Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: JGQL6b+KnUY9PdMEbDYVJeqE/KMYi89fuPLuJUl3wU4=
Subject key identifier: 0D:E8:CC:42:54:B7:80:5D:0E:EA:F7:D2:4E:0E:23:81:C8:B0:EB:34
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 40C478A30A7C2B5B45C27C88E0DE172F4318BA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 0335
Signing time: Sat 18 Apr 2026 15:45:09 +0000
Manifest this update: Sat 18 Apr 2026 15:40:09 +0000
Manifest next update: Sun 19 Apr 2026 18:42:09 +0000
Files and hashes: 1: AS215085.asa (hash: 7a341G7Gffj4oyeRnUz7yyrxEMobRVGoAA9D3EAfXXU=)
2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: zI/Gnvt/NEE8Vegs7qtQ2SfYwI2+9IGoVmcixV/1qng=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 18:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c4:78:a3:0a:7c:2b:5b:45:c2:7c:88:e0:de:17:2f:43:18:ba:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Apr 18 15:40:09 2026 GMT
Not After : Apr 19 18:42:09 2026 GMT
Subject: CN=0DE8CC4254B7805D0EEAF7D24E0E2381C8B0EB34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:f0:09:94:d4:9e:53:ff:2a:14:e2:09:d4:
85:a5:53:b3:2a:56:72:c2:95:27:60:2b:ba:7c:e4:
c2:02:82:9f:0b:a4:ad:aa:f9:a4:ce:7a:e9:f3:23:
ac:a1:cf:52:77:61:54:0f:bb:d8:53:d4:af:db:50:
b7:2c:26:21:88:7a:c4:9b:0d:16:0c:3e:80:70:4d:
c5:66:f5:1c:f5:e2:8a:dd:c8:16:07:3c:2f:66:db:
85:ca:0d:01:13:04:e5:06:c6:8c:0e:88:6e:35:72:
7f:32:ed:be:7f:66:ca:7e:5e:ff:3a:0a:8f:ec:35:
30:c5:95:ab:08:d0:ea:37:97:5f:10:6c:71:16:79:
e4:0f:96:64:e4:a9:e4:37:4d:da:e5:f6:0c:62:55:
54:cc:38:69:68:8e:f7:c0:47:00:cb:a1:53:dc:23:
d2:aa:02:84:c5:e5:2d:cb:80:73:c2:a2:1a:7c:f2:
0b:2e:18:cf:2d:18:ac:41:ea:67:d7:bb:b9:2f:ea:
88:ef:04:a2:bb:dd:ac:54:5d:41:2c:50:46:65:69:
93:90:d5:2c:13:aa:f9:73:75:62:b7:bc:ca:5b:81:
97:7f:aa:08:06:5d:d9:9e:fc:00:93:41:9f:9e:29:
1b:80:06:f3:32:95:4e:bf:43:a9:89:43:fd:6f:cc:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E8:CC:42:54:B7:80:5D:0E:EA:F7:D2:4E:0E:23:81:C8:B0:EB:34
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9c:09:65:e1:8c:b9:a8:f7:06:d1:4e:ed:26:65:39:80:81:
ba:9f:36:8e:0e:a9:a7:22:9f:e1:60:17:15:6f:e5:dd:14:5b:
4a:62:00:4d:d8:a5:5b:12:3f:c2:77:49:57:e2:4e:4b:c7:7a:
eb:b3:ee:60:a9:a2:ad:d6:b1:a0:64:9e:55:4b:f3:ea:29:5f:
29:3a:5c:9d:cf:b1:bd:e2:6c:6f:04:97:8b:14:ef:81:38:48:
03:26:bd:98:cc:99:b6:d6:de:13:a6:9f:60:62:9b:5b:ff:1d:
b1:4c:ef:e9:73:87:82:8a:32:dc:e8:5d:c1:58:92:96:7e:02:
c4:6b:c1:c8:4d:30:21:48:f7:41:5d:b7:a6:80:d0:b6:c7:fc:
b4:dd:80:f7:d8:b1:00:7e:7d:ab:96:30:15:f4:3c:50:ea:08:
ab:ca:0a:fe:6c:d0:42:d3:a7:9d:da:1a:48:d5:c8:d5:52:d7:
20:d7:79:d4:3c:d0:d5:56:91:c4:ca:f5:4d:d5:72:a4:7b:c8:
94:32:51:cd:2b:d5:3b:67:8a:6f:7e:19:f1:8d:40:f8:67:ed:
42:42:e6:00:53:a2:9e:62:76:4f:94:ca:e2:ed:84:a4:28:af:
0d:af:c9:89:e2:07:25:ab:e6:4a:73:2f:2d:31:26:22:6e:16:
18:d6:78:6d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQMR4owp8K1tFwnyI4N4XL0MYuikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGFiN2UyMGJlYTVjY2I4NGY4MjZjNjRkYTE3NTdkMWRm
NWI2ZmY2MjAeFw0yNjA0MTgxNTQwMDlaFw0yNjA0MTkxODQyMDlaMDMxMTAvBgNV
BAMTKDBERThDQzQyNTRCNzgwNUQwRUVBRjdEMjRFMEUyMzgxQzhCMEVCMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4r/AJlNSeU/8qFOIJ1IWlU7Mq
VnLClSdgK7p85MICgp8LpK2q+aTOeunzI6yhz1J3YVQPu9hT1K/bULcsJiGIesSb
DRYMPoBwTcVm9Rz14ordyBYHPC9m24XKDQETBOUGxowOiG41cn8y7b5/Zsp+Xv86
Co/sNTDFlasI0Oo3l18QbHEWeeQPlmTkqeQ3Tdrl9gxiVVTMOGlojvfARwDLoVPc
I9KqAoTF5S3LgHPCohp88gsuGM8tGKxB6mfXu7kv6ojvBKK73axUXUEsUEZlaZOQ
1SwTqvlzdWK3vMpbgZd/qggGXdme/ACTQZ+eKRuABvMylU6/Q6mJQ/1vzFM3AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUDejMQlS3gF0O6vfSTg4jgciw6zQwHwYDVR0j
BBgwFoAU2rfiC+pcy4T4JsZNoXV9HfW2/2IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2
YWJmLzAvREFCN0UyMEJFQTVDQ0I4NEY4MjZDNjREQTE3NTdEMURGNUI2RkY2Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJyZmlDLXBjeTRUNEpzWk5vWFY5SGZX
Ml8ySS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03
ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMC9EQUI3RTIwQkVBNUNDQjg0Rjgy
NkM2NERBMTc1N0QxREY1QjZGRjYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5wJZeGMuaj3BtFO7SZl
OYCBup82jg6ppyKf4WAXFW/l3RRbSmIATdilWxI/wndJV+JOS8d667PuYKmirdax
oGSeVUvz6ilfKTpcnc+xveJsbwSXixTvgThIAya9mMyZttbeE6afYGKbW/8dsUzv
6XOHgooy3OhdwViSln4CxGvByE0wIUj3QV23poDQtsf8tN2A99ixAH59q5YwFfQ8
UOoIq8oK/mzQQtOnndoaSNXI1VLXINd51DzQ1VaRxMr1TdVypHvIlDJRzSvVO2eK
b34Z8Y1A+GftQkLmAFOinmJ2T5TK4u2EpCivDa/JieIHJavmSnMvLTEmIm4WGNZ4
bQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:11:48 2026 by rpki-client