Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: fV3vZBWccg5+PE1WtSFpYuKzn5k2Lb/dU0Lo3DT2sj8=
Subject key identifier: 2E:B4:BE:FD:B5:72:9A:D6:5D:6E:BD:C6:5A:1C:8E:22:B2:51:6C:25
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 4F25BA60D689C0CAEF6D70476BEDC7036527F021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 04C6
Signing time: Sat 14 Nov 2026 09:09:58 +0000
Manifest this update: Sat 14 Nov 2026 09:04:58 +0000
Manifest next update: Sun 15 Nov 2026 10:13:58 +0000
Files and hashes: 1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: m+BH0fl+IfvdqpBWhowXONmplgV4SM0oBm9rHG2SeSo=)
2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: 7bLO5behIIxh8QOWdCdYKrNmYUJrIUwnhfkYG+jVAro=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:25:ba:60:d6:89:c0:ca:ef:6d:70:47:6b:ed:c7:03:65:27:f0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Nov 14 09:04:58 2026 GMT
Not After : Nov 15 10:13:58 2026 GMT
Subject: CN=2EB4BEFDB5729AD65D6EBDC65A1C8E22B2516C25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:0c:fe:bb:f2:50:82:ac:50:e7:e3:ae:c0:
43:f1:6e:e8:b4:3f:9c:ba:3e:c7:e0:00:20:ee:ba:
c0:c7:ea:b3:46:90:c1:d8:24:85:32:0f:92:f0:9f:
f4:d4:fd:59:c1:a1:19:21:81:1c:d5:9f:c6:8f:8d:
63:73:b0:97:7e:db:64:9e:cc:72:a9:76:4d:13:1d:
2b:df:5a:ca:31:91:bb:ab:af:f9:fa:2b:a2:63:9e:
17:58:e0:ca:80:da:04:07:19:be:a6:67:53:b7:42:
76:e1:d4:8d:df:17:6f:5c:af:ab:89:96:99:91:12:
4c:00:fd:9f:ee:ee:f5:ad:fa:75:f9:28:96:66:15:
d2:76:0b:21:cb:40:ff:b1:4a:a0:9a:9e:28:ea:0a:
33:ab:23:1a:47:ec:9a:da:b1:bf:83:fc:38:12:a0:
71:8e:31:5e:ee:c8:88:44:d3:1c:c5:1e:68:d0:d9:
0f:a7:5f:7d:f8:6b:61:26:a0:62:0f:d9:a1:0c:63:
e4:c2:d3:09:97:92:7c:8f:b2:99:6b:c7:ec:36:75:
fa:0a:ca:fd:86:ac:2a:fe:83:a8:93:8b:c9:45:45:
b4:4d:c8:ee:aa:62:86:04:6f:cc:4f:fa:1b:44:f0:
34:e6:fd:05:2b:73:c6:c5:ad:92:d8:cc:27:39:c1:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:BE:FD:B5:72:9A:D6:5D:6E:BD:C6:5A:1C:8E:22:B2:51:6C:25
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0e:a9:81:c9:46:02:76:93:ef:d8:e2:92:7a:a5:c4:40:78:
78:f1:4d:f7:dd:fc:ab:d9:74:72:92:71:b3:fa:15:ae:5c:41:
d5:aa:d4:71:ca:1d:d2:ff:f4:da:cf:26:d3:df:ec:56:b1:0b:
e1:ec:62:75:cd:07:97:69:9e:a6:a5:ca:34:c7:6e:d5:59:7b:
af:ee:1d:f5:56:c6:3b:56:f8:c5:75:35:a6:0b:9a:06:7c:2a:
2a:94:61:06:a7:bd:9c:b6:73:c8:21:6a:a7:39:0b:74:64:14:
a2:c0:2b:05:53:d3:d3:6e:17:9f:91:f5:94:c3:21:29:f9:b2:
be:05:ff:c2:c3:02:47:50:b9:44:7d:8e:62:13:be:2b:07:c8:
42:35:df:eb:23:46:10:28:14:b3:ff:ee:a9:41:95:9d:83:66:
f6:a9:da:44:64:e6:df:96:b3:19:45:35:18:d4:5a:19:99:39:
35:5f:3a:b5:26:86:e5:ac:e6:31:e8:b0:1a:80:96:47:3e:15:
77:03:47:1a:43:3c:83:fc:55:a1:39:b8:2e:97:02:2d:bf:24:
78:a3:31:3d:8f:f5:1e:e6:bd:fa:3f:e1:96:80:4d:8f:3a:84:
97:69:07:21:37:78:8a:f4:80:49:87:8e:73:3a:96:f0:af:e4:
6d:3e:75:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:57 2026 by rpki-client