Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft
File: 8ABC3240DDFB03E0CCAA63975F272973E713952B.mft (raw, json)
Hash identifier: ALZDUCK5+8JJpnBHk/qL7tZ5Z0LmWRMmGKrLHiNwgCg=
Subject key identifier: 66:6E:B5:E0:CF:F4:23:F3:C9:DE:56:83:50:5F:B8:1B:E2:DE:69:A9
Authority key identifier: 8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B
Certificate issuer: /CN=8abc3240ddfb03e0ccaa63975f272973e713952b
Certificate serial: 46ABD725563BE1FB9F9923C37885624869FBD8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft
Manifest number: 53
Signing time: Sun 01 Mar 2026 03:24:30 +0000
Manifest this update: Sun 01 Mar 2026 03:19:30 +0000
Manifest next update: Mon 02 Mar 2026 05:40:30 +0000
Files and hashes: 1: AS214223.asa (hash: 7UegyXDHhe1XI9lGimc4evL2pldMV+cdrQzvvjsht9k=)
2: 8ABC3240DDFB03E0CCAA63975F272973E713952B.crl (hash: +/ZJhZKzcQv0a7j+N36sO4AXOLRFRn7fBceh08IUbUc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.crl
rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft
rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ab:d7:25:56:3b:e1:fb:9f:99:23:c3:78:85:62:48:69:fb:d8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abc3240ddfb03e0ccaa63975f272973e713952b
Validity
Not Before: Mar 1 03:19:30 2026 GMT
Not After : Mar 2 05:40:30 2026 GMT
Subject: CN=666EB5E0CFF423F3C9DE5683505FB81BE2DE69A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:dd:1c:c4:96:ae:12:70:b5:72:37:8f:8e:
c5:2d:c2:e7:fb:b4:76:7a:8c:78:0b:95:78:5c:21:
e4:72:45:22:1b:d2:23:86:c7:38:bd:0f:8b:12:81:
2d:3f:ef:3a:47:99:d7:d6:81:db:f4:f0:f4:b2:cc:
7e:e5:57:50:2a:22:34:2f:cb:ed:e3:34:51:f5:c1:
db:8f:eb:d3:52:85:19:63:e3:59:ec:97:1e:7e:3a:
20:c3:8e:ed:92:a5:d5:85:4d:d3:6b:e9:28:ec:f5:
0e:d0:8b:25:70:47:c1:33:d3:13:89:12:61:be:16:
39:97:d4:4d:a2:1f:f4:5c:6f:e8:d0:1c:48:77:d3:
e8:e1:88:9b:eb:83:9b:d6:15:85:b1:60:37:31:37:
6e:61:ff:ac:df:02:22:79:91:ac:fd:26:56:56:c8:
75:92:fe:1e:b6:9a:4b:e6:48:33:53:36:3f:db:1e:
f8:23:c2:1d:f7:9f:f1:6c:ac:b2:49:c4:c8:ee:37:
1e:1e:12:5a:7b:fb:04:15:ae:5d:9e:be:6c:44:a2:
8c:25:91:3f:01:79:4d:f7:90:4a:e1:55:34:d9:83:
f9:7a:64:06:54:30:ca:e4:85:d7:2d:22:b0:ca:7b:
31:17:f4:41:31:39:51:75:90:c4:eb:cc:b0:56:c1:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6E:B5:E0:CF:F4:23:F3:C9:DE:56:83:50:5F:B8:1B:E2:DE:69:A9
X509v3 Authority Key Identifier:
keyid:8A:BC:32:40:DD:FB:03:E0:CC:AA:63:97:5F:27:29:73:E7:13:95:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irwyQN37A-DMqmOXXycpc-cTlSs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/0/8ABC3240DDFB03E0CCAA63975F272973E713952B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f3:ea:e6:63:6c:00:23:0d:be:7f:cf:25:0a:a4:14:44:f9:
50:a6:e8:c3:f7:15:2f:6b:6a:bd:95:28:74:b0:e0:0a:cc:08:
31:b1:9e:61:7c:cf:97:83:44:5c:20:62:d2:bf:fc:02:e1:f2:
89:77:db:a6:30:7f:4d:3c:ca:52:c8:b7:1c:ea:20:1a:05:b9:
cf:08:bc:7c:90:4e:dc:e2:38:e7:94:20:1d:ec:7c:3d:ef:a3:
c6:60:fc:40:bc:06:76:dd:59:5e:e6:23:f3:2d:cb:90:a4:c2:
6e:f3:9d:5f:88:eb:d3:a4:06:d6:9e:2c:5b:7d:53:79:44:c7:
8a:f1:7f:d0:95:1f:79:ca:06:92:1f:53:cd:dc:f0:c9:de:a5:
83:1e:d6:fe:0e:e2:95:d7:88:2e:4e:11:9e:c8:4a:c8:aa:fb:
4b:b5:39:0f:81:83:48:f4:a2:ed:d2:e8:fa:7c:9b:db:c5:94:
4d:b1:c7:8e:52:3b:0e:a5:08:e2:fe:92:88:59:74:64:6c:08:
d7:4c:72:be:3f:e2:e7:26:ee:52:91:49:ca:f0:e0:90:41:82:
7b:83:44:f1:0a:94:0a:10:4d:f8:ba:e6:b4:85:7c:c7:6d:67:
a0:49:ef:2d:9b:36:67:a2:91:44:d4:80:b0:d5:6c:6e:21:21:
d1:f6:04:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:19 2026 by rpki-client