Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier: yV2elbqMpDu+hpZ915O888phB6VynFL4rr8FtsNjqbA=
Subject key identifier: C4:0C:E4:53:DD:A3:EE:80:DD:FD:56:85:5C:19:F5:CF:1C:1B:95:BE
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer: /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial: 66F640DB5517F547ABF3BC4DEA7298D263314B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number: 02B3
Signing time: Thu 23 Jul 2026 14:00:06 +0000
Manifest this update: Thu 23 Jul 2026 13:55:06 +0000
Manifest next update: Fri 24 Jul 2026 17:02:06 +0000
Files and hashes: 1: AS215288.asa (hash: +M2OelxzWMdvs7C8TWLEAVCzoJw+PehI60QsibMmUe0=)
2: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: 6IZXkDepOYCOfvkbjbgV1LanW1GNQDYHSE417MH1aZg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f6:40:db:55:17:f5:47:ab:f3:bc:4d:ea:72:98:d2:63:31:4b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Validity
Not Before: Jul 23 13:55:06 2026 GMT
Not After : Jul 24 17:02:06 2026 GMT
Subject: CN=C40CE453DDA3EE80DDFD56855C19F5CF1C1B95BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:f5:2f:b7:b0:79:fa:d5:ba:89:bd:eb:b7:
70:a1:55:8c:f1:9b:6c:06:d6:e4:db:a8:dc:6a:88:
0b:04:0a:2b:f1:5f:8e:92:45:37:45:ea:34:d0:33:
ee:de:4d:61:ab:af:5d:20:6a:12:4b:f8:6c:a1:7c:
74:db:c8:ba:06:86:45:79:a9:e2:55:d9:30:39:c7:
7c:24:64:13:ec:71:74:7d:46:8d:f7:ac:d8:a5:bf:
e6:54:e5:a5:ba:1b:16:9b:b2:6b:a0:4f:ec:44:61:
86:d5:8a:7d:65:9a:21:cf:c1:70:4c:8e:d2:08:36:
4a:e0:9b:73:24:2f:98:11:37:0c:f6:a7:ee:7e:44:
28:a2:d7:2a:61:25:5c:a3:48:aa:02:9c:a7:78:72:
08:3a:31:7d:d3:69:7d:e1:4a:96:29:54:51:25:71:
8a:d9:68:93:33:73:19:4f:50:15:fd:0a:0e:9b:92:
3a:cd:54:f5:f9:5e:87:bc:e6:9d:d0:48:1e:db:65:
cd:ec:bd:ee:8e:66:db:c4:7b:26:57:2d:28:87:be:
72:b1:c4:b3:42:e2:c7:6b:00:3e:19:fd:c6:74:d0:
18:c6:2f:76:d9:6e:7c:b1:bd:91:e2:b0:b2:5a:fb:
8d:4d:30:8a:47:31:2c:39:b2:44:39:5a:df:06:06:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:E4:53:DD:A3:EE:80:DD:FD:56:85:5C:19:F5:CF:1C:1B:95:BE
X509v3 Authority Key Identifier:
keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ed:08:48:07:e4:bf:72:c3:26:fe:90:1a:b8:f4:d1:f2:69:
5e:58:72:65:52:8c:15:2d:ba:c2:b0:e9:20:86:e4:c7:c0:fa:
b5:3d:f7:8e:a1:2a:cc:4f:a5:e3:72:3e:36:2c:26:d6:68:a7:
08:15:86:11:57:32:b6:41:ed:be:9d:88:fe:6d:19:ed:57:c1:
a0:41:20:a9:5c:fd:7a:8c:96:32:ac:32:4a:04:4a:c1:f1:ed:
7c:ce:16:d3:0b:49:8d:16:77:c7:28:6a:9a:65:c6:39:35:8c:
a4:c8:c3:06:b3:47:87:49:78:45:e2:d2:2e:01:79:ff:66:8c:
bc:e0:23:48:46:0e:32:fe:1c:f3:b4:ab:25:c1:90:96:38:22:
12:ac:f3:da:f6:cc:e6:6b:59:38:11:b6:27:de:c7:a7:45:c2:
2c:c9:75:e9:c2:91:e2:9f:4b:eb:63:08:9d:9e:cb:ff:64:a7:
d9:5e:79:5b:3a:65:bd:5f:5e:8c:e6:e2:af:4c:c6:d2:28:09:
a7:6a:14:3f:80:78:0b:d4:64:6c:c4:4e:d7:4c:24:62:02:1b:
d4:fb:7f:85:a6:97:aa:bc:78:a3:12:9c:6e:78:9f:83:47:9d:
c2:54:23:29:6a:2a:87:eb:dc:53:1a:77:34:c0:95:a8:30:f2:
e7:b1:0b:43
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUZvZA21UX9Uer87xN6nKY0mMxS04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZkMWRkNTIyZjYxMzRmMDcwMTk1YzVjMGUyZDRjMTFj
ZmE2YTk3ZDAeFw0yNjA3MjMxMzU1MDZaFw0yNjA3MjQxNzAyMDZaMDMxMTAvBgNV
BAMTKEM0MENFNDUzRERBM0VFODBEREZENTY4NTVDMTlGNUNGMUMxQjk1QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbIvUvt7B5+tW6ib3rt3ChVYzx
m2wG1uTbqNxqiAsECivxX46SRTdF6jTQM+7eTWGrr10gahJL+GyhfHTbyLoGhkV5
qeJV2TA5x3wkZBPscXR9Ro33rNilv+ZU5aW6GxabsmugT+xEYYbVin1lmiHPwXBM
jtIINkrgm3MkL5gRNwz2p+5+RCii1yphJVyjSKoCnKd4cgg6MX3TaX3hSpYpVFEl
cYrZaJMzcxlPUBX9Cg6bkjrNVPX5Xoe85p3QSB7bZc3sve6OZtvEeyZXLSiHvnKx
xLNC4sdrAD4Z/cZ00BjGL3bZbnyxvZHisLJa+41NMIpHMSw5skQ5Wt8GBlvLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUxAzkU92j7oDd/VaFXBn1zxwblb4wHwYDVR0j
BBgwFoAUf9HdUi9hNPBwGVxcDi1MEc+mqX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy
MWI3LzAvN0ZEMURENTIyRjYxMzRGMDcwMTk1QzVDMEUyRDRDMTFDRkE2QTk3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5SGRVaTloTlBCd0dWeGNEaTFNRWMt
bXFYMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jODZiNjViMS00
NWU5LTRmYjItYWRjNS04N2JhNzExZTIxYjcvMC83RkQxREQ1MjJGNjEzNEYwNzAx
OTVDNUMwRTJENEMxMUNGQTZBOTdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJO0ISAfkv3LDJv6QGrj0
0fJpXlhyZVKMFS26wrDpIIbkx8D6tT33jqEqzE+l43I+Niwm1minCBWGEVcytkHt
vp2I/m0Z7VfBoEEgqVz9eoyWMqwySgRKwfHtfM4W0wtJjRZ3xyhqmmXGOTWMpMjD
BrNHh0l4ReLSLgF5/2aMvOAjSEYOMv4c87SrJcGQljgiEqzz2vbM5mtZOBG2J97H
p0XCLMl16cKR4p9L62MInZ7L/2Sn2V55WzplvV9ejObir0zG0igJp2oUP4B4C9Rk
bMRO10wkYgIb1Pt/haaXqrx4oxKcbnifg0edwlQjKWoqh+vcUxp3NMCVqDDy57EL
Qw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:52 2026 by rpki-client