
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.mft
File: 81C1480DA58487D056863DD4AB71D8210A3687FA.mft (raw, json)
Hash identifier: YRIT/uSVXc/E+UNkUtOlBYVckAcbre1KPfV+wBwrvhY=
Subject key identifier: A6:CF:C8:3D:C2:9E:32:64:4E:A2:B7:E4:75:6E:55:68:A1:47:4B:87
Authority key identifier: 81:C1:48:0D:A5:84:87:D0:56:86:3D:D4:AB:71:D8:21:0A:36:87:FA
Certificate issuer: /CN=81c1480da58487d056863dd4ab71d8210a3687fa
Certificate serial: 428869EB35D87AE8A0130B2A4F16DB52809776F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcFIDaWEh9BWhj3Uq3HYIQo2h_o.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.mft
Manifest number: 21
Signing time: Wed 23 Sep 2026 22:13:51 +0000
Manifest this update: Wed 23 Sep 2026 22:08:51 +0000
Manifest next update: Thu 24 Sep 2026 23:41:51 +0000
Files and hashes: 1: AS204211.asa (hash: nspqzYTdh2cYN+ehCfBpH3dODefqj1UfyxztHHoGnjc=)
2: 81C1480DA58487D056863DD4AB71D8210A3687FA.crl (hash: 34EdqpHsyhiPcxrqAgEU8OjPcHJdKmOKMqqhGBXxlIs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.crl
rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcFIDaWEh9BWhj3Uq3HYIQo2h_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:88:69:eb:35:d8:7a:e8:a0:13:0b:2a:4f:16:db:52:80:97:76:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c1480da58487d056863dd4ab71d8210a3687fa
Validity
Not Before: Sep 23 22:08:51 2026 GMT
Not After : Sep 24 23:41:51 2026 GMT
Subject: CN=A6CFC83DC29E32644EA2B7E4756E5568A1474B87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:59:0f:5a:67:6c:d5:7b:07:16:24:7a:7d:
ad:ad:c4:cc:1b:a0:cd:9e:90:d1:ed:9f:e1:7b:cc:
7c:26:3f:d6:45:c5:b3:05:3a:2c:6c:59:cf:cc:db:
60:f5:63:72:eb:a3:19:9d:0a:d5:d4:23:8e:a8:82:
27:db:e1:78:24:4f:24:ff:e5:29:18:c1:a1:4b:6b:
1c:98:74:de:36:66:9b:dc:8e:b7:48:1b:13:03:74:
ad:8a:98:46:17:9f:95:1f:b3:ac:e3:8c:69:fa:c6:
09:39:e1:3b:9a:f8:08:00:02:0c:75:66:2b:4d:0b:
56:d0:d9:ab:33:37:b3:df:05:63:a2:f5:fb:61:bc:
4a:ca:2d:01:4a:d3:b2:ed:36:56:bf:0d:3f:c9:ec:
13:e4:3f:e5:96:25:b3:3e:a4:fa:48:78:0f:52:38:
30:8a:1d:54:bc:82:36:6b:47:f6:e4:9c:8b:7b:5f:
3b:4f:59:e5:6c:e8:e3:c3:80:11:eb:92:cb:4f:b4:
cb:22:a2:a6:c1:b3:3e:f9:1c:01:e7:ad:24:e1:17:
96:03:99:69:d5:fc:0b:82:ff:df:88:b7:58:39:7c:
91:08:d5:6a:39:bf:1f:34:96:c6:1d:98:f9:01:54:
b8:ff:c3:fa:7f:4d:01:91:e3:d8:b4:0f:a3:10:66:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CF:C8:3D:C2:9E:32:64:4E:A2:B7:E4:75:6E:55:68:A1:47:4B:87
X509v3 Authority Key Identifier:
keyid:81:C1:48:0D:A5:84:87:D0:56:86:3D:D4:AB:71:D8:21:0A:36:87:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcFIDaWEh9BWhj3Uq3HYIQo2h_o.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/6/81C1480DA58487D056863DD4AB71D8210A3687FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1f:fa:ea:bf:5f:9a:27:ab:49:98:8c:9c:99:9a:27:ec:c5:
df:7d:a4:66:c9:38:66:14:08:7c:6f:fe:c5:05:72:1f:02:92:
cb:87:00:c4:0d:35:4e:29:03:6c:95:89:91:82:8e:31:64:0b:
d5:52:bb:44:8d:75:fe:cc:de:a1:bf:72:4a:cc:ef:a9:1a:f4:
00:89:14:fc:74:19:d5:25:a9:a7:96:a3:85:b1:a5:65:e8:10:
b5:13:78:69:c5:bd:22:52:92:e0:ec:5f:2a:21:ba:1b:4d:03:
43:11:20:48:7e:f7:01:27:be:ef:68:4a:fe:2a:9a:3d:54:48:
ec:18:1c:ff:12:e5:7b:e5:16:b3:f0:09:59:5e:b7:45:79:23:
d5:d6:c5:1a:5f:e5:3b:9e:76:de:79:0a:e1:12:59:40:7f:51:
8d:23:6d:5e:b8:83:c0:3c:de:c5:e7:5d:42:89:a2:c7:df:74:
fb:a1:5a:77:8a:44:8b:fb:c1:28:a8:dd:5f:c6:ba:a6:49:b9:
25:5e:14:a3:16:fa:3f:bb:7d:e3:9d:77:21:dd:ec:57:20:7f:
55:55:34:04:d9:a7:96:4c:6c:48:b9:46:8f:4d:fd:d2:66:72:
a1:b0:61:5b:7e:5e:3f:0f:80:61:b7:3a:1b:55:a3:9f:04:cc:
7c:f5:c1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:40:27 2026 by rpki-client