Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
File: 6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft (raw, json)
Hash identifier: DdmjNWxfuR/MeS6YBfIiY+ZV+bSPeeRRuhRUKTn90fk=
Subject key identifier: 34:4E:B3:B2:88:1E:1C:12:C8:D6:99:79:39:42:59:61:18:E0:AD:D0
Authority key identifier: 64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8
Certificate issuer: /CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
Certificate serial: 4C860757B896D401E3051D424BAB461B746E9D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
Manifest number: BD
Signing time: Sat 14 Nov 2026 12:50:13 +0000
Manifest this update: Sat 14 Nov 2026 12:45:13 +0000
Manifest next update: Sun 15 Nov 2026 13:44:13 +0000
Files and hashes: 1: 6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl (hash: AVriGWjZgj/q9Ap8ltP82j30ji60tgL0AJ29mcEvlac=)
2: AS219458.asa (hash: GU61pR45wu8HIE8dLfaSZA9t9gnGAcZbJ0fm1zAhAoE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl
rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 13:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:86:07:57:b8:96:d4:01:e3:05:1d:42:4b:ab:46:1b:74:6e:9d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
Validity
Not Before: Nov 14 12:45:13 2026 GMT
Not After : Nov 15 13:44:13 2026 GMT
Subject: CN=344EB3B2881E1C12C8D699793942596118E0ADD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:94:9f:d7:4c:6f:f3:c5:a2:7f:86:ec:6e:
4e:a7:09:47:ea:14:18:72:01:9d:16:cf:e7:9b:24:
02:76:27:7a:b8:df:3a:b4:f2:6a:b7:ad:9d:89:6c:
06:99:27:55:92:e6:b8:29:1a:38:b5:65:cb:ec:3d:
4d:89:60:ec:32:d4:21:ad:2c:89:24:65:9e:26:69:
8a:f2:b4:31:31:a2:c5:87:cb:c9:bb:7f:db:3b:62:
3d:f8:b2:ad:66:fe:48:77:65:5c:c8:d2:e5:ab:d0:
47:ea:92:3e:ff:36:23:98:7e:cb:30:13:41:6b:5a:
7e:d7:3b:e6:42:04:dc:62:6d:8c:d9:23:a5:4c:ea:
20:c7:4c:ff:53:67:9c:81:c1:b9:5c:d3:e9:88:ad:
ce:2a:3f:61:27:7a:d5:c4:d6:f6:08:1a:fe:72:dc:
61:8d:ca:fb:7b:94:a9:8f:e1:d5:36:af:6f:a6:d7:
81:7e:20:22:74:f6:01:27:4d:37:b8:f7:c6:39:14:
e2:58:6a:8b:11:21:0d:41:0c:2f:f2:a7:d5:db:c7:
90:d8:e6:a0:4e:b6:04:04:be:d5:ec:b4:d7:8d:e9:
6e:70:19:d3:61:2b:7b:13:42:0e:9a:14:3c:2c:b0:
c2:0c:23:79:75:43:5b:c5:b6:95:5e:7c:1c:f7:5b:
c4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4E:B3:B2:88:1E:1C:12:C8:D6:99:79:39:42:59:61:18:E0:AD:D0
X509v3 Authority Key Identifier:
keyid:64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:14:07:5e:04:7c:b9:1f:1b:ae:e8:3a:fc:a1:2a:cc:a3:51:
7b:30:19:8c:e6:65:3b:04:2a:aa:b7:f1:fa:36:04:d9:6d:79:
bc:31:a5:d1:72:4c:c9:71:0e:92:ce:2a:97:06:32:ff:fa:ea:
3c:8b:c2:01:2c:63:fb:1a:da:26:eb:40:ec:46:e3:20:fb:8b:
20:bd:40:80:56:3a:cb:64:ef:d1:4d:a3:e4:4d:b8:6f:13:c8:
80:b7:d4:7b:f4:01:05:14:3a:75:73:f5:98:cf:4c:c1:37:76:
3b:cb:06:29:a0:5b:d9:46:2d:f1:70:f0:50:d4:72:15:16:cc:
f0:fc:e5:ec:d9:24:83:02:10:b0:81:9d:c1:1b:b1:e6:9b:b2:
50:ea:2c:04:b7:51:6d:31:2e:76:69:b4:d7:b9:25:ab:6f:b0:
f9:d3:37:36:1b:be:36:04:6c:69:7f:aa:7d:98:e7:03:41:17:
8e:a7:b6:be:03:f1:fc:04:1d:88:3d:3d:02:ef:85:b2:0a:a8:
f1:cd:a0:a2:c6:f7:eb:98:f3:20:ab:29:e5:32:72:8d:e1:b2:
e2:5c:fd:56:92:20:dc:14:1a:4c:e8:74:5e:d6:97:e9:54:b7:
d2:65:d4:58:52:cf:c0:db:55:63:65:8c:5c:f0:89:a7:21:ee:
a8:32:e7:d6
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTIYHV7iW1AHjBR1CS6tGG3RunU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0MWRkMmRhMjE0NzdlYzhiZjI3N2QzM2JlOTA3MmNl
ODVmOTJhODAeFw0yNjExMTQxMjQ1MTNaFw0yNjExMTUxMzQ0MTNaMDMxMTAvBgNV
BAMTKDM0NEVCM0IyODgxRTFDMTJDOEQ2OTk3OTM5NDI1OTYxMThFMEFERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4v5Sf10xv88Wif4bsbk6nCUfq
FBhyAZ0Wz+ebJAJ2J3q43zq08mq3rZ2JbAaZJ1WS5rgpGji1ZcvsPU2JYOwy1CGt
LIkkZZ4maYrytDExosWHy8m7f9s7Yj34sq1m/kh3ZVzI0uWr0Efqkj7/NiOYfssw
E0FrWn7XO+ZCBNxibYzZI6VM6iDHTP9TZ5yBwblc0+mIrc4qP2EnetXE1vYIGv5y
3GGNyvt7lKmP4dU2r2+m14F+ICJ09gEnTTe498Y5FOJYaosRIQ1BDC/yp9Xbx5DY
5qBOtgQEvtXstNeN6W5wGdNhK3sTQg6aFDwssMIMI3l1Q1vFtpVefBz3W8T9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUNE6zsogeHBLI1pl5OUJZYRjgrdAwHwYDVR0j
BBgwFoAUZEHdLaIUd+yL8nfTO+kHLOhfkqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIy
YjE3LzAvNjQ0MUREMkRBMjE0NzdFQzhCRjI3N0QzM0JFOTA3MkNFODVGOTJBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pFSGRMYUlVZC15TDhuZlRPLWtITE9o
ZmtxZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjFiNDFjYi1h
MzdmLTRkOTMtODg1Ni00MDkyYWZiMjJiMTcvMC82NDQxREQyREEyMTQ3N0VDOEJG
Mjc3RDMzQkU5MDcyQ0U4NUY5MkE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBQHXgR8uR8brug6/KEq
zKNRezAZjOZlOwQqqrfx+jYE2W15vDGl0XJMyXEOks4qlwYy//rqPIvCASxj+xra
JutA7EbjIPuLIL1AgFY6y2Tv0U2j5E24bxPIgLfUe/QBBRQ6dXP1mM9MwTd2O8sG
KaBb2UYt8XDwUNRyFRbM8Pzl7NkkgwIQsIGdwRux5puyUOosBLdRbTEudmm017kl
q2+w+dM3Nhu+NgRsaX+qfZjnA0EXjqe2vgPx/AQdiD09Au+Fsgqo8c2gosb365jz
IKsp5TJyjeGy4lz9VpIg3BQaTOh0XtaX6VS30mXUWFLPwNtVY2WMXPCJpyHuqDLn
1g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:24:25 2026 by rpki-client