Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft
File: 1215278DAD24717513E9235A15705AA467DD6205.mft (raw, json)
Hash identifier: pvWAieLxV508DAEQlRayETok0WAzFxL0aMsX8OhR/F0=
Subject key identifier: 02:DC:7A:10:91:5C:62:B0:EF:12:07:BE:6A:81:AF:19:91:22:DF:D6
Authority key identifier: 12:15:27:8D:AD:24:71:75:13:E9:23:5A:15:70:5A:A4:67:DD:62:05
Certificate issuer: /CN=1215278dad24717513e9235a15705aa467dd6205
Certificate serial: 5CC60C7FB5D2A2C6F315C0AF80C249080885ACEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUnja0kcXUT6SNaFXBapGfdYgU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft
Manifest number: C1
Signing time: Wed 25 Mar 2026 22:45:57 +0000
Manifest this update: Wed 25 Mar 2026 22:40:57 +0000
Manifest next update: Thu 26 Mar 2026 22:59:57 +0000
Files and hashes: 1: 1215278DAD24717513E9235A15705AA467DD6205.crl (hash: n+eed2B6KAb3gcalRAwD0h24UQkSfZgA5VFSS42wM1c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.crl
rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhUnja0kcXUT6SNaFXBapGfdYgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c6:0c:7f:b5:d2:a2:c6:f3:15:c0:af:80:c2:49:08:08:85:ac:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1215278dad24717513e9235a15705aa467dd6205
Validity
Not Before: Mar 25 22:40:57 2026 GMT
Not After : Mar 26 22:59:57 2026 GMT
Subject: CN=02DC7A10915C62B0EF1207BE6A81AF199122DFD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:72:c8:56:72:61:f1:f2:05:58:90:96:49:
66:03:d0:bc:18:f6:a4:47:53:e8:71:ab:e1:b9:db:
08:38:8a:fb:49:3e:19:21:7f:10:0b:32:26:d5:37:
f0:30:4a:69:29:2d:be:45:e8:d5:cc:5a:11:df:6b:
91:60:43:44:8b:e9:22:b6:cb:b0:b8:65:29:52:41:
76:b6:f0:78:e3:c4:86:a6:ce:63:54:94:98:36:97:
cf:5a:bd:28:81:72:ee:47:68:d6:15:df:37:b9:58:
66:82:f4:13:97:a5:4e:4f:fe:0e:8a:d7:ea:47:f3:
e7:e0:be:29:4b:09:a2:78:84:85:96:7f:c5:9c:fa:
ec:ba:9d:8f:25:21:1d:6d:17:49:04:17:a5:40:31:
c0:97:e3:4a:6a:eb:8e:80:7a:21:7a:00:21:c5:9a:
27:a2:2b:76:52:1e:b3:05:5f:91:6d:22:90:dd:ac:
de:cb:5c:04:76:80:8f:a9:4c:95:e3:14:63:9b:b7:
c2:81:28:d7:95:3a:4e:84:00:bc:61:ea:c0:95:c2:
48:13:cb:39:76:a4:b6:ff:0c:07:b1:ab:0f:1d:72:
8e:61:d9:ce:fe:28:d3:55:75:ae:76:0a:45:65:ed:
c1:2c:1d:ce:91:0b:d6:2f:57:63:3f:a0:ab:32:f1:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DC:7A:10:91:5C:62:B0:EF:12:07:BE:6A:81:AF:19:91:22:DF:D6
X509v3 Authority Key Identifier:
keyid:12:15:27:8D:AD:24:71:75:13:E9:23:5A:15:70:5A:A4:67:DD:62:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUnja0kcXUT6SNaFXBapGfdYgU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:b3:3c:7b:4d:b7:74:a4:5a:22:b4:3c:57:22:f8:2c:1d:c6:
67:df:f3:03:4a:30:d3:f3:95:02:b9:44:36:52:4c:9c:56:7b:
56:66:5c:f0:2c:b6:d1:7e:cc:2c:17:c0:35:8a:d1:ff:a3:d2:
5e:8b:37:2a:8c:e0:40:16:cd:65:26:ce:16:38:f3:4d:16:31:
f2:40:9d:fa:f7:2c:90:21:89:2c:96:44:52:db:5a:7f:b3:79:
41:a4:22:a0:62:24:6b:9f:78:c4:a7:25:99:f2:6c:36:a5:27:
8c:85:82:64:71:25:1d:e1:a0:48:9e:b0:11:89:6a:b1:cb:24:
61:d3:a0:b1:a8:67:4e:92:77:ed:64:64:70:15:e6:e8:f4:97:
9a:cb:11:cd:23:4c:9d:2c:91:5a:1d:9c:f6:69:f0:af:f6:3d:
4d:5b:fa:e3:6c:6a:ac:be:da:be:5e:9a:88:56:7d:8e:57:12:
01:80:19:1d:dc:dd:58:8f:69:60:ec:4f:0f:b7:cd:06:c4:b1:
55:b6:40:30:b5:b1:99:29:6b:2e:89:da:d2:c3:ed:90:b4:75:
96:84:8a:11:52:7a:c6:22:a6:2a:60:92:c1:b5:5a:71:6c:35:
e4:07:a8:a0:aa:05:ae:90:e4:e6:ce:f9:c6:ef:3f:b5:92:c7:
af:7f:26:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:40 2026 by rpki-client