Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
File: 2615B626807D30988381C32656617AE6FD6638B6.mft (raw, json)
Hash identifier: ZF9GNnPl0tsbjYvVOoIX+zKRbRctKDc3g0VC8dgN1Sc=
Subject key identifier: 61:76:FF:C9:28:62:33:01:E0:B9:0E:35:53:FE:3F:82:E2:CD:57:5C
Authority key identifier: 26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
Certificate issuer: /CN=2615b626807d30988381c32656617ae6fd6638b6
Certificate serial: 6E9A345C6A237E4F6724DA78CD802F6A6C557A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
Manifest number: 0112
Signing time: Wed 25 Mar 2026 16:05:46 +0000
Manifest this update: Wed 25 Mar 2026 16:00:46 +0000
Manifest next update: Thu 26 Mar 2026 17:10:46 +0000
Files and hashes: 1: AS209710.asa (hash: JH9sNxE0aTE2l8MwdFYfIWTiqSKZx7d880LdaycnGE8=)
2: 2615B626807D30988381C32656617AE6FD6638B6.crl (hash: QunB9iSi78UD3isMW2bAMtvhd3c+1EcyHWScXjRz/iY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:9a:34:5c:6a:23:7e:4f:67:24:da:78:cd:80:2f:6a:6c:55:7a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2615b626807d30988381c32656617ae6fd6638b6
Validity
Not Before: Mar 25 16:00:46 2026 GMT
Not After : Mar 26 17:10:46 2026 GMT
Subject: CN=6176FFC928623301E0B90E3553FE3F82E2CD575C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:e9:70:a5:f9:68:b6:02:cc:d1:e5:03:85:
82:48:ad:60:2d:7a:9f:ca:1e:ff:56:d9:84:d6:84:
46:a9:a5:f1:04:ba:5c:52:ab:4f:73:68:6c:66:6b:
54:37:f7:40:57:2a:3a:00:62:1e:93:bd:e7:5a:13:
61:19:2e:c3:4c:dc:6c:3d:c8:ff:f9:19:f4:8d:33:
d0:2b:a4:50:4b:bb:35:1d:9a:b1:d8:9a:ae:ba:c6:
cf:e7:10:e5:a6:12:b5:0e:a7:60:f6:9a:55:ad:06:
c8:9e:56:17:5e:93:30:37:77:4e:6e:db:7b:be:b8:
ba:4d:f1:41:78:ae:53:16:c3:6a:d0:d2:f5:62:f4:
c2:cb:13:cd:69:55:6a:63:d7:79:2c:b7:f2:f5:33:
f6:32:b1:17:24:e6:eb:09:d1:48:c3:1b:85:d9:c2:
3e:4e:3b:29:ea:36:bd:6e:62:a6:01:7d:ba:49:8a:
97:44:e7:b4:22:82:5a:8d:17:b0:49:78:51:f9:47:
c9:0d:cf:f0:70:15:ae:75:09:07:40:42:0f:6b:e8:
a3:93:cf:28:8c:77:e5:aa:b3:e7:7a:22:2f:f7:e3:
bc:18:5e:45:a6:eb:fe:ff:d2:9e:a2:5b:fd:1d:55:
64:e3:73:c2:0a:3b:0d:24:6a:ef:dc:f2:82:a8:8c:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:76:FF:C9:28:62:33:01:E0:B9:0E:35:53:FE:3F:82:E2:CD:57:5C
X509v3 Authority Key Identifier:
keyid:26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0f:be:20:9a:4c:f4:29:f7:c3:75:d2:fd:dc:65:30:84:8e:
67:e7:5d:df:3f:59:06:54:80:f1:f2:37:e4:3d:1d:0a:4e:13:
56:54:41:eb:d2:24:4e:cd:18:bb:99:07:7b:7f:0f:cd:48:b1:
61:25:da:87:1d:26:b6:5e:15:d5:4d:72:6a:5d:a1:65:93:c7:
1e:39:3f:78:70:21:c5:17:e7:c3:f1:d0:e2:6e:bc:b2:16:af:
12:d0:0a:1a:f8:4f:d0:f8:85:99:2a:8c:52:13:e8:ac:eb:e2:
f4:de:aa:85:79:98:a5:09:6d:9d:75:76:9f:0f:38:0f:d2:2d:
ef:02:6f:a3:f4:69:99:6c:f6:05:3a:8d:2b:0f:38:72:c4:0f:
d9:f3:20:5c:ed:09:a7:6a:f9:8c:81:0b:d8:8e:63:e6:26:93:
09:3a:46:76:ac:c0:80:99:8d:40:81:5b:6f:1e:f6:1c:80:47:
6b:b3:5f:62:d8:ba:a8:20:1d:81:38:6f:cd:38:0d:cb:31:1a:
76:01:b9:d9:7b:7e:d6:e8:ed:a1:cf:2c:23:d8:05:8d:c0:23:
02:55:26:8e:3e:0f:3a:3e:ab:5d:80:07:81:78:61:ed:7e:02:
4f:37:cb:d5:53:de:07:ec:ac:8d:30:9c:35:17:66:37:96:e9:
37:5f:ce:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:41 2026 by rpki-client