Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier: oz4uPdbWob+9UqABAaZ5LnkadgX2+MkfpBtoOTFqYRY=
Subject key identifier: 82:3C:C0:BE:52:86:1E:21:A3:71:F6:7B:08:E1:3D:8E:E8:13:F3:55
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer: /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial: 43BE9678882A1F368DD781B5E5B586146ED9EFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number: 0306
Signing time: Wed 23 Sep 2026 21:56:24 +0000
Manifest this update: Wed 23 Sep 2026 21:51:24 +0000
Manifest next update: Thu 24 Sep 2026 23:04:24 +0000
Files and hashes: 1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: 8ze0P2lvZqiVUFoMN8+g1Ju/q7bXkPQiOVgTdf3v6eg=)
2: AS215288.asa (hash: +M2OelxzWMdvs7C8TWLEAVCzoJw+PehI60QsibMmUe0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:be:96:78:88:2a:1f:36:8d:d7:81:b5:e5:b5:86:14:6e:d9:ef:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Validity
Not Before: Sep 23 21:51:24 2026 GMT
Not After : Sep 24 23:04:24 2026 GMT
Subject: CN=823CC0BE52861E21A371F67B08E13D8EE813F355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:b5:63:4a:96:9f:cc:53:13:d9:17:ed:16:
75:12:8e:67:d1:10:c8:29:1d:3e:95:14:a2:e7:23:
dd:15:cf:ab:3c:15:ce:3a:ae:59:29:eb:6d:ea:7f:
7d:df:ed:d4:ad:a4:73:07:ff:cf:23:bc:aa:d8:88:
81:d1:75:2c:63:70:cd:39:7e:2f:53:01:ba:2d:73:
28:40:1a:cb:83:a6:3c:e9:d3:ce:74:cd:f0:1f:d2:
9a:8d:4e:92:b2:eb:72:90:85:10:e9:18:ea:ae:49:
99:78:b5:3b:8e:37:95:a0:26:c5:78:0b:79:42:e1:
fd:65:8c:51:49:f7:2c:bd:fb:49:06:ca:90:09:b8:
59:85:63:97:5c:9f:42:fe:80:83:15:f0:fa:39:df:
1a:da:40:da:e1:21:76:5a:56:a2:ba:0b:fb:96:36:
98:41:22:bd:42:e3:2b:9e:8d:b0:98:f7:c1:9e:45:
ce:6c:1d:c0:73:fd:23:2e:14:d6:1c:72:28:32:cc:
24:39:bf:7f:c7:c7:64:59:1b:16:91:48:bd:35:86:
68:6c:5b:aa:2f:5b:c5:f3:47:8e:a6:5b:51:83:e8:
05:78:cc:1f:7d:a2:1a:a8:41:0b:c3:b8:67:a1:7b:
dc:92:56:af:24:a4:26:d9:20:8f:b9:78:cc:09:4b:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3C:C0:BE:52:86:1E:21:A3:71:F6:7B:08:E1:3D:8E:E8:13:F3:55
X509v3 Authority Key Identifier:
keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ef:f7:b5:5e:f6:ea:dc:15:37:39:11:2d:94:96:6a:f0:ba:
06:07:3e:fc:b3:1a:88:e7:fc:1a:59:b6:75:ae:fb:d8:b3:16:
8d:3f:ca:d1:dd:36:3a:83:24:e9:9c:8f:63:72:b0:19:8a:36:
2c:57:d4:fc:69:2f:7a:e9:62:a7:0e:f4:c7:70:03:c4:38:75:
8b:77:5f:8e:68:dc:eb:6e:8d:77:bc:64:74:e0:03:19:d2:a7:
75:6b:c4:e0:44:ba:03:aa:99:40:14:31:b3:e4:54:9d:bb:2e:
0d:2f:20:ea:0b:2c:ab:7c:a9:3b:87:a9:5f:bc:1f:c7:5f:64:
bf:8c:23:2d:49:94:8e:84:90:a5:0b:25:76:80:70:72:68:c4:
db:6b:76:1f:87:fa:f0:f6:2a:bd:ff:ea:d3:87:f5:11:a4:0e:
16:5a:76:a1:43:da:d6:30:c8:95:3a:55:fc:f2:f0:5b:a7:34:
73:4f:82:6b:ed:1b:b8:0d:b8:73:34:87:7a:de:1e:00:e0:2e:
c2:e8:65:58:74:59:04:5a:4f:fe:4a:6f:6c:e6:7e:55:36:07:
79:b2:ca:3e:f7:e1:59:bf:8a:47:73:25:ea:bd:f4:eb:7d:78:
42:0d:3c:7d:69:f2:51:f7:7f:af:66:37:0b:e4:0b:69:be:1b:
bf:88:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:08:55 2026 by rpki-client