Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
File: A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft (raw, json)
Hash identifier: f5fw3GkMTafZJiPTM2cjdIxiTAGWFKC2zHNylP8k4Fw=
Subject key identifier: 1C:7B:86:48:38:CF:8C:73:87:43:FB:62:F5:60:99:65:84:7B:4B:64
Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
Certificate issuer: /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Certificate serial: 3190C4AFD135561AC136A29CEE65862212EAAD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
Manifest number: FF
Signing time: Wed 25 Mar 2026 21:19:51 +0000
Manifest this update: Wed 25 Mar 2026 21:14:51 +0000
Manifest next update: Fri 27 Mar 2026 00:34:51 +0000
Files and hashes: 1: AS214757.asa (hash: KJVkb/rZusffYD5r7h9TWmgVTQ05c1gZ3oofLZ7qbQY=)
2: A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl (hash: uYXS0Tj5LZeJ+j7LUPh6eGZVTr/l/qzMo0q4F7z7Ogs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:90:c4:af:d1:35:56:1a:c1:36:a2:9c:ee:65:86:22:12:ea:ad:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Validity
Not Before: Mar 25 21:14:51 2026 GMT
Not After : Mar 27 00:34:51 2026 GMT
Subject: CN=1C7B864838CF8C738743FB62F5609965847B4B64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:80:a1:14:86:06:1f:13:cc:73:39:e7:d1:
e0:f3:7b:0a:c7:46:d0:d7:93:1f:be:77:02:ee:f3:
8c:b7:50:85:a8:59:bd:4b:bb:d3:e6:bd:34:1d:5f:
9e:19:9d:5a:69:af:3e:a9:05:69:f0:91:ce:fa:8d:
44:7b:5e:f6:1e:10:b2:86:15:d2:1d:c1:f3:f8:9b:
e2:64:92:93:06:59:66:b3:31:b6:41:26:76:69:db:
6e:70:82:ec:ea:5c:ef:41:43:1d:68:60:8e:15:a6:
87:b3:07:2f:f8:47:91:73:52:9f:4c:46:f3:e1:fc:
17:6a:ad:b5:99:be:04:d9:07:ea:59:5a:9d:c5:23:
ed:35:ef:06:0f:27:8d:6e:48:89:40:7b:a5:1b:d1:
08:46:ad:b4:b9:07:33:4b:f3:9c:9c:8f:33:2c:d9:
66:12:d2:e1:2f:1e:f7:0d:3b:78:65:81:47:8b:0f:
be:d7:93:4c:3d:f2:cf:95:a0:bd:da:9f:46:17:32:
c9:b3:cc:6e:f7:b9:34:9e:cd:cf:05:d2:90:2d:81:
f0:37:07:63:97:f3:30:54:29:4e:b3:63:02:03:15:
f0:b8:cc:82:bd:44:6a:d8:87:c1:67:f9:8b:02:5d:
8b:92:d5:41:02:1a:7c:b4:be:cf:ae:25:e6:22:62:
4d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7B:86:48:38:CF:8C:73:87:43:FB:62:F5:60:99:65:84:7B:4B:64
X509v3 Authority Key Identifier:
keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:76:aa:37:34:f7:96:f6:8c:74:44:cb:7d:f2:d0:53:86:9b:
0b:71:9a:c2:b6:27:81:6b:ad:95:d2:7c:1c:31:1b:fd:d3:8d:
df:36:c8:4b:cd:63:f1:18:28:f0:ef:f0:5c:b4:08:01:53:6b:
d1:25:e2:bc:cc:04:ac:2f:90:a7:ad:4f:21:b4:56:6b:d2:fe:
eb:de:ad:77:3a:aa:58:dd:49:27:4e:6b:f3:b3:cb:e8:83:3b:
88:a4:e3:05:bb:53:6b:9e:8d:27:2c:29:17:9e:5d:6d:15:0f:
83:2e:21:60:f5:b9:76:f8:e2:68:2d:15:c9:59:ec:8e:c6:c1:
b2:55:ca:94:83:69:db:e6:cb:76:10:53:c1:89:c7:00:fb:9f:
9e:14:9c:d9:80:b0:9e:87:02:68:f1:81:2f:c9:10:60:cf:59:
66:9f:ec:48:2d:2c:18:b4:2c:4b:11:9b:c0:73:9e:5c:a6:f9:
ef:44:67:7d:1e:d3:60:b7:ec:26:e2:3a:88:c2:3e:e8:20:e2:
e8:b9:e1:7d:18:0c:11:db:67:6c:b4:dc:56:0a:05:19:ef:ee:
70:41:d8:69:58:bb:6d:1d:c5:5f:b3:11:2e:3f:33:ca:14:23:
5e:59:a2:c2:7b:d0:b6:cb:a0:b9:e1:fd:0e:6b:a5:02:75:ec:
a4:56:f3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:26 2026 by rpki-client