Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: lB6o2ZdZa1ffPp7ldWw9Bsj3KVlrVzuugnDV/MSsTC0=
Subject key identifier: B2:51:B9:73:CF:5C:58:23:9D:D0:4D:50:57:FA:08:9A:DE:07:4C:9F
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 4EAB9C7049813EDA98A0C88FD81EA6615DCBAD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 0463
Signing time: Thu 23 Jul 2026 14:40:06 +0000
Manifest this update: Thu 23 Jul 2026 14:35:06 +0000
Manifest next update: Fri 24 Jul 2026 15:33:06 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: QaRT/cHCb2ld5+hbqHuBb0c9+MB/bC41+kXiyMS5LD8=)
2: AS215828.asa (hash: 1DLvrRIdD5JC+0jSZEi+GtG05vAPJOC+K/X/oKcFyBQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ab:9c:70:49:81:3e:da:98:a0:c8:8f:d8:1e:a6:61:5d:cb:ad:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Jul 23 14:35:06 2026 GMT
Not After : Jul 24 15:33:06 2026 GMT
Subject: CN=B251B973CF5C58239DD04D5057FA089ADE074C9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:aa:e6:33:37:c6:4a:41:48:00:7e:cc:c8:
3d:f3:08:92:10:b6:55:ee:b2:43:35:4c:84:99:3e:
d8:6f:90:bd:7f:04:4e:bc:a1:e8:bf:3f:a7:d1:b7:
a6:9e:4d:70:6f:c1:bb:19:eb:3c:71:34:db:1e:7e:
19:31:fe:89:9e:14:2b:11:54:38:8e:bf:c3:22:ee:
17:ea:4e:51:cc:e3:d3:e5:d6:da:af:77:14:c6:27:
83:44:42:25:96:a6:18:b9:00:a0:5a:4f:e5:2a:c6:
91:18:09:65:8b:fc:89:a3:4a:b4:78:b7:7f:6d:76:
51:c9:5a:88:14:6f:2c:35:4d:05:15:b3:82:fe:cf:
21:19:a1:fe:e9:97:5e:1a:5c:c5:aa:13:37:50:4b:
53:d9:80:25:b4:62:d4:27:aa:18:1c:10:20:51:e9:
5f:76:5c:9e:67:46:85:02:65:e9:c3:04:64:c0:0c:
06:8f:42:5b:35:9b:b1:a1:73:7c:05:24:81:cb:7f:
25:0d:52:72:65:9d:d8:c2:e8:f4:92:c8:8c:76:6f:
8b:8f:84:ef:e8:21:ee:d9:dd:f8:a3:f7:74:ff:c5:
f7:05:87:4e:4d:54:d2:c0:6c:a9:79:d7:e9:05:63:
e5:26:df:3b:6c:fc:b9:cf:08:d4:91:52:f0:f0:0f:
49:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:51:B9:73:CF:5C:58:23:9D:D0:4D:50:57:FA:08:9A:DE:07:4C:9F
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:83:22:48:8d:d2:fe:50:cb:2c:2d:fa:33:63:41:66:ed:74:
e0:6f:69:ad:d8:f9:58:90:ff:be:3d:27:3e:c8:00:51:c0:d7:
06:60:19:b9:db:86:f6:85:f3:56:88:34:18:e5:70:99:15:a1:
59:f2:88:49:01:64:6d:ec:d2:a6:e6:0f:7b:e6:ff:40:c9:64:
f0:fa:c6:4d:1f:77:84:13:2d:55:73:f6:73:49:b5:25:00:13:
f8:97:ad:f4:00:29:60:5e:2f:90:40:f0:2d:88:9a:f7:1a:dc:
bd:75:ca:5f:fb:88:82:6f:76:50:50:6a:5e:a0:83:11:af:08:
61:21:0d:95:97:37:a8:a1:c7:5f:30:03:a5:dc:78:71:70:2b:
43:e6:82:5a:87:b6:91:b0:2f:a5:ec:91:f2:43:a4:81:22:fb:
f6:7e:c1:47:5b:09:25:5f:ce:8b:3e:0c:07:9c:1c:2f:57:eb:
25:7e:78:c1:49:d3:fc:69:ee:bd:97:e2:d8:20:48:39:ec:c1:
a5:32:9a:13:67:23:3a:a4:57:49:4f:10:7c:0b:8c:fb:20:7b:
ac:fb:ca:d0:d9:28:99:27:cd:fb:c2:ca:d4:b6:4b:7f:f7:3d:
f4:34:ce:9f:f8:58:f7:e2:e7:66:82:64:ba:a1:a2:05:14:94:
ba:1a:5c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:32 2026 by rpki-client