Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
File: 6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft (raw, json)
Hash identifier: +pA4jqtThbiprlF6b7lyG96I518z2JGvBT2nQvlrl/M=
Subject key identifier: EB:17:D2:8F:B9:DC:3A:7D:8F:37:48:A3:6A:95:1D:EF:C4:A2:5D:CE
Authority key identifier: 64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8
Certificate issuer: /CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
Certificate serial: 50A0486F562DF5BFDB7B84499E3552DE20EA7337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
Manifest number: 24
Signing time: Thu 23 Jul 2026 12:58:12 +0000
Manifest this update: Thu 23 Jul 2026 12:53:12 +0000
Manifest next update: Fri 24 Jul 2026 14:47:12 +0000
Files and hashes: 1: AS219458.asa (hash: 4EDn/tW4OFUzDAzcEHCdkk68aVCpxOd51JItFT1I5cg=)
2: 6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl (hash: YAIFpncXBwDDKSOmpK3TsnOb6cjd0S2bp/ridmlex9o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl
rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a0:48:6f:56:2d:f5:bf:db:7b:84:49:9e:35:52:de:20:ea:73:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
Validity
Not Before: Jul 23 12:53:12 2026 GMT
Not After : Jul 24 14:47:12 2026 GMT
Subject: CN=EB17D28FB9DC3A7D8F3748A36A951DEFC4A25DCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:db:2a:bd:16:fc:d4:4c:d1:78:e9:a3:15:
f0:47:97:35:b8:70:b2:67:d0:90:7d:48:37:47:e3:
68:e8:d9:8d:ac:e6:fb:92:91:bc:ed:41:bc:46:a4:
03:37:10:6d:78:22:58:7a:75:58:d5:0c:c6:c8:c2:
ce:ad:ca:92:54:7d:27:98:5e:1e:7a:18:8d:e5:f6:
05:db:3f:4b:3b:7e:1a:7e:a3:11:8b:c1:7a:9b:96:
da:b0:e5:5c:32:75:e3:e4:d0:23:f9:57:36:a9:15:
d3:19:1f:c0:98:c8:9e:b6:5e:98:06:7e:b7:59:16:
39:4a:ee:46:38:58:06:77:38:d7:d2:69:75:a4:68:
61:c5:2b:02:76:da:b9:7f:cc:68:7f:bf:0b:3e:1e:
17:0c:08:01:41:a2:c6:27:8a:01:63:03:fa:c4:89:
b1:fa:8c:b0:9b:11:a4:d9:c5:8c:6c:37:8c:e7:4d:
be:3e:3a:8f:7a:83:31:28:44:1f:97:ad:8f:53:6e:
ff:a1:ad:82:9b:30:4e:05:1c:83:c9:f5:61:54:be:
58:8f:7e:bc:47:f6:0d:15:cc:ba:bc:b5:93:c1:71:
57:85:71:53:8b:e8:d0:34:47:c1:44:63:f6:f2:46:
56:b2:08:e5:74:60:59:a9:07:b9:c0:61:44:49:74:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:17:D2:8F:B9:DC:3A:7D:8F:37:48:A3:6A:95:1D:EF:C4:A2:5D:CE
X509v3 Authority Key Identifier:
keyid:64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8c:5e:2b:b8:c5:e6:68:cc:53:33:3f:2e:92:9a:4b:5b:5c:
ea:fe:e4:16:f8:dc:5c:48:f5:6b:8f:b6:5a:fd:80:1c:85:5c:
60:ca:52:81:e6:93:43:ab:84:16:3e:51:30:d3:2b:52:1b:21:
52:92:38:e9:f5:7d:18:1b:19:9f:3a:cb:8f:1c:1a:a1:5b:b8:
bd:ed:2c:df:3f:30:0d:67:ce:4b:7f:8c:cf:0c:ea:78:2e:d2:
fa:80:90:2c:33:b3:b5:e3:0a:08:65:1e:5a:cf:0c:49:df:c2:
d7:aa:a2:88:d6:76:dd:22:2d:53:5e:6f:9e:dc:2b:22:90:6e:
97:8b:8b:f5:0e:48:f0:67:7f:bb:ad:6e:85:86:15:c0:f9:60:
bd:b3:85:7e:49:9f:81:4c:02:90:2e:c9:29:70:e9:d4:aa:ad:
c0:e3:ce:31:4f:01:3e:62:aa:74:cb:4c:c2:4f:22:9f:47:ff:
42:75:ef:6d:7c:5e:db:34:c0:df:77:67:06:77:1f:fb:40:4e:
96:b3:9e:d4:35:25:d0:d9:7d:27:43:4e:0b:28:f9:20:66:8d:
6a:4e:5f:6c:61:2e:83:83:66:4c:9a:2f:5c:8b:ab:09:1f:91:
ac:e1:0d:c6:be:9f:3a:23:1e:ab:9f:a7:72:a8:b3:9a:c7:e0:
e0:de:ea:4c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUKBIb1Yt9b/be4RJnjVS3iDqczcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0MWRkMmRhMjE0NzdlYzhiZjI3N2QzM2JlOTA3MmNl
ODVmOTJhODAeFw0yNjA3MjMxMjUzMTJaFw0yNjA3MjQxNDQ3MTJaMDMxMTAvBgNV
BAMTKEVCMTdEMjhGQjlEQzNBN0Q4RjM3NDhBMzZBOTUxREVGQzRBMjVEQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLL9sqvRb81EzReOmjFfBHlzW4
cLJn0JB9SDdH42jo2Y2s5vuSkbztQbxGpAM3EG14Ilh6dVjVDMbIws6typJUfSeY
Xh56GI3l9gXbP0s7fhp+oxGLwXqbltqw5VwydePk0CP5VzapFdMZH8CYyJ62XpgG
frdZFjlK7kY4WAZ3ONfSaXWkaGHFKwJ22rl/zGh/vws+HhcMCAFBosYnigFjA/rE
ibH6jLCbEaTZxYxsN4znTb4+Oo96gzEoRB+XrY9Tbv+hrYKbME4FHIPJ9WFUvliP
frxH9g0VzLq8tZPBcVeFcVOL6NA0R8FEY/byRlayCOV0YFmpB7nAYURJdCn5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU6xfSj7ncOn2PN0ijapUd78SiXc4wHwYDVR0j
BBgwFoAUZEHdLaIUd+yL8nfTO+kHLOhfkqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYxYjQxY2ItYTM3Zi00ZDkzLTg4NTYtNDA5MmFmYjIy
YjE3LzAvNjQ0MUREMkRBMjE0NzdFQzhCRjI3N0QzM0JFOTA3MkNFODVGOTJBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pFSGRMYUlVZC15TDhuZlRPLWtITE9o
ZmtxZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjFiNDFjYi1h
MzdmLTRkOTMtODg1Ni00MDkyYWZiMjJiMTcvMC82NDQxREQyREEyMTQ3N0VDOEJG
Mjc3RDMzQkU5MDcyQ0U4NUY5MkE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4xeK7jF5mjMUzM/LpKa
S1tc6v7kFvjcXEj1a4+2Wv2AHIVcYMpSgeaTQ6uEFj5RMNMrUhshUpI46fV9GBsZ
nzrLjxwaoVu4ve0s3z8wDWfOS3+MzwzqeC7S+oCQLDOzteMKCGUeWs8MSd/C16qi
iNZ23SItU15vntwrIpBul4uL9Q5I8Gd/u61uhYYVwPlgvbOFfkmfgUwCkC7JKXDp
1KqtwOPOMU8BPmKqdMtMwk8in0f/QnXvbXxe2zTA33dnBncf+0BOlrOe1DUl0Nl9
J0NOCyj5IGaNak5fbGEug4NmTJovXIurCR+RrOENxr6fOiMeq5+ncqizmsfg4N7q
TA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 18:58:57 2026 by rpki-client