Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.mft
File: 0F1E55458927A51BBAEB387F215F753CEDFA946B.mft (raw, json)
Hash identifier: lk1oA4dD++HfTVcfq44avie/3Fz/4qij6ICd2KFKp74=
Subject key identifier: 89:7A:48:EE:89:9F:14:69:CC:BD:88:00:7D:D1:52:E5:96:A8:CA:04
Authority key identifier: 0F:1E:55:45:89:27:A5:1B:BA:EB:38:7F:21:5F:75:3C:ED:FA:94:6B
Certificate issuer: /CN=0f1e55458927a51bbaeb387f215f753cedfa946b
Certificate serial: 37C231883CA286B97A54D53DF1649BA0BB8E01B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx5VRYknpRu66zh_IV91PO36lGs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.mft
Manifest number: 41
Signing time: Wed 25 Mar 2026 10:59:16 +0000
Manifest this update: Wed 25 Mar 2026 10:54:16 +0000
Manifest next update: Thu 26 Mar 2026 12:50:16 +0000
Files and hashes: 1: 0F1E55458927A51BBAEB387F215F753CEDFA946B.crl (hash: YgK8OPv8KqtsMQqEtT1DmLYqQy53TCeaFho2Iulpa4A=)
2: AS60742.asa (hash: qe8BdgGJzSp6jBz4nnAO0xY9cxMPKyS7eNNxlBYfKf4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.crl
rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx5VRYknpRu66zh_IV91PO36lGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c2:31:88:3c:a2:86:b9:7a:54:d5:3d:f1:64:9b:a0:bb:8e:01:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1e55458927a51bbaeb387f215f753cedfa946b
Validity
Not Before: Mar 25 10:54:16 2026 GMT
Not After : Mar 26 12:50:16 2026 GMT
Subject: CN=897A48EE899F1469CCBD88007DD152E596A8CA04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:8f:ee:94:1e:e9:4b:80:3a:6b:16:54:2f:
f1:9d:e1:40:43:5a:1b:73:ad:bd:8e:45:b7:cd:00:
89:60:1a:ff:24:50:6b:dd:73:e7:19:69:a6:05:9c:
8a:07:34:74:aa:ce:7c:0c:39:16:98:6a:f7:48:ed:
79:5b:ec:cb:5c:1c:65:c1:64:b0:88:4c:7a:28:b4:
f8:58:a1:7b:d4:87:a6:07:62:60:92:d6:8b:ee:f0:
03:16:d1:52:de:f0:82:68:ff:74:46:8f:b5:3b:de:
2e:8a:8c:30:c4:14:d0:48:b7:1c:31:b5:b5:4a:80:
32:ba:60:81:18:23:f6:3e:6d:88:f8:c2:79:4a:14:
e4:1a:db:e8:24:c5:84:d1:ef:58:80:25:a4:60:f1:
09:5a:fe:60:98:fb:83:83:e0:f7:f5:96:5d:dd:02:
c3:56:a7:90:88:85:05:25:27:32:20:65:57:18:ee:
e2:5a:42:c2:a5:82:f2:4c:62:c2:3c:63:dd:89:57:
10:01:16:a6:79:67:47:c5:f0:20:50:a0:1d:08:b6:
61:21:7a:f0:37:0b:63:69:33:0f:7f:7f:70:67:48:
6b:b8:eb:7c:d3:7c:cf:94:d3:e1:3a:79:8f:aa:61:
d6:4b:84:96:ba:01:f5:45:9b:15:37:b9:7d:02:05:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7A:48:EE:89:9F:14:69:CC:BD:88:00:7D:D1:52:E5:96:A8:CA:04
X509v3 Authority Key Identifier:
keyid:0F:1E:55:45:89:27:A5:1B:BA:EB:38:7F:21:5F:75:3C:ED:FA:94:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx5VRYknpRu66zh_IV91PO36lGs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad7e1ab0-d6a2-4459-9dd5-dc267e9bf6a4/0/0F1E55458927A51BBAEB387F215F753CEDFA946B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5e:74:5a:ee:e1:4f:45:22:f7:66:9c:ef:5b:14:ea:2d:ba:
50:f6:a7:8e:6c:b5:11:a8:a5:7a:0e:7b:b4:6c:11:77:59:ed:
61:b1:3e:17:23:7d:63:48:70:85:d3:03:9b:a1:d1:19:6a:d5:
ca:4f:2d:de:22:25:6b:71:fc:df:a0:41:d5:7c:9d:bb:d9:31:
c8:7c:1e:bc:f2:58:df:03:3e:03:f6:b6:03:7d:09:b1:d3:6c:
70:2e:39:51:3c:e4:51:38:72:3a:7c:77:3e:99:0b:83:26:d7:
0a:5c:70:4b:da:7b:1f:46:f9:b8:92:f4:cd:7f:fa:59:c7:39:
b0:ed:9b:aa:84:54:51:7e:f7:38:84:a4:93:ce:aa:b1:d0:e6:
e3:98:0f:9e:f1:38:75:22:5c:d9:73:27:d5:9e:2c:e6:a6:6c:
ff:2c:7e:ef:30:ca:44:e7:c9:e3:05:56:c4:b7:09:63:8b:d3:
76:af:ed:43:c8:9b:d2:ab:d2:09:4a:82:2d:07:27:29:58:18:
af:31:05:07:b2:19:3b:c2:87:d5:b4:c2:f9:f9:16:67:72:0b:
a4:d9:87:bc:5e:d5:c8:df:ad:80:60:53:d7:a3:eb:67:17:58:
a0:fe:be:db:34:96:36:a6:6b:7c:34:a4:2a:1c:a6:a7:2b:8f:
b0:d0:64:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:23:06 2026 by rpki-client