Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: DUQcO0F+oCRtl1gHLEdQE234BZEJlImTSV9hpQSqtYA=
Subject key identifier: 80:85:36:EA:09:0E:3F:D7:FA:E5:90:DB:26:59:9A:82:92:10:F1:7D
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 2F99651AF3D5F44DA176A7F34517EA46637646FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 0495
Signing time: Sun 01 Mar 2026 02:53:40 +0000
Manifest this update: Sun 01 Mar 2026 02:48:40 +0000
Manifest next update: Mon 02 Mar 2026 03:14:40 +0000
Files and hashes: 1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: UyFk0tSqLeguUbFARtAmMzBgBNFGSpgzvL33XkmGJeQ=)
2: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 03:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:99:65:1a:f3:d5:f4:4d:a1:76:a7:f3:45:17:ea:46:63:76:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Mar 1 02:48:40 2026 GMT
Not After : Mar 2 03:14:40 2026 GMT
Subject: CN=808536EA090E3FD7FAE590DB26599A829210F17D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:b1:6e:46:c2:a5:81:34:51:ad:5c:b2:8c:
d7:74:6f:e2:b2:08:0b:16:8c:02:2b:1d:2e:c6:bd:
c0:80:74:41:bc:e0:0b:d6:0a:f7:1c:3c:c9:af:a9:
d7:72:32:a0:b0:17:c5:2d:6b:6f:e9:03:88:25:38:
fc:3d:e0:48:dd:3f:cf:7a:2c:1b:c3:55:b6:11:97:
ca:0b:93:58:94:1e:0f:76:77:4d:0d:60:82:db:cb:
7b:db:7a:d1:9f:35:0e:b8:76:9c:ed:d1:5c:1f:c6:
e6:f6:97:e5:6a:80:8f:b4:b0:a8:03:af:43:1a:2e:
53:29:8e:37:1d:4f:0b:ed:07:e6:2e:ea:03:a6:09:
e0:e7:18:30:63:4b:7e:bf:14:f6:66:15:fe:b0:97:
0d:44:e0:72:a4:b9:bf:da:ad:a3:2d:01:a3:39:e4:
21:a8:f4:75:9a:ed:2f:a7:32:a3:6b:f3:30:a3:8f:
bf:97:d5:70:ec:e6:26:ee:de:65:da:79:c1:c3:2e:
fe:ce:4d:a9:f0:71:6d:ab:fd:ef:57:01:c3:41:50:
c3:10:94:47:c9:91:68:66:a5:89:28:47:dd:46:9d:
05:6c:56:ab:ac:7a:83:e6:23:d6:b9:1f:c9:22:8d:
33:ca:81:b7:d1:09:9f:8b:75:f9:f6:8c:55:12:ef:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:36:EA:09:0E:3F:D7:FA:E5:90:DB:26:59:9A:82:92:10:F1:7D
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:85:94:73:35:5c:15:b8:39:51:3b:27:fa:cd:52:23:1d:24:
23:bb:9a:c7:a7:54:6b:08:35:7a:b9:b2:87:6a:24:35:6d:99:
54:7f:2a:48:25:94:50:8f:1e:b5:b2:d2:b4:1f:6e:90:0d:a8:
56:07:bf:39:92:e9:b7:d7:aa:a7:02:a7:f3:81:ea:73:d9:d7:
54:f3:d2:23:33:d7:57:c5:6b:2f:99:25:0a:e6:45:f7:5a:25:
f6:8b:ea:b0:c2:62:b7:4c:c4:68:9d:d9:18:56:17:ae:55:06:
e3:5a:46:b0:d1:05:41:df:eb:1b:0b:51:5a:13:cf:50:b2:a1:
ec:60:1a:c6:ff:5b:2b:a1:6e:87:5b:88:10:74:a0:d9:a1:b4:
85:05:0a:a2:07:eb:f8:a2:99:66:42:17:a9:a1:18:d2:06:f6:
ca:a9:7a:0c:c4:29:76:ab:16:56:1c:ca:4d:31:32:a6:6a:ed:
0a:09:8a:7c:bb:76:a5:e4:5f:69:da:c2:0c:5a:aa:08:91:39:
48:7d:62:2f:97:2a:d6:a6:6c:ef:6d:af:56:3d:79:66:30:90:
52:07:09:76:4e:a5:69:88:f5:ef:fc:b5:fc:69:7c:05:d2:86:
c6:f7:2c:e8:d5:65:20:7e:a2:84:4b:e9:47:37:4f:6c:8e:aa:
dd:15:1b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:23 2026 by rpki-client