 14:10:11 +0000
Manifest this update: Thu 23 Jul 2026 14:05:11 +0000
Manifest next update: Fri 24 Jul 2026 16:41:11 +0000
Files and hashes: 1: A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl (hash: pVbYhe8WuRScAAooZdcwjJT9rpTXDsBPMbKIQzW64IM=)
2: AS214757.asa (hash: cK+EaCNAxH/dOZxyVs5pRHqC0BRXpLP1uxavmIfztZE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ea:81:ba:c4:e5:00:e8:17:6e:75:cf:67:fb:76:6f:42:c8:9a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Validity
Not Before: Jul 23 14:05:11 2026 GMT
Not After : Jul 24 16:41:11 2026 GMT
Subject: CN=520DC56F204F8CD5D07ADCA64AD620FDFA104685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:1e:a0:06:9c:25:1e:e4:2f:87:e2:ec:03:
4a:bc:ce:1e:7b:55:22:c0:fd:02:1b:0b:d1:c3:c9:
90:90:21:12:e8:7d:6e:c7:93:6b:46:b3:26:22:96:
f1:87:75:5a:c8:8d:ba:d0:f1:2a:85:3a:1e:31:6f:
e1:aa:b6:41:6e:49:9a:21:7c:58:a5:90:b9:86:04:
42:50:ce:d1:73:32:2f:5d:28:79:bf:c3:b9:fe:84:
5a:9e:db:86:99:1b:c6:95:73:d6:96:69:47:aa:4b:
9e:4e:ce:a8:51:3f:42:07:73:7d:a1:da:98:c6:51:
94:ab:a4:2e:1b:3a:27:14:ee:5d:95:28:11:6e:a1:
39:8e:a6:bd:27:83:9b:f8:ca:2d:0b:e7:51:90:ac:
24:68:8b:b6:9f:bb:89:c8:ad:b3:50:90:2a:0e:1b:
be:7b:1c:f6:dd:21:bb:56:15:82:a8:2f:65:cd:42:
5d:a0:f2:6f:c9:3a:0d:0f:bd:48:28:5d:6c:47:0f:
5b:bf:73:62:a9:3d:7d:c1:c0:13:cb:c1:5d:3a:30:
6f:e1:77:95:d8:2a:69:66:38:d8:aa:2f:d2:e6:d5:
f9:7b:4f:3f:bf:fa:6c:29:fb:01:af:b3:85:b8:5a:
35:3d:b4:62:a1:76:fd:76:20:39:80:ba:e5:4a:60:
61:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0D:C5:6F:20:4F:8C:D5:D0:7A:DC:A6:4A:D6:20:FD:FA:10:46:85
X509v3 Authority Key Identifier:
keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:c3:3f:2c:22:c5:e8:d1:e8:6d:5e:35:33:5c:28:66:2d:b1:
d9:41:ef:8a:55:88:30:a4:38:37:3b:93:4a:f6:5f:e6:8d:76:
52:c4:77:31:f6:4c:a7:85:96:b3:aa:ad:ab:74:ff:9b:b8:f8:
f6:d3:7d:73:22:f2:e4:cc:0b:55:02:db:85:5f:b7:35:a9:ea:
f4:02:44:6d:49:a2:ce:0d:7e:2b:c7:80:fa:11:2b:0b:59:68:
08:39:26:77:9f:ef:08:b6:b8:ed:47:e5:a5:07:15:86:14:89:
f7:4e:e4:ac:69:37:1a:7c:d6:03:cd:74:ef:5f:53:31:ff:e6:
63:0b:ee:54:7f:45:0c:c5:d6:34:7e:82:fd:45:fc:31:d8:d6:
7a:d9:a4:33:3a:f1:01:ad:45:2b:80:5b:79:45:d1:b5:15:c5:
54:6f:98:3f:b4:02:44:c4:6d:1a:6c:67:b8:d5:c9:d1:52:18:
3e:6b:d6:a7:e2:3a:6f:ae:2a:56:b5:b9:9e:df:cc:1f:e1:02:
4a:1c:c0:e8:19:89:a2:58:a6:2b:5c:60:50:c0:7a:89:64:9f:
e2:fd:c9:fd:cc:59:3d:c8:64:f7:00:84:cf:0d:c1:68:f0:8d:
51:fa:57:e1:0e:7f:bf:0c:36:ad:a6:48:1d:45:b6:3d:dc:6f:
f1:9f:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:30 2026 by rpki-client