Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File: A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier: VyTrEKEF2DOSJDnA8XaULkBG4lHqi7VdhkIhy0XAMng=
Subject key identifier: 91:B2:56:B2:18:8C:7A:3A:7A:C2:68:31:18:27:55:EF:AD:64:B6:2A
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer: /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial: 2E6134AA7D6D31FDE49CDDF75D28186BFE26EB0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number: 068B
Signing time: Sun 01 Mar 2026 22:36:23 +0000
Manifest this update: Sun 01 Mar 2026 22:31:23 +0000
Manifest next update: Tue 03 Mar 2026 02:25:23 +0000
Files and hashes: 1: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: nxd3Qgy0VUiEyfcAlekHsTCi++EWAWgCJhic8xKv2aI=)
2: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:61:34:aa:7d:6d:31:fd:e4:9c:dd:f7:5d:28:18:6b:fe:26:eb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Validity
Not Before: Mar 1 22:31:23 2026 GMT
Not After : Mar 3 02:25:23 2026 GMT
Subject: CN=91B256B2188C7A3A7AC26831182755EFAD64B62A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:4e:44:e6:1f:31:f8:e5:db:79:2d:61:93:
96:51:1f:42:e1:7e:b3:c9:95:7b:49:e2:dd:7a:f3:
f6:d9:6e:7f:0f:71:ad:4b:6c:43:ec:77:e8:ca:90:
73:f8:9d:02:96:2c:e6:ce:f3:5e:a9:bb:2a:6e:9a:
ff:3a:e1:01:d6:4b:9a:bc:95:8f:8c:85:26:a4:79:
18:47:01:4d:00:b2:58:bf:b5:db:71:d9:03:25:0b:
e8:ea:00:f9:43:9a:f6:eb:45:8c:75:42:4f:66:29:
95:0b:e3:40:cc:87:4d:bc:7e:d2:1c:19:bd:2e:cb:
cb:1c:0b:4c:ac:d6:2d:73:88:82:cc:9b:83:15:8f:
fa:86:41:ba:f4:fd:10:27:5e:d3:e8:d2:c2:2c:0b:
22:e4:e5:53:ab:c2:00:2f:e6:17:0f:e1:72:ee:5c:
cc:7b:f2:58:d5:6e:97:f4:c1:b0:88:76:9b:43:b1:
37:17:00:3e:d7:80:27:18:f6:f4:f9:0e:5a:6d:57:
ef:95:84:83:76:a1:52:04:aa:84:5d:13:06:86:06:
31:b9:7d:17:eb:3b:42:02:d1:f0:8f:80:77:01:eb:
3f:c6:41:30:08:79:ed:62:8f:a6:4a:05:73:3d:82:
03:7d:b4:9b:79:f8:55:fa:ec:88:26:d0:1d:b5:5a:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B2:56:B2:18:8C:7A:3A:7A:C2:68:31:18:27:55:EF:AD:64:B6:2A
X509v3 Authority Key Identifier:
keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:86:aa:79:fe:16:d7:34:ec:de:ae:b5:1b:6d:27:0d:0f:de:
b9:cc:98:55:44:eb:d1:c3:88:0f:d5:ed:22:b0:6a:ef:65:e5:
d6:a8:f2:31:c0:c5:1c:40:00:3f:dc:9d:8a:42:ae:bd:3e:71:
95:ae:c1:a5:98:19:e1:27:54:5c:5a:d8:67:f5:7b:d9:cb:c4:
3e:95:00:21:3a:ae:34:62:1d:84:0a:25:e4:c5:28:bb:4f:1e:
d8:35:cf:8d:7f:66:b5:db:86:b0:e9:d8:30:79:67:0b:62:04:
16:f2:58:8b:04:07:63:a0:10:cc:66:2c:0c:cd:cb:b5:d5:73:
49:e5:3f:73:b6:1f:f6:d7:5d:aa:22:7e:a8:ba:fc:e8:37:8d:
e8:51:0a:59:c1:5f:86:74:a0:76:c9:58:5a:15:3d:ac:a8:b4:
2d:af:3b:f9:e5:fb:99:df:10:b9:e0:ca:db:cf:ad:60:fb:ec:
2a:f6:94:20:f8:98:d4:c7:f1:69:9e:2c:e6:0b:fd:15:ab:97:
e1:0e:59:18:ad:61:5e:6c:7b:8d:af:19:b0:69:8f:3c:91:93:
46:e8:1c:fc:17:82:d0:2f:6f:54:ab:d8:79:3b:fc:25:df:c4:
1c:0d:68:32:58:a5:42:bc:13:33:2f:24:7e:24:2c:88:42:48:
38:86:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:44 2026 by rpki-client