Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/0/423DD02225B3732C2CED9BA43076F61C36E6E389.mft
File: 423DD02225B3732C2CED9BA43076F61C36E6E389.mft (raw, json)
Hash identifier: NE3vLYyi802GgmyBkrIW5MClZOqJ4r0yvuV401AQ7ng=
Subject key identifier: CD:22:77:E2:27:4D:93:1A:55:22:CC:9E:35:2B:71:71:4D:C2:5E:F0
Authority key identifier: 42:3D:D0:22:25:B3:73:2C:2C:ED:9B:A4:30:76:F6:1C:36:E6:E3:89
Certificate issuer: /CN=423dd02225b3732c2ced9ba43076f61c36e6e389
Certificate serial: 15502ED8E72EBDCA7F6F2AD47BEDDD2397396B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj3QIiWzcyws7ZukMHb2HDbm44k.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/0/423DD02225B3732C2CED9BA43076F61C36E6E389.mft
Manifest number: 16
Signing time: Thu 23 Jul 2026 06:37:13 +0000
Manifest this update: Thu 23 Jul 2026 06:32:13 +0000
Manifest next update: Fri 24 Jul 2026 06:57:13 +0000
Files and hashes: 1: 423DD02225B3732C2CED9BA43076F61C36E6E389.crl (hash: YTWVwhyQ2rzWcLJPQ7Nq0IQDf3FNn+2ERON98PBYHxk=)
2: AS214556.asa (hash: rZJEKRdxRbMvgTtXtvOncsF0x1ztKZxb7hUsekq077Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/0/423DD02225B3732C2CED9BA43076F61C36E6E389.crl
rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/0/423DD02225B3732C2CED9BA43076F61C36E6E389.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj3QIiWzcyws7ZukMHb2HDbm44k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 06:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:50:2e:d8:e7:2e:bd:ca:7f:6f:2a:d4:7b:ed:dd:23:97:39:6b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423dd02225b3732c2ced9ba43076f61c36e6e389
Validity
Not Before: Jul 23 06:32:13 2026 GMT
Not After : Jul 24 06:57:13 2026 GMT
Subject: CN=CD2277E2274D931A5522CC9E352B71714DC25EF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:6e:32:b0:f0:97:30:14:51:78:9f:a6:35:
27:6f:36:f8:49:5c:32:04:c4:7e:36:9c:09:1c:d8:
b4:4b:88:bd:ab:52:d0:c1:7e:5d:12:07:1b:74:e7:
00:5b:d0:2c:6d:c8:05:fe:12:89:3d:64:86:e8:e9:
4c:f7:27:58:cc:10:93:65:d4:80:52:d2:9b:56:82:
49:3b:64:2e:e1:a6:97:57:5a:81:d4:c2:f2:33:d3:
1a:95:5f:a6:1d:a6:db:38:22:c2:48:d6:c8:e8:f7:
10:c1:c0:ce:3e:ee:ae:4c:09:4b:c7:df:ac:5a:f7:
44:aa:48:84:32:4c:98:c7:34:4f:7b:45:0d:9b:83:
d0:72:41:89:82:39:ca:f9:43:52:9e:c3:57:e4:97:
ac:49:6b:b6:e2:fe:2c:8b:ea:01:cb:6a:57:94:04:
30:ab:b2:27:2a:3a:42:16:1f:37:3e:be:4e:8c:0d:
cc:f9:5d:5d:16:53:ad:52:7c:b4:96:cc:06:00:cc:
24:2e:75:07:fa:79:d5:71:c2:2c:b4:20:78:5f:c9:
65:b9:78:f2:dd:60:63:96:49:7f:52:40:bc:50:80:
18:e7:c9:e0:f0:73:dc:4b:31:38:53:d0:fd:69:19:
a8:ca:f1:57:6c:88:62:c1:cc:ed:01:bf:62:7a:5c:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:22:77:E2:27:4D:93:1A:55:22:CC:9E:35:2B:71:71:4D:C2:5E:F0
X509v3 Authority Key Identifier:
keyid:42:3D:D0:22:25:B3:73:2C:2C:ED:9B:A4:30:76:F6:1C:36:E6:E3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/0/423DD02225B3732C2CED9BA43076F61C36E6E389.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj3QIiWzcyws7ZukMHb2HDbm44k.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cba501fa-59f0-4027-ae40-fd5256389c28/0/423DD02225B3732C2CED9BA43076F61C36E6E389.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:05:a8:ce:6b:fa:1b:27:20:a5:aa:e5:37:34:24:cd:f4:a6:
f6:a1:fd:42:c4:0d:1c:05:38:43:fc:53:42:26:11:1a:67:e3:
48:08:f2:d0:b1:90:aa:36:40:84:39:db:25:d2:9c:fd:a6:f6:
4e:ff:6f:f5:38:d4:38:8a:23:7e:28:b1:ae:8a:74:6b:5b:da:
ee:9a:93:1a:28:c8:0f:04:1a:25:b2:3e:df:60:a3:9d:65:e9:
4e:fd:36:30:7f:d6:18:5c:f4:24:07:67:0d:09:68:9e:b6:18:
bf:37:e6:5f:45:f6:14:f1:43:63:f8:7b:c2:d4:aa:26:72:35:
77:d0:07:af:4f:cf:10:9c:24:40:d2:fc:53:ce:df:62:17:ec:
84:db:5e:b5:d0:a8:6f:20:88:57:1e:72:52:c8:7d:44:fe:67:
ec:85:73:dc:ca:03:80:c0:75:88:d4:f7:1f:d7:44:e5:df:29:
81:77:44:f0:6e:94:61:49:50:38:e7:46:05:4b:c1:19:63:b3:
5b:1a:85:87:e4:fb:ed:bb:df:f5:32:ab:81:33:2d:a9:9a:c0:
67:ed:a3:7f:53:b4:82:5c:bc:56:64:79:97:3a:d4:1f:1f:68:
ef:58:a8:d2:05:48:cd:48:2a:ab:23:8e:f3:95:b7:a7:35:63:
fc:d9:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:39 2026 by rpki-client