Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: DUYa+9D7xVOq1wDV1Or3bTBpgyIGJE6Ev34oFdw9jHw=
Subject key identifier: 5A:44:34:FF:39:C7:0C:ED:87:D4:17:8B:00:00:15:CB:9C:D1:3E:97
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 3197D80DC0C98FC31887D59514BB2B29436EA3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 03CD
Signing time: Tue 12 May 2026 08:34:47 +0000
Manifest this update: Tue 12 May 2026 08:29:47 +0000
Manifest next update: Wed 13 May 2026 12:14:47 +0000
Files and hashes: 1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: Uh/2cNgfQhDGdy56+HMEnb2DlWS8R2mUTWf4pnSzujc=)
2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:97:d8:0d:c0:c9:8f:c3:18:87:d5:95:14:bb:2b:29:43:6e:a3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: May 12 08:29:47 2026 GMT
Not After : May 13 12:14:47 2026 GMT
Subject: CN=5A4434FF39C70CED87D4178B000015CB9CD13E97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:44:c5:bb:70:04:91:85:ed:52:e4:db:bb:0c:
41:1b:cd:c5:63:c6:d9:f4:1a:9f:79:c5:e0:04:5f:
84:49:90:4a:72:a5:a5:34:19:7e:7e:96:55:33:dc:
63:5e:30:ef:5e:43:01:b1:1c:7f:5e:10:94:b8:75:
00:eb:45:ad:f0:59:6a:da:38:7f:82:a3:03:67:8c:
aa:cd:9e:4e:39:d2:1d:42:57:46:fa:e5:53:42:d0:
be:9c:a0:bf:95:58:41:fa:6d:88:f3:b3:da:86:1c:
ea:c0:ab:52:b8:c5:f8:59:5f:50:22:dc:4b:0c:d6:
ea:3a:6b:08:85:db:7f:91:8f:b2:53:78:df:84:99:
27:b1:2b:a5:a7:91:d9:d5:33:c2:11:43:df:a4:70:
7e:e6:04:b6:95:13:98:12:e7:18:67:e0:53:98:f6:
83:b9:f6:f6:13:7e:01:f6:3e:7c:8c:34:5a:61:06:
57:75:95:45:5e:9c:37:3d:7f:35:b0:62:45:04:b2:
73:af:01:6e:cc:2c:5e:f2:65:7b:01:32:d5:67:a8:
8b:e2:ce:01:5d:e7:b0:94:4d:2f:6f:64:70:1d:c4:
1c:b5:6b:c5:98:5a:ce:d7:3f:75:24:1c:4e:6b:27:
63:b8:cf:b8:6d:a5:84:dc:12:8a:d6:e4:94:97:08:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:44:34:FF:39:C7:0C:ED:87:D4:17:8B:00:00:15:CB:9C:D1:3E:97
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:05:0f:fd:ed:77:e5:d6:6a:47:98:9c:2f:f6:72:6d:16:aa:
14:6d:d9:c6:d8:ce:e9:41:b8:a6:04:44:08:38:71:8f:bc:2c:
15:13:a8:39:08:b0:2b:3a:99:c6:b4:fb:46:29:09:36:26:8a:
2e:a1:5f:cc:f4:1e:70:df:63:d4:b5:54:b4:2d:8a:6a:28:0c:
cd:73:ce:7e:85:b2:2f:a8:bf:cf:06:ff:25:c0:a5:3d:c7:db:
e9:13:c2:05:44:77:9c:0e:01:6a:b1:41:43:c2:fd:2c:d3:df:
98:fb:17:a7:70:81:4a:83:3a:31:e6:c2:32:e6:a1:7a:af:9e:
ab:99:07:06:68:0b:2a:40:36:f0:d6:0f:90:d1:8b:5e:8c:9a:
ae:48:cc:e9:07:c2:4d:ee:da:3c:6e:a6:2e:d2:96:e0:83:ba:
31:37:f8:1d:0b:66:fe:94:4e:81:af:70:ff:d3:52:22:3f:6f:
5c:61:ad:49:18:0f:77:85:d8:16:d2:d1:7a:46:fc:3c:05:7d:
8d:af:4f:a9:50:df:2d:58:42:d1:67:b3:d4:a7:81:d0:92:f2:
c4:5c:eb:57:d3:0c:5e:00:c1:90:67:e7:83:58:18:c4:13:fa:
17:30:a6:b2:32:73:53:f3:17:e2:19:42:7e:59:08:57:54:ed:
3b:22:f0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:13 2026 by rpki-client