Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: AaNLIxUoW2t1ttEx9XYYQF1BIF25AOGBLHzWRQV8tGw=
Subject key identifier: E7:DD:A5:23:74:4B:6A:5C:D4:22:54:31:87:50:39:DD:80:20:3F:6A
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 0ECD25D7863010C7A4BABE1D0890A0079D004A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 04B8
Signing time: Thu 24 Sep 2026 00:43:52 +0000
Manifest this update: Thu 24 Sep 2026 00:38:52 +0000
Manifest next update: Fri 25 Sep 2026 02:43:52 +0000
Files and hashes: 1: AS215828.asa (hash: aLfEnni+8YGsFkiwicZpetRmsooIvHjNGHfRPX60CaA=)
2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: eR9DWRQm11oOYBmtdwioHxR5Hp7wQAfottPj2Q35v3s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:43:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:cd:25:d7:86:30:10:c7:a4:ba:be:1d:08:90:a0:07:9d:00:4a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Sep 24 00:38:52 2026 GMT
Not After : Sep 25 02:43:52 2026 GMT
Subject: CN=E7DDA523744B6A5CD4225431875039DD80203F6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:a2:43:a7:08:96:7e:71:70:40:9d:a2:67:
26:37:31:8f:f7:87:c1:24:94:ac:83:e2:73:af:76:
4b:58:5d:40:52:6c:f9:dc:c7:a0:90:a0:85:c8:5e:
f9:8a:a7:ad:29:65:43:4d:fc:4e:69:07:12:10:7e:
12:e3:7c:a6:8f:b4:13:3c:9e:ff:9c:53:14:e8:a8:
95:dd:b5:7b:90:f7:1c:c1:8b:a0:d9:86:97:d1:0c:
c3:1b:60:74:68:e7:c9:08:6b:b9:8c:d9:b6:c4:63:
f0:2c:7d:79:43:59:24:81:13:e1:85:6d:40:72:84:
ba:bc:13:cd:f7:7d:5d:b0:3b:8d:6d:5d:57:e8:0e:
07:c6:25:12:1a:95:15:48:89:fa:22:72:0f:b7:f4:
52:1c:38:d2:2c:fa:4f:bc:d8:97:2d:fe:d2:c4:6b:
57:cc:93:10:cf:da:15:ab:64:11:fd:6a:ef:9e:56:
e0:e8:a5:e9:5f:73:92:d1:fd:41:d5:86:6b:a5:69:
d9:1d:e2:b3:5f:1a:8a:80:b7:3b:38:07:be:a6:3b:
36:6f:2c:2a:c5:38:4f:27:66:88:0a:e0:46:a3:15:
bc:12:40:d8:47:10:8c:a4:75:26:24:b5:d3:97:3c:
09:08:e5:86:e7:7d:b8:ec:86:87:08:df:97:69:da:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:A5:23:74:4B:6A:5C:D4:22:54:31:87:50:39:DD:80:20:3F:6A
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a0:14:15:1b:68:0e:32:6d:78:20:01:b1:84:05:23:81:4c:
7d:09:d1:6f:9d:0d:e5:d1:a7:01:81:cc:4b:e9:c9:39:4e:bd:
a5:7c:1b:46:b7:d1:ff:5b:78:89:38:66:d4:53:32:47:01:01:
e3:3a:c9:03:17:17:55:6b:0a:72:62:2e:f4:b2:ad:0a:7b:95:
38:6e:c7:53:69:73:b2:72:c8:00:0a:80:7b:96:8d:55:5e:bf:
08:69:f7:42:33:39:a6:41:0b:af:40:af:01:fc:5a:9b:cc:30:
3a:03:25:82:00:7b:21:c1:68:b1:db:ed:f0:0f:25:1b:58:c4:
83:64:80:c2:79:08:e5:dd:52:ec:b1:bb:b3:2f:a3:e9:ab:69:
47:bb:6f:63:89:27:cf:a2:60:81:34:24:a4:e1:bf:a2:8b:67:
e2:c7:71:df:e2:fe:20:a2:e0:74:d0:f1:7a:ff:8f:36:aa:b8:
e4:cb:cb:d6:45:23:d1:9d:44:71:2d:d7:9d:e4:09:9e:fb:96:
02:7b:85:4e:08:7a:b1:5c:4e:0a:5b:8f:9f:c3:4b:58:10:f4:
92:65:4f:3d:e6:8a:94:5f:fa:04:ed:78:f2:2c:2f:4a:5c:d4:
95:10:dd:50:78:42:90:38:8e:67:de:e5:90:bd:8a:0c:d6:fd:
a1:52:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:42:59 2026 by rpki-client