
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
File: 883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json)
Hash identifier: SkkSO3kK9M7SYHC2rQp2Jvnl0GT4HdnCQOB3jJOrTfM=
Subject key identifier: 87:7B:14:07:C1:07:2D:66:AF:53:01:F5:4C:47:35:C5:42:CD:93:59
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Certificate issuer: /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial: 29D32A652574A84B44DA1593E7A07738CA3C69B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
Manifest number: 9B
Signing time: Thu 16 Apr 2026 20:09:18 +0000
Manifest this update: Thu 16 Apr 2026 20:04:18 +0000
Manifest next update: Fri 17 Apr 2026 20:31:18 +0000
Files and hashes: 1: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=)
2: AS213605.asa (hash: B68nuYOmBkr1PN0uV5jrjgUKWdkDbfDhxV5SNj6JuWc=)
3: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: 4VKQeslZ2+whZm0Lg5jMJ5gyQwh5GaXvug0ZOnkPMzI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d3:2a:65:25:74:a8:4b:44:da:15:93:e7:a0:77:38:ca:3c:69:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
Validity
Not Before: Apr 16 20:04:18 2026 GMT
Not After : Apr 17 20:31:18 2026 GMT
Subject: CN=877B1407C1072D66AF5301F54C4735C542CD9359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:24:72:aa:19:2b:84:87:ad:ac:a8:df:d0:
4c:76:f9:0f:08:20:53:88:f5:b8:18:64:b1:48:79:
15:08:a4:dd:15:04:48:e7:14:ad:0b:f1:67:17:86:
49:2c:cd:4a:27:64:02:97:b8:72:44:48:51:ef:dc:
dd:ef:b5:43:2a:68:90:80:b2:4f:e6:f3:30:10:fc:
27:2d:11:f1:c6:eb:20:96:0f:15:f8:70:22:d9:52:
30:7b:0a:d8:81:b9:61:4b:0d:ba:58:9f:b3:ef:c8:
07:38:8d:7e:d6:24:67:b4:c9:e3:fe:f5:9b:15:0e:
d6:49:31:b3:96:72:4b:38:df:78:91:5e:7a:4c:2c:
7b:31:d6:76:3b:05:ec:9e:0c:3c:a3:6f:d1:3e:63:
f9:56:e0:ba:75:51:b1:a1:19:23:05:f6:9c:6b:93:
18:e0:19:ba:40:f0:fc:f8:2d:d8:7c:8c:b0:6c:ca:
2e:6a:c2:3d:82:fa:43:25:be:72:d7:10:75:8a:fe:
5f:27:b7:84:ed:d5:a5:d0:b5:ab:f2:7d:44:9a:84:
5c:a9:45:20:c3:e9:6a:b3:1e:01:c8:5f:70:9a:9e:
f2:ea:d7:66:af:7f:60:e4:40:9a:65:dd:a8:31:4a:
1d:61:38:2f:65:40:8d:7c:a8:d3:8e:ce:80:85:1d:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7B:14:07:C1:07:2D:66:AF:53:01:F5:4C:47:35:C5:42:CD:93:59
X509v3 Authority Key Identifier:
keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ba:18:a8:77:81:61:6b:16:74:c2:97:74:38:4d:cb:9f:6e:
9d:b4:9b:22:31:70:03:77:51:ea:23:d7:16:d9:0f:c7:ce:52:
b5:b5:4c:20:38:f6:9e:13:93:0a:af:e5:7f:c0:11:d1:48:83:
92:34:31:1e:37:42:9c:25:ca:94:a3:7b:84:7d:a5:c0:6f:3b:
b6:d8:04:ab:7d:03:b1:18:73:e1:6c:0b:37:3e:be:ea:fc:c1:
e4:ee:85:3d:c0:73:7d:64:51:71:d7:1b:75:6e:f4:c1:33:90:
fd:a4:cf:05:f3:b5:9e:1a:68:52:aa:69:e3:9b:fa:bb:ca:4a:
0c:08:94:68:df:b9:c2:a1:d5:82:ea:23:7d:7f:b4:aa:7c:6f:
30:a0:e6:f4:8c:57:80:d7:de:3c:42:35:ca:1e:a3:da:29:1a:
4e:b6:4e:75:f9:b1:65:84:12:00:37:20:f3:6e:aa:b4:44:e5:
e4:33:23:82:07:85:26:07:1d:68:88:dd:68:3e:de:28:f3:77:
8d:fc:f5:ef:13:fa:99:91:2d:a0:bb:2b:50:e5:66:f5:45:ee:
18:cd:b4:69:63:13:89:11:b2:0b:7c:57:e8:e2:e0:38:03:d5:
18:94:ce:36:a5:92:07:3f:1c:73:fa:42:b5:90:a3:eb:0f:8e:
16:86:98:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:22 2026 by rpki-client