Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier: aQ3Yt+dT0HLTPhdJQoJNNeURkYW7s9yKJcFsMnVXlBg=
Subject key identifier: B0:4D:F0:94:03:F5:3B:09:59:28:58:DF:A2:D6:C4:28:85:38:47:AD
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer: /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial: 1F4F033C7FFA83800D6AE5F8EF3B66CB6CB78D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number: 01EC
Signing time: Wed 25 Mar 2026 01:22:14 +0000
Manifest this update: Wed 25 Mar 2026 01:17:14 +0000
Manifest next update: Thu 26 Mar 2026 04:07:14 +0000
Files and hashes: 1: AS211695.asa (hash: ECDR80b7l9ugdGd0RMl+JN1o634bDwO+GoAm6/dGgxI=)
2: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: OWUaGCZ8loJW6qz6RluLpNTNB4JClCntxoigcSUmumk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 04:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:4f:03:3c:7f:fa:83:80:0d:6a:e5:f8:ef:3b:66:cb:6c:b7:8d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Validity
Not Before: Mar 25 01:17:14 2026 GMT
Not After : Mar 26 04:07:14 2026 GMT
Subject: CN=B04DF09403F53B09592858DFA2D6C428853847AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:56:7a:23:a3:c3:40:b5:2f:98:55:e5:f6:
c4:4f:fa:3d:06:cb:32:10:5f:6c:48:d2:b0:b8:35:
ec:cc:c9:3f:dd:bf:39:55:38:17:a7:cc:95:d5:82:
b3:f0:1c:0c:74:51:72:3b:a4:45:62:6f:9e:4c:bf:
bf:32:33:06:c1:40:46:41:ec:84:fa:59:23:97:37:
31:0e:c3:63:9c:57:81:11:79:3b:9c:81:1d:a4:13:
6e:53:7e:95:02:05:6e:dd:ce:fe:07:8f:2d:32:36:
9a:b4:69:df:c5:de:35:9c:be:69:ad:48:da:a2:ac:
91:c0:65:18:de:62:ee:51:19:76:74:e6:2f:38:9d:
55:be:d3:97:e7:e8:12:a3:af:95:40:14:79:ae:2d:
92:bb:3d:80:e9:a6:74:29:8a:ba:b0:c2:48:35:62:
ec:4c:01:39:2c:e4:0d:3d:da:83:f3:1d:05:75:52:
8a:2e:42:9d:c7:55:7d:b3:a2:6f:2f:7b:38:83:e7:
10:30:00:5f:7c:45:d0:7d:f7:70:b3:7b:c0:11:b1:
f8:8a:a0:58:e0:e2:08:ce:a3:fa:2a:e9:61:f2:5d:
09:9e:76:04:db:ff:c4:74:70:20:35:62:a0:b2:ab:
6a:92:0c:3e:e1:95:11:26:e0:99:fa:e3:c6:da:5d:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4D:F0:94:03:F5:3B:09:59:28:58:DF:A2:D6:C4:28:85:38:47:AD
X509v3 Authority Key Identifier:
keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:92:95:1b:3f:8a:8f:03:25:c3:ee:83:e7:d8:fe:db:6d:8c:
69:03:19:8a:ce:9c:90:78:8f:c7:6b:75:fa:2e:3e:78:28:1b:
1b:6e:b3:9a:9a:e8:dd:c7:bf:74:3c:56:23:76:3c:18:0d:f5:
47:ee:b0:ae:ed:ff:46:96:bd:24:f6:8f:17:81:a1:01:24:4d:
71:ab:de:b1:7f:03:21:08:ff:bd:72:19:b1:73:22:4e:88:0d:
2d:08:0f:5e:96:de:eb:9d:4c:67:89:ec:04:0a:cc:3d:3b:1a:
ac:14:3e:de:6c:83:a6:1d:d7:4d:97:43:52:18:75:4a:4d:d2:
45:2a:8f:54:5e:cc:d8:04:6f:86:58:3b:7c:00:54:32:af:90:
cf:17:25:03:cd:86:27:16:c6:3b:68:e2:45:76:78:c8:ae:42:
bb:62:02:a0:ff:cf:19:6d:11:f3:be:1d:85:c1:b2:15:4a:cc:
df:4f:92:a9:de:b6:da:8e:b4:ff:bd:98:25:7e:88:f7:ed:63:
f7:74:50:f5:f5:b7:77:10:24:05:97:a6:d2:de:5d:79:ad:80:
1d:4f:78:9a:b6:9f:8d:4e:e7:ba:d0:33:d3:50:dd:d1:48:00:
f6:80:53:d7:be:a8:91:ce:31:13:86:7b:96:45:e1:0d:8b:ba:
95:cc:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:55 2026 by rpki-client