Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: +vthbC6lKvJ0x+bpSZYbQMgJ1eM7mBZIMYt+P21DD0M=
Subject key identifier: C8:08:B8:D7:4F:93:83:45:5A:70:E2:2F:11:E3:D3:D8:A5:08:A6:23
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 6119BC186335AF35E4B3DA00E88A28E0807C2978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 0426
Signing time: Sun 20 Sep 2026 19:03:22 +0000
Manifest this update: Sun 20 Sep 2026 18:58:22 +0000
Manifest next update: Mon 21 Sep 2026 19:47:22 +0000
Files and hashes: 1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: 1pyCp2DTdTnU8M+Bxb/3n1LYllbbk+YIV/pv90l2vDc=)
2: AS215085.asa (hash: H9lDTGKcl0CBBPreEFyuQCs9bvqxSyfGxBz82Rjt5hI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:19:bc:18:63:35:af:35:e4:b3:da:00:e8:8a:28:e0:80:7c:29:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Sep 20 18:58:22 2026 GMT
Not After : Sep 21 19:47:22 2026 GMT
Subject: CN=C808B8D74F9383455A70E22F11E3D3D8A508A623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:80:a0:c6:04:1c:44:b4:62:8c:fd:fc:7d:
4d:24:d4:c9:35:d4:df:fa:53:57:c3:67:ec:9e:64:
7d:01:8d:09:9a:d8:fd:db:67:34:2b:1d:c2:28:0b:
fb:e9:aa:fe:e5:bd:9b:00:36:d0:d9:2f:d2:78:27:
a2:2f:d8:fc:b1:84:24:53:b2:46:e9:93:e1:74:48:
55:15:12:c3:74:24:74:7f:ef:36:fa:4a:e1:03:e5:
a5:fc:e5:e3:b2:9f:a0:c9:a6:42:68:8e:eb:df:19:
4e:7f:40:bb:d4:ba:0f:01:ef:92:10:97:96:ae:bf:
7a:f0:f7:f0:6b:fe:55:bc:06:0c:22:56:9e:e8:07:
0e:83:a9:ac:90:e6:3e:8c:b6:96:4b:fa:aa:47:9b:
0b:87:91:70:70:0e:a2:a2:fb:15:25:51:96:d2:94:
0a:29:21:75:b1:56:bb:6f:78:0e:46:7d:fe:35:1e:
4f:c0:f6:64:fb:0a:84:3d:ce:5b:7e:ca:fd:07:7f:
26:0c:8e:d7:96:5c:b2:76:ec:85:de:f9:27:38:0f:
57:93:d7:9e:bc:69:28:bd:ac:9f:a6:b7:a7:cf:57:
1e:30:31:5b:35:a9:8b:08:2a:62:63:70:d4:63:a5:
47:d6:2f:61:74:f5:4f:b9:e5:d0:35:a8:ac:d2:ff:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:08:B8:D7:4F:93:83:45:5A:70:E2:2F:11:E3:D3:D8:A5:08:A6:23
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:74:da:d6:b3:13:8b:b8:a4:75:60:23:07:a6:73:d5:e3:21:
fb:24:ea:9b:21:0e:7c:c0:44:a1:b3:25:ce:b4:52:24:18:e7:
64:c3:33:23:33:8d:14:26:ad:88:06:ab:ef:62:c4:0d:29:c3:
54:dd:38:04:44:4a:11:f1:d6:ee:3f:2f:62:b1:07:f9:4e:d2:
5a:d1:d4:26:38:5b:ca:3d:07:de:58:52:f7:51:a8:22:ee:19:
b7:e2:1e:f2:02:c9:0f:13:b9:a7:1e:b8:76:ae:a7:a2:94:71:
6c:bb:d9:c8:6d:a7:ba:37:1d:8c:90:c5:5d:2c:99:e1:08:62:
2c:9a:cc:f0:b0:e2:69:32:5d:a8:f1:82:2b:97:59:76:ad:ac:
fb:cb:3d:e5:aa:b0:1e:9c:a6:00:0d:e0:97:33:87:73:00:60:
34:c0:c3:e1:d8:22:fa:57:18:1b:74:d0:a7:75:52:83:99:f5:
e7:04:a6:2e:ea:a4:af:17:77:0d:fe:3d:94:b3:f2:8d:af:f9:
43:68:a7:54:6a:b0:64:d3:7c:52:bc:cb:6b:0e:2b:b9:fd:70:
98:1a:04:e1:2e:10:37:41:bb:b8:a9:44:18:2f:72:db:99:a9:
07:6f:28:a1:a5:db:06:51:28:06:31:ab:e0:dc:5a:cc:d0:fc:
d7:d1:19:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:04:55 2026 by rpki-client