Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
File: 883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json)
Hash identifier: 9w1JGkKQCjZ0zOnkiRVR6vLVBAzb4sQcWyzyWS3qXYk=
Subject key identifier: 1F:68:F1:83:2D:7A:4E:B0:52:A1:A3:5F:E9:1B:E0:47:BD:49:66:02
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Certificate issuer: /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial: 70C5B6A675DB2BF54EF444E07272F37521CDADFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
Manifest number: 5B
Signing time: Sat 28 Feb 2026 19:53:23 +0000
Manifest this update: Sat 28 Feb 2026 19:48:23 +0000
Manifest next update: Sun 01 Mar 2026 23:05:23 +0000
Files and hashes: 1: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: Ppw0Q+AVPfG/MitDkGbBLfcaZpoUvqYTfEWu3aIJRcw=)
2: AS213605.asa (hash: B68nuYOmBkr1PN0uV5jrjgUKWdkDbfDhxV5SNj6JuWc=)
3: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 23:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c5:b6:a6:75:db:2b:f5:4e:f4:44:e0:72:72:f3:75:21:cd:ad:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
Validity
Not Before: Feb 28 19:48:23 2026 GMT
Not After : Mar 1 23:05:23 2026 GMT
Subject: CN=1F68F1832D7A4EB052A1A35FE91BE047BD496602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:31:0b:2e:3f:c1:37:e3:44:de:33:b4:cf:
d1:cc:a0:c6:cd:1d:ca:93:97:81:89:c2:24:d7:7e:
1a:bb:c4:22:70:25:48:40:fb:b5:52:97:f5:f4:f1:
da:50:e3:67:2f:8b:64:f8:a0:69:c8:be:39:02:0d:
e8:8d:22:79:85:ce:1a:0e:16:9b:e0:a9:13:89:09:
2c:79:4b:b5:ba:24:16:9a:72:c4:63:a8:06:4f:8e:
b6:de:71:07:1e:54:ea:6f:6e:fd:b6:0f:19:8a:50:
5c:8a:19:6c:a4:c8:99:ad:3b:14:ef:70:f3:8a:59:
92:fb:8b:4f:6b:4a:cf:15:64:b5:4a:f6:44:52:50:
e9:19:93:97:80:0f:63:32:bd:da:e6:58:d2:3e:d1:
54:32:de:ec:6f:23:7c:46:50:a0:5d:34:ef:d7:bc:
db:a1:71:f9:6d:fd:88:7f:3e:37:25:76:a2:c4:da:
56:62:95:52:65:2b:8f:8c:05:91:27:f0:9d:fd:4b:
16:35:c4:bc:92:59:94:b2:32:60:21:fd:b6:a2:3b:
1d:68:f5:29:71:61:3c:90:36:fe:0e:bd:76:a0:02:
d3:e6:86:59:f5:ec:44:59:e4:eb:a0:9a:30:f0:1f:
22:9b:db:8f:b1:ae:0c:c1:35:b7:6d:45:fe:cb:be:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:68:F1:83:2D:7A:4E:B0:52:A1:A3:5F:E9:1B:E0:47:BD:49:66:02
X509v3 Authority Key Identifier:
keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:42:14:ba:e9:fa:d5:e3:5a:d5:39:e2:e2:c4:4f:96:81:33:
e8:e9:12:49:c6:2a:d4:71:8d:a4:d5:df:48:ff:71:a8:40:fe:
3e:27:ef:fb:86:86:0c:d1:ae:7a:2a:36:cd:0b:e4:69:3a:e7:
da:ad:f7:6b:0e:f3:49:4e:93:93:f2:aa:04:b5:56:01:13:4a:
3b:be:e8:ec:eb:07:e6:be:18:c5:5d:38:45:ef:d8:44:63:30:
a2:d2:5c:52:3b:6a:64:8f:2c:2c:83:32:79:e2:95:de:74:67:
97:a8:01:06:b2:00:95:c9:70:da:68:db:2b:fc:64:5e:f6:2e:
77:4a:3b:fd:87:72:98:6a:dc:89:9d:7b:0a:44:84:50:76:09:
26:dd:a8:ec:ac:c1:c4:f0:ca:4d:a6:d9:3d:18:09:d3:72:fb:
90:65:b7:5a:6f:26:4d:5f:57:94:13:d0:be:c7:9f:a3:3c:e5:
87:8c:15:b3:2b:4a:ac:45:d7:c6:7f:7a:db:a4:4a:54:8e:17:
72:42:d4:85:3a:71:3c:66:f5:9f:1d:93:f9:22:44:fb:c2:8c:
7d:9b:22:0b:ee:c8:c3:d0:dc:83:ca:34:c9:fb:7f:1f:0f:e7:
eb:c8:e9:82:41:1f:00:ff:de:f9:c1:6a:c4:fc:ad:3e:15:18:
79:f9:d7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:48 2026 by rpki-client