Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: 74ZW9rhHZGPcjqGcJ+h8koaTGn54iBdP+FYdctSEE+0=
Subject key identifier: 8A:08:16:42:BA:FE:65:99:C2:0A:FF:28:4F:D2:17:01:BF:89:FC:73
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 0D12A9B61FA9C786433CACF3CABCDB4E62874B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 03BB
Signing time: Wed 25 Mar 2026 20:35:05 +0000
Manifest this update: Wed 25 Mar 2026 20:30:05 +0000
Manifest next update: Thu 26 Mar 2026 22:16:05 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: t2swF/Knbu5El2amrwzTY4F2qY+t7YZA2SxeIP1KmBU=)
2: AS215828.asa (hash: gn0zvNq0jqiLUYK3MJlHlnirErp0oB8cq8E7u3vxlhE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:12:a9:b6:1f:a9:c7:86:43:3c:ac:f3:ca:bc:db:4e:62:87:4b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Mar 25 20:30:05 2026 GMT
Not After : Mar 26 22:16:05 2026 GMT
Subject: CN=8A081642BAFE6599C20AFF284FD21701BF89FC73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:42:27:35:d8:11:d3:2b:ff:16:d6:81:9d:
ed:97:27:23:ef:eb:05:72:94:d9:22:ef:e1:c3:71:
4c:ae:55:69:5e:cd:e3:21:a9:f9:2f:c7:38:f5:52:
3c:d6:b7:cb:4e:5c:e5:55:96:7f:e3:83:d7:98:33:
b6:d7:a4:26:49:8f:34:38:bc:a2:4f:a9:0a:43:10:
0c:30:2f:d6:ea:bb:10:64:ac:ab:35:f9:b3:43:ae:
7c:15:33:61:2f:de:77:f5:98:cf:e7:bc:36:20:e1:
18:59:af:33:21:bf:3f:d8:1d:f9:de:04:9f:af:79:
cb:f7:ff:d9:83:30:1f:1f:0d:39:50:01:c4:9b:a1:
64:ce:d4:c8:46:51:a1:79:db:20:48:5d:b0:9d:47:
c2:ce:4c:a6:dc:d4:1d:7c:81:33:20:0d:56:96:66:
f2:67:39:31:81:9e:0f:a0:08:83:11:65:e9:8a:58:
bd:36:73:02:f7:92:2d:a1:fa:7b:8c:4e:e0:c4:22:
c6:26:4b:0e:3a:8c:a7:2d:2c:c0:01:7f:19:b8:09:
18:24:2a:81:cf:bc:6f:57:57:1b:15:99:e8:25:98:
a0:3b:33:04:f8:e6:ee:f4:e7:a8:4f:cd:15:e0:83:
b7:79:24:f9:6d:17:a7:2d:d4:77:34:1d:fb:b7:59:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:08:16:42:BA:FE:65:99:C2:0A:FF:28:4F:D2:17:01:BF:89:FC:73
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:08:42:e2:80:fd:a9:af:bc:37:aa:41:76:b7:f7:0e:d7:3a:
d7:2c:db:25:dd:13:7b:e0:d5:c7:b4:f8:2e:c0:e5:f6:e8:fe:
0f:df:ee:21:eb:b9:94:87:fd:15:28:bc:16:cd:74:19:25:69:
0b:63:49:38:74:1c:8f:f2:3a:05:c4:6e:60:74:ff:a9:d5:12:
22:d6:83:1f:89:d6:0e:93:c5:3d:a8:05:bf:1b:7c:67:00:24:
ff:db:dc:df:6e:1d:8d:06:1f:3e:20:45:1f:65:aa:e7:63:88:
1b:15:1e:d0:09:63:ad:85:38:b4:6a:4f:fb:92:fc:a7:4f:f5:
7b:9b:29:a6:c9:87:0c:90:b5:29:9f:07:e8:29:23:68:4c:68:
98:18:01:b1:5c:6b:2f:9e:ed:e5:92:b7:08:0e:96:fa:09:8b:
f1:01:ad:f4:2a:44:18:fc:83:e5:61:cc:98:a6:c2:d4:0a:b7:
13:2d:22:e7:02:0b:5a:45:5b:7a:56:78:81:5d:8d:09:3c:e0:
9a:71:77:03:22:d5:04:b0:fc:f3:50:4f:b9:f6:ca:93:8b:31:
1b:03:7d:de:c3:3b:39:b5:ad:33:73:52:9b:55:b0:4c:2c:5e:
07:a5:f4:a4:49:7e:2e:b4:3f:43:4e:14:13:31:8b:2b:c8:47:
b8:19:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:18 2026 by rpki-client