Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier: b621IxXuALFPXov3bBJSM5RD3P9yZ+CNlJMww+kCSEQ=
Subject key identifier: 85:30:55:5F:4A:C2:20:74:76:EC:11:5E:51:0B:95:49:94:27:8D:E5
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial: 70305E35E51DD00EA23B8CE41584104EA4490FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number: 0503
Signing time: Fri 25 Sep 2026 11:23:32 +0000
Manifest this update: Fri 25 Sep 2026 11:18:32 +0000
Manifest next update: Sat 26 Sep 2026 14:04:32 +0000
Files and hashes: 1: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: MA6NPPoujdiQWojyCVLJyxDFh4C42V7H1GeWERt+WOo=)
2: AS205329.asa (hash: D7v68W1jFkdHMUdFoafa1ip0HB/iYsJ/PoPFEmKh9to=)
3: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: QiY502h0PfbDb7VUSVZqmGnMezcZZHPSfGK2cENAnnk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:30:5e:35:e5:1d:d0:0e:a2:3b:8c:e4:15:84:10:4e:a4:49:0f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Validity
Not Before: Sep 25 11:18:32 2026 GMT
Not After : Sep 26 14:04:32 2026 GMT
Subject: CN=8530555F4AC2207476EC115E510B954994278DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:a5:47:46:e6:5d:38:49:eb:47:98:e2:79:
59:5b:77:6c:40:7f:2d:79:20:87:17:03:dc:74:07:
a3:72:74:d3:8a:21:dc:39:57:83:11:64:2f:0d:a3:
a1:ca:66:67:4b:e6:25:cb:fc:4f:cf:c8:8b:9c:fd:
b1:31:f9:da:f6:07:d3:9b:91:cb:b5:f5:9d:23:bf:
e2:33:08:08:b0:25:56:6f:da:ed:b3:08:7e:60:f8:
cf:a3:64:e8:3b:7c:bf:c8:71:68:ad:c7:81:5e:49:
77:1e:cb:53:7e:33:a6:a3:8c:21:06:d2:e4:95:6a:
a6:5f:98:69:d5:d3:e7:47:7f:97:5a:c4:8f:0a:df:
b4:68:c7:db:0f:63:ef:da:0d:f6:f8:2f:a9:ba:45:
53:d8:2f:c2:16:3e:dd:18:6b:61:10:ff:0a:57:aa:
9e:9a:1b:b4:b8:fe:ec:3f:9d:5a:73:64:b2:30:96:
d8:20:37:b9:88:70:ff:ad:a1:d5:b0:1e:78:ad:b1:
f6:e7:af:b8:d9:c7:5f:32:68:3f:b8:5b:8b:e0:b6:
54:d5:87:67:e6:ed:a3:7a:b6:e4:bd:d4:8b:83:c2:
37:6c:ad:24:ae:69:4d:67:0d:20:15:bc:9d:9e:1d:
55:89:a6:de:16:ec:ff:b7:fe:39:b3:2f:88:58:95:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:30:55:5F:4A:C2:20:74:76:EC:11:5E:51:0B:95:49:94:27:8D:E5
X509v3 Authority Key Identifier:
keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:94:3a:72:65:ae:91:47:2e:d3:94:94:a5:68:33:7d:7a:0e:
d4:5e:df:c3:46:50:cf:7a:5c:e4:03:9d:1b:ce:8c:ac:6a:a1:
1d:92:6b:4e:a3:02:5c:3b:12:62:83:48:0f:da:c0:e6:8b:a6:
41:3d:88:21:3a:42:4d:b3:99:53:8b:35:8d:56:c8:ae:b2:2c:
04:17:f9:b3:ad:fb:c2:52:fe:fb:90:9e:12:85:04:b8:9c:91:
99:15:38:97:4e:b6:ba:0f:9c:db:98:87:0e:03:00:8b:18:24:
f3:d4:29:e8:8b:48:18:3d:c7:43:92:91:7d:01:d9:37:52:e0:
1e:d6:5e:b2:66:fd:02:d6:27:43:c8:46:e5:b7:7b:8d:c0:3d:
b4:bd:c9:2c:d6:47:10:59:ad:f8:72:d4:01:82:e9:f1:ef:0d:
4d:05:f7:db:1c:09:a0:f9:f3:43:e3:25:11:74:4d:6b:1f:ce:
67:6b:0a:e6:c7:2b:2b:90:60:78:57:58:dc:b0:48:f7:65:18:
46:6f:08:5b:51:81:9c:8f:f8:b4:ac:c7:f6:7c:c9:34:5f:70:
3d:b8:28:6c:76:2f:39:86:fd:18:46:3a:7c:5f:2c:61:d8:e4:
cf:1a:05:ca:ce:02:fc:5c:7c:c9:af:a9:39:4a:5b:04:d8:e9:
c0:db:52:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:16:47 2026 by rpki-client