
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
File: 2615B626807D30988381C32656617AE6FD6638B6.mft (raw, json)
Hash identifier: fZRe6Se/N14YrCEqhKcpNE8QgHcFeji6OQirpLTSq94=
Subject key identifier: 82:53:4E:F7:1E:5F:30:FE:47:52:33:98:0C:1E:FB:3F:D1:F8:12:63
Authority key identifier: 26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
Certificate issuer: /CN=2615b626807d30988381c32656617ae6fd6638b6
Certificate serial: 68AC8E9D1E286A351DA0F8D45853FDC7A5282C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
Manifest number: 0219
Signing time: Tue 29 Sep 2026 01:05:00 +0000
Manifest this update: Tue 29 Sep 2026 01:00:00 +0000
Manifest next update: Wed 30 Sep 2026 05:02:00 +0000
Files and hashes: 1: 2615B626807D30988381C32656617AE6FD6638B6.crl (hash: u5YOOYHKARgdhk/ypnfSsXr6MOD7hSvwuAzwcSbVNVo=)
2: AS209710.asa (hash: uOB5Z3Fmg18HMKsvzyzZbGRRD3+2nlkihW02xag7eqw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ac:8e:9d:1e:28:6a:35:1d:a0:f8:d4:58:53:fd:c7:a5:28:2c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2615b626807d30988381c32656617ae6fd6638b6
Validity
Not Before: Sep 29 01:00:00 2026 GMT
Not After : Sep 30 05:02:00 2026 GMT
Subject: CN=82534EF71E5F30FE475233980C1EFB3FD1F81263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:fd:6d:ff:66:78:be:df:85:c1:aa:83:7c:
85:b2:ad:75:6d:62:db:ee:49:4d:4c:ef:3b:35:b4:
ee:0b:d2:d8:7d:74:e3:b5:38:12:20:a2:d8:44:6e:
74:8d:82:ca:1d:12:27:cf:39:1a:07:74:55:94:1a:
e9:d2:0b:e6:85:0c:9f:e3:a5:bb:47:06:b7:6c:dc:
f1:bc:8a:5e:13:23:ec:9d:5b:d5:34:6b:ff:db:5f:
e9:57:f4:df:d1:60:20:25:87:04:73:25:10:01:50:
45:4f:8c:a3:c0:36:a5:f4:79:9a:43:94:46:1a:28:
50:ec:55:56:04:61:49:2d:b7:6a:79:6d:e7:e2:98:
7d:5a:11:13:bc:8f:0c:c7:e0:b3:85:fa:3d:01:9d:
78:c5:39:65:80:0e:47:76:e7:5e:28:22:e6:4b:7a:
b0:4f:08:66:64:9e:c2:7b:75:5c:63:97:af:40:be:
3f:34:88:6a:fe:75:b1:df:d7:01:da:87:03:e1:09:
8b:7d:fc:e1:32:65:59:7c:6f:df:8d:9a:e2:7f:be:
6b:ec:24:80:b1:6e:1e:ae:c1:92:0b:d6:10:b0:d5:
e3:77:40:d9:c0:ef:27:9e:22:c0:5a:d7:69:4a:28:
01:4f:2b:16:ee:28:1c:a8:89:00:1f:93:48:32:45:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:53:4E:F7:1E:5F:30:FE:47:52:33:98:0C:1E:FB:3F:D1:F8:12:63
X509v3 Authority Key Identifier:
keyid:26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3a:ca:8d:17:78:70:21:13:f9:3f:f1:d8:d2:00:01:0f:04:
bc:be:9b:d6:e3:c8:b3:7c:5f:54:bf:d2:5e:cc:d1:75:e5:93:
e7:b7:1c:8c:10:f8:c4:0e:f5:c8:f4:47:50:2f:95:10:a9:86:
f1:d8:2b:81:ed:6d:54:b6:9f:a9:e7:a5:f3:c6:e1:13:b7:42:
d7:ce:df:69:e8:c9:e7:18:9e:3a:85:38:d6:a6:b1:fc:68:fb:
2b:01:93:9b:2b:6c:7b:dc:d4:00:dc:26:09:11:88:d4:91:86:
7a:11:4a:9b:2d:6b:3c:4b:50:bd:0e:69:45:63:4c:c9:22:ae:
b2:05:cb:40:6b:75:ed:44:68:a2:de:a1:3e:97:2d:c7:89:9c:
7f:0a:14:22:72:50:ef:9d:81:78:df:88:6a:3c:61:49:ef:19:
a4:9a:8b:c8:5d:b3:f8:90:5b:e6:11:2f:2b:9f:03:55:c8:e9:
24:82:a6:62:d1:3f:85:9b:d1:98:dd:93:99:59:17:76:a4:87:
06:a6:f9:be:e1:5e:be:ea:63:b8:30:26:6e:e1:4b:5d:8b:ea:
33:91:24:4c:5d:22:bc:bc:37:0e:61:4e:80:8c:70:31:aa:a3:
b7:5f:cf:61:85:b2:48:89:b8:e0:90:70:02:eb:e6:91:ea:dd:
c5:12:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:57:36 2026 by rpki-client