Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier: L0x4XXRU2SUYhFWhYKBaPJdiSeZmWpVyFOlVqx97YXc=
Subject key identifier: 03:C2:52:03:30:DE:A5:16:0A:35:D0:E2:52:ED:FA:2F:00:5D:B4:62
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer: /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial: 0FF34B7455BB83BA9551308EF3296A6C6D288C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number: 0402
Signing time: Thu 23 Jul 2026 19:16:10 +0000
Manifest this update: Thu 23 Jul 2026 19:11:10 +0000
Manifest next update: Fri 24 Jul 2026 21:46:10 +0000
Files and hashes: 1: AS214723.asa (hash: rkKLIM3Jzl++4c/N1MAbX2VnZd8jPZSTe5gZ4DgYJLI=)
2: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: VkpJpm13mJJW5iTty2OkWN/Bx48DKXnB8okLyvpFBP4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f3:4b:74:55:bb:83:ba:95:51:30:8e:f3:29:6a:6c:6d:28:8c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Validity
Not Before: Jul 23 19:11:10 2026 GMT
Not After : Jul 24 21:46:10 2026 GMT
Subject: CN=03C2520330DEA5160A35D0E252EDFA2F005DB462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:cd:75:06:a0:9c:e3:c6:ae:0e:a1:b7:19:
d0:7f:ae:96:17:10:d5:07:28:1a:fe:e2:86:ac:f2:
a3:44:c2:d9:de:4d:fb:ae:08:7c:17:a4:e3:fd:51:
32:f8:96:1d:3d:22:db:b3:99:15:10:d3:5b:59:45:
1c:53:77:43:a6:b9:51:c4:b3:c5:23:e8:00:6e:a5:
4f:7a:ee:f3:db:52:36:25:7b:70:5b:38:fa:ec:c8:
24:62:2d:38:3b:dc:68:d6:b4:e4:25:ff:ba:d5:f4:
5c:0c:69:ff:86:ac:0e:2f:5a:f7:20:17:a1:3c:3c:
f8:d3:ca:02:47:45:e3:32:e4:9e:92:d7:e0:97:28:
9f:c0:60:51:5f:f9:de:43:05:2b:c5:2a:61:a1:20:
97:79:c0:76:6e:41:84:b7:5a:5d:03:d0:c8:cd:7e:
70:39:d9:42:07:0b:31:0a:16:82:10:83:2e:0b:7f:
05:f6:ec:c5:78:f1:6d:a7:59:8c:39:7d:cc:ec:c6:
89:46:2e:34:65:f8:63:f7:0e:b8:51:fb:cd:89:f0:
00:9b:f1:8d:6c:6b:29:0a:e3:64:62:1a:12:71:ba:
ae:96:1a:2f:44:45:66:f6:b6:c6:80:e2:b0:67:4a:
ca:05:f7:4a:eb:81:63:88:b4:5f:5e:bd:af:64:a1:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C2:52:03:30:DE:A5:16:0A:35:D0:E2:52:ED:FA:2F:00:5D:B4:62
X509v3 Authority Key Identifier:
keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f5:77:a8:fb:bc:94:2b:52:a5:54:74:e1:92:c0:54:ed:d6:
53:5d:ef:bd:e7:fc:15:d7:07:56:20:17:8e:20:78:d3:c5:ad:
f3:e6:88:38:75:39:c5:c7:ea:c3:ad:48:74:b8:1b:84:8c:c5:
75:b3:40:64:08:86:2f:1b:a9:f3:0a:2b:cc:59:01:24:e7:d6:
e3:c3:31:32:d5:3a:05:b0:78:54:b4:b5:d6:00:a7:f6:82:c5:
44:f6:18:7d:55:08:12:26:4f:ec:bd:c1:55:b2:d5:f2:98:56:
fa:83:cc:43:42:0f:81:a6:a7:11:86:94:26:3f:ce:28:45:73:
25:9d:aa:2a:2b:fa:09:68:6c:bd:32:9f:96:75:e8:d3:c7:8b:
4d:8b:1a:6e:f3:96:a8:77:9d:bb:f3:98:0c:8d:c9:b9:57:86:
ce:e2:5e:24:f3:13:ff:55:a3:15:6a:0b:5f:0a:01:c9:d2:c4:
ec:e3:46:94:dd:fc:24:b3:ae:e9:e9:8c:51:e2:5a:9f:6b:99:
35:a3:8a:79:51:25:4e:b7:55:f8:ee:93:49:35:54:17:4a:69:
5d:73:84:bc:e4:96:0a:76:37:7b:b2:cf:13:0d:e5:83:be:27:
30:bb:c4:b6:07:f8:51:c5:23:76:f0:01:53:cd:c0:50:f6:71:
79:85:30:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:37 2026 by rpki-client