Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: E0VmEBY0/AILesZi9LArpRe5mvcm/1R94Eg+VbrzKCg=
Subject key identifier: EC:34:23:60:19:D1:9C:87:5B:A3:38:97:D2:0C:A4:76:78:E5:01:C3
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 0FE4C23879D28BEFF7FDC0356290BC79435B19B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 05AB
Signing time: Tue 22 Sep 2026 20:23:52 +0000
Manifest this update: Tue 22 Sep 2026 20:18:52 +0000
Manifest next update: Wed 23 Sep 2026 22:06:52 +0000
Files and hashes: 1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: elMCS9p8NMlolF4RSsDfiPoGTXbNOzZEQM1OBV1VTJE=)
2: AS203843.asa (hash: V8ALni8uGvnQlob1ieX97WK3dqsrOaJM1khRqBJJdKg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e4:c2:38:79:d2:8b:ef:f7:fd:c0:35:62:90:bc:79:43:5b:19:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Sep 22 20:18:52 2026 GMT
Not After : Sep 23 22:06:52 2026 GMT
Subject: CN=EC34236019D19C875BA33897D20CA47678E501C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:48:89:6b:44:d5:f1:57:f8:5d:88:d8:13:
e2:b3:74:8f:3c:d5:e5:88:d2:67:5d:11:3a:d3:29:
5c:ae:bc:6d:16:a6:95:8c:6f:df:01:6d:d5:a3:a1:
78:11:f5:fc:5b:8c:25:40:11:3e:24:d2:11:04:d3:
2d:2d:e4:2a:5a:70:01:17:23:35:d9:a2:15:d3:5c:
f8:27:94:b4:cc:ab:a5:5c:5b:c8:25:29:be:c3:01:
ef:be:ca:38:e7:e9:42:3c:3a:70:88:d5:c0:a1:af:
c7:9d:d4:60:37:cf:35:9c:05:d6:4d:da:7c:d4:05:
ba:df:35:cc:fb:36:a4:64:ea:6d:7e:5e:4c:2a:cb:
69:ea:9b:e2:74:77:ef:19:e0:7b:02:ae:5f:cb:9b:
1b:2a:62:37:7d:8e:38:d7:6b:11:fe:f9:d1:b9:81:
77:72:80:d6:96:40:cf:76:99:1c:fe:8a:49:1a:2a:
4d:4c:2f:bc:6a:22:a1:ea:6f:fd:29:d9:fe:15:31:
cf:62:92:ac:50:b4:96:52:7c:90:60:6d:41:38:94:
19:6f:17:72:cb:6d:06:c7:b7:9a:fb:2f:33:ca:82:
51:0f:bc:c4:e5:69:2b:fa:e7:66:4b:b8:30:38:9d:
80:4a:87:47:23:5f:41:52:49:b2:a9:68:07:39:e8:
12:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:34:23:60:19:D1:9C:87:5B:A3:38:97:D2:0C:A4:76:78:E5:01:C3
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:26:8f:18:70:a6:67:a4:be:ce:66:f9:14:e3:84:ed:b5:0c:
c4:55:45:96:50:7d:5a:fb:66:08:06:a4:24:96:4b:b7:cf:d8:
b5:2a:f5:93:07:d0:7b:1a:54:3e:6d:f8:38:6d:a2:42:c3:69:
98:7e:b1:5c:1b:a5:d7:c5:31:6d:f6:3a:7a:62:e0:90:44:e2:
84:e1:1b:60:d7:0f:91:2c:de:b3:ae:46:49:bf:48:d8:18:7c:
a5:f2:6c:af:04:71:24:87:1d:3a:ea:92:63:fe:b2:13:d2:cb:
91:d7:ab:99:53:38:03:ab:af:a9:65:93:a0:7a:47:38:05:ce:
f3:d0:79:78:c2:9c:8f:65:4f:51:d2:5a:0d:48:11:50:92:25:
71:c4:39:da:fe:ee:7c:42:f1:e7:6d:27:af:62:48:88:f1:30:
55:97:f9:46:88:c6:b1:0c:09:e3:c6:5d:fc:8d:45:5b:19:db:
33:46:f8:4a:28:5b:94:c5:96:06:ba:f0:ec:5f:1c:3d:ec:62:
d4:75:e4:39:de:2b:8c:ad:9d:20:17:da:4f:35:ba:c2:08:b0:
2e:23:74:7b:f7:9c:f8:c8:3d:98:98:8e:f7:f4:7e:34:9b:b7:
45:4b:db:b2:87:dd:5f:aa:1b:21:c0:bd:69:2b:20:6d:be:d0:
c5:8d:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:32:14 2026 by rpki-client