Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier: BpE0ljVp0pgt/P/apHLkl5SBFeKz/6B6DLWwxNSrUYI=
Subject key identifier: 1B:D8:B6:5E:0B:47:2D:41:F4:ED:34:58:DE:63:03:25:87:83:33:4F
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial: 450252F7DC28968C81B88EF5A8451F632548060B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number: 04D6
Signing time: Thu 16 Apr 2026 23:26:42 +0000
Manifest this update: Thu 16 Apr 2026 23:21:42 +0000
Manifest next update: Sat 18 Apr 2026 01:20:42 +0000
Files and hashes: 1: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=)
2: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: pFqKuY4d53+mGnEybaD7ZTprHxbNO0j0mk7vgTb+9MQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:02:52:f7:dc:28:96:8c:81:b8:8e:f5:a8:45:1f:63:25:48:06:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Validity
Not Before: Apr 16 23:21:42 2026 GMT
Not After : Apr 18 01:20:42 2026 GMT
Subject: CN=1BD8B65E0B472D41F4ED3458DE6303258783334F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:46:9d:49:d2:6d:e7:a8:12:ce:d7:a4:2a:c7:
7e:e0:f8:b7:25:a8:a5:8d:09:9a:38:f6:74:9c:d1:
24:3a:90:7c:69:75:c1:3c:ce:3a:19:ea:b6:bf:bc:
87:95:f3:44:83:80:7a:67:44:4c:62:2d:a1:67:4d:
d7:64:0e:1b:bd:0e:23:e9:4b:f9:1f:73:1e:b2:3e:
3a:ff:ab:ce:d3:e0:39:fc:f4:28:36:56:79:b6:78:
b6:c0:b1:1b:02:71:24:3a:b5:6e:ce:d1:0c:f8:d7:
fb:9e:f2:b3:6c:15:77:85:2a:10:1a:8b:40:db:66:
06:6f:f8:8b:80:66:af:ea:e5:e4:25:e8:24:c8:6a:
62:34:92:0f:29:a4:7f:56:72:38:2c:43:9f:8e:09:
42:51:b8:07:a5:5d:63:d0:e3:d0:f2:aa:19:a9:02:
3a:10:3b:16:fa:fc:45:5c:1e:b9:05:14:2c:6c:7e:
39:31:22:ea:75:08:5f:f2:ac:0a:bc:87:87:9d:9b:
08:03:55:bc:fb:4d:69:e7:16:a1:b4:9a:7a:41:f5:
39:4b:d4:44:8f:b5:bc:92:bf:ac:05:6e:1a:4d:3c:
a2:cf:13:6c:75:ba:3d:6b:ba:f0:81:06:fb:cb:cf:
b0:bc:6a:7f:4f:97:c4:ec:ee:3e:39:7c:76:04:36:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D8:B6:5E:0B:47:2D:41:F4:ED:34:58:DE:63:03:25:87:83:33:4F
X509v3 Authority Key Identifier:
keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:af:1e:54:60:94:1f:97:d0:ec:90:40:29:28:60:31:ea:af:
1a:11:20:e5:f0:c2:77:ef:07:53:ff:9e:02:13:fd:91:7d:2a:
81:69:71:34:7b:95:12:a6:3b:5f:af:dc:64:22:7a:08:4e:13:
eb:5f:a5:87:65:5a:4f:41:a2:21:f9:41:7e:76:a4:73:04:41:
60:2f:e9:bc:91:84:a5:28:59:e8:9c:09:9b:43:a0:7c:5e:b0:
67:ff:7d:b2:4a:0a:ff:ac:40:fd:d1:00:61:81:b2:bd:b7:ec:
eb:d1:22:a5:0f:8a:d3:9c:73:2b:5e:9c:37:d0:89:30:87:e1:
e5:59:af:76:d4:bf:b4:5a:a1:bc:cb:51:61:93:4c:27:03:49:
2f:5c:9c:00:4c:39:8e:a4:51:75:af:f0:be:74:b1:23:c1:fe:
b2:ee:6a:d8:38:ad:55:e3:db:f2:06:17:19:29:45:a1:72:ef:
0c:11:bb:51:e8:67:fd:dd:f9:2f:92:6b:69:c0:4d:3a:87:b1:
c6:64:47:83:b4:e0:39:37:23:af:6f:d1:05:ef:9c:e8:ea:df:
23:0f:c6:3c:18:4b:6c:0c:00:76:4b:28:bb:48:a7:9f:04:13:
ec:e9:51:73:ee:dd:c3:01:2b:44:0c:44:7d:32:94:51:e2:2d:
68:c1:92:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:25 2026 by rpki-client