Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: GAoRifY1+K9/0ooxm0RyU7vL/nG/cwKz8oImgRYRzG4=
Subject key identifier: 5F:90:2A:EB:32:9F:0C:A6:0B:AD:8E:65:8C:DD:D4:AC:38:EA:CD:DA
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 59893AE1311D6F77A288C05F7B1E7A4E68457E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 03FB
Signing time: Tue 12 May 2026 15:56:17 +0000
Manifest this update: Tue 12 May 2026 15:51:17 +0000
Manifest next update: Wed 13 May 2026 16:59:17 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: x8r6E4msPYCwE/sP2ZEPZSs/ibCEFt8CpA+jthKxbHs=)
2: AS215828.asa (hash: gn0zvNq0jqiLUYK3MJlHlnirErp0oB8cq8E7u3vxlhE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:89:3a:e1:31:1d:6f:77:a2:88:c0:5f:7b:1e:7a:4e:68:45:7e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: May 12 15:51:17 2026 GMT
Not After : May 13 16:59:17 2026 GMT
Subject: CN=5F902AEB329F0CA60BAD8E658CDDD4AC38EACDDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:ef:4a:33:17:66:6a:d7:7b:93:6e:12:0a:
ac:fc:8c:f3:b2:b3:62:49:e3:4e:75:d3:b8:5a:64:
cf:a6:2e:07:8c:75:2f:cb:3f:5e:e8:d8:62:ce:37:
ac:3d:52:64:ce:a1:87:2d:57:d4:4a:e7:79:12:3c:
85:c1:3e:88:a2:7e:9d:e3:38:2d:3e:2c:cb:60:02:
c4:24:f1:5b:d4:9c:e8:eb:78:11:4d:4b:e2:8b:d5:
5b:64:59:1f:b4:ef:07:77:f5:83:2d:42:c9:b8:37:
0b:65:16:9b:0d:8a:18:52:50:53:9e:73:64:5b:69:
ec:17:dc:5a:74:48:f7:c2:85:3f:13:09:4d:48:ea:
cb:e8:0b:27:52:e5:f9:ca:06:fa:03:7d:ca:e8:ca:
17:38:05:5b:b0:56:4c:28:e9:64:cf:e9:1f:4c:ba:
19:69:d9:a2:0c:22:7f:b5:79:1d:d1:86:82:28:0c:
90:62:50:ab:7f:cb:98:07:06:f4:d2:d2:5a:ad:1f:
ad:56:06:b4:9f:bd:c7:3d:c8:81:11:8d:ad:42:1d:
55:4a:4f:aa:ec:91:0a:73:40:dc:86:82:cb:31:0d:
b3:aa:17:46:bb:f4:48:96:bb:92:ac:fb:04:20:0d:
33:90:ee:f2:30:a3:9d:ff:6c:39:4e:55:2d:47:55:
d2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:90:2A:EB:32:9F:0C:A6:0B:AD:8E:65:8C:DD:D4:AC:38:EA:CD:DA
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:67:fa:28:06:3e:05:5a:f1:a9:5a:3b:14:a3:37:89:11:01:
9c:6b:56:e9:c9:ca:2b:bb:f6:ef:6f:03:60:49:0a:3d:81:52:
99:16:40:65:9b:9d:43:90:3a:4d:46:47:28:97:f2:16:d2:ab:
b1:d8:24:57:62:89:58:67:db:86:77:12:76:c8:0e:97:76:29:
1d:66:55:8f:35:9d:71:68:dd:31:b3:f7:6e:62:8e:bb:74:46:
d7:b7:4e:40:d2:83:3f:d8:81:a5:e4:79:c6:4a:83:77:e1:b0:
8a:f3:4c:bb:f8:6a:76:f6:4d:a4:97:19:85:e8:0d:03:d6:cf:
62:1a:7e:2f:0d:40:09:22:c1:46:ed:bb:e9:5a:71:b9:ab:a3:
f6:b6:f4:41:08:ba:1e:36:fc:f8:90:b8:85:6d:0d:6c:4e:7c:
4b:43:70:b0:58:0c:a1:b7:78:02:0b:60:70:34:91:27:9c:5e:
fb:54:75:05:5c:5c:6c:e7:8c:7b:6f:0a:a6:8c:ac:44:53:60:
9e:ea:fc:03:76:23:18:68:e1:fa:fc:55:74:7e:de:aa:db:7b:
97:9d:e4:33:3c:8d:ca:fa:54:4c:bd:c7:29:a1:74:eb:e7:b4:
48:ff:7f:e9:b7:ce:cf:28:1b:2e:e6:fd:0b:84:32:08:a8:3d:
3e:ce:38:d0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWYk64TEdb3eiiMBfex56TmhFfhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDgyMTk2NDc0MTUwMThlNGZmZDNmMTFjMjdhODA3NTMw
ZDdiN2NmMTAeFw0yNjA1MTIxNTUxMTdaFw0yNjA1MTMxNjU5MTdaMDMxMTAvBgNV
BAMTKDVGOTAyQUVCMzI5RjBDQTYwQkFEOEU2NThDRERENEFDMzhFQUNEREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpQ+9KMxdmatd7k24SCqz8jPOy
s2JJ405107haZM+mLgeMdS/LP17o2GLON6w9UmTOoYctV9RK53kSPIXBPoiifp3j
OC0+LMtgAsQk8VvUnOjreBFNS+KL1VtkWR+07wd39YMtQsm4NwtlFpsNihhSUFOe
c2RbaewX3Fp0SPfChT8TCU1I6svoCydS5fnKBvoDfcroyhc4BVuwVkwo6WTP6R9M
uhlp2aIMIn+1eR3RhoIoDJBiUKt/y5gHBvTS0lqtH61WBrSfvcc9yIERja1CHVVK
T6rskQpzQNyGgssxDbOqF0a79EiWu5Ks+wQgDTOQ7vIwo53/bDlOVS1HVdKZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUX5Aq6zKfDKYLrY5ljN3UrDjqzdowHwYDVR0j
BBgwFoAU2CGWR0FQGOT/0/EcJ6gHUw17fPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzAvRDgyMTk2NDc0MTUwMThFNEZGRDNGMTFDMjdBODA3NTMwRDdCN0NGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJDR1dSMEZRR09UXzBfRWNKNmdIVXcx
N2ZQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m
YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvMC9EODIxOTY0NzQxNTAxOEU0RkZE
M0YxMUMyN0E4MDc1MzBEN0I3Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGf6KAY+BVrxqVo7FKM3
iREBnGtW6cnKK7v2728DYEkKPYFSmRZAZZudQ5A6TUZHKJfyFtKrsdgkV2KJWGfb
hncSdsgOl3YpHWZVjzWdcWjdMbP3bmKOu3RG17dOQNKDP9iBpeR5xkqDd+GwivNM
u/hqdvZNpJcZhegNA9bPYhp+Lw1ACSLBRu276Vpxuauj9rb0QQi6Hjb8+JC4hW0N
bE58S0NwsFgMobd4AgtgcDSRJ5xe+1R1BVxcbOeMe28KpoysRFNgnur8A3YjGGjh
+vxVdH7eqtt7l53kMzyNyvpUTL3HKaF06+e0SP9/6bfOzygbLub9C4QyCKg9Ps44
0A==
-----END CERTIFICATE-----
Generated at Wed May 13 02:24:11 2026 by rpki-client