Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier: 5ZsdovWifleYszf5ywI/1NDHTqS11/WGQ/S1FdjzZsk=
Subject key identifier: CA:4F:97:9E:C9:11:7D:C4:94:50:D3:A4:45:9B:E1:89:6D:2B:63:D5
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer: /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial: 3F0FAEE5421D979489F6A1138E95C9F7556ABA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number: 02EE
Signing time: Sun 01 Mar 2026 06:49:46 +0000
Manifest this update: Sun 01 Mar 2026 06:44:46 +0000
Manifest next update: Mon 02 Mar 2026 08:39:46 +0000
Files and hashes: 1: AS215085.asa (hash: 5dFoAEB7HJFuEx1H1zqtHsVw/vCbtLiCdGIs1mPf9Xs=)
2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: UGJIWQrcOY/C5U9i+B8J+lO9JfJfw7M4u/tug5CoOqY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:0f:ae:e5:42:1d:97:94:89:f6:a1:13:8e:95:c9:f7:55:6a:ba:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Validity
Not Before: Mar 1 06:44:46 2026 GMT
Not After : Mar 2 08:39:46 2026 GMT
Subject: CN=CA4F979EC9117DC49450D3A4459BE1896D2B63D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:05:99:4d:80:a6:9f:9d:e8:80:44:78:de:
11:92:85:f8:88:d4:ff:1a:f4:17:85:25:3d:b2:b0:
a0:3d:5c:d7:91:2d:1f:69:e3:1f:eb:67:f6:78:5a:
70:26:a7:25:50:3d:ae:ef:eb:74:99:bf:20:ec:54:
f4:32:6a:8a:90:61:9a:52:66:66:6a:18:89:18:a5:
a7:53:4c:43:dc:71:d9:e0:4b:16:d3:b6:f4:51:ba:
79:03:59:1b:ec:fd:4d:98:d4:30:2a:af:b3:47:33:
11:92:c3:ce:32:17:24:99:b0:3f:15:b9:d8:06:27:
e8:91:3f:fe:15:28:d7:99:0f:0f:ad:fa:ef:86:cd:
bc:fd:9a:59:cf:92:e5:9f:01:a9:f5:94:79:8d:f8:
59:01:60:f3:58:7b:3d:7e:08:7b:5e:16:36:d7:9c:
af:35:7a:d5:65:31:90:35:5f:76:d1:c3:dd:ff:e3:
f9:c6:7e:18:30:6a:8a:c9:9b:03:84:e9:d8:e9:36:
bb:d5:a7:59:b8:d9:14:14:46:3e:28:a8:b2:93:53:
e6:e6:13:9e:ca:77:80:82:0f:85:0a:64:03:8b:e9:
4c:a8:7f:33:dc:aa:a4:05:0d:fc:f2:44:a7:5e:04:
86:2f:41:0b:54:02:7b:e9:a2:c0:b1:e3:b9:be:d9:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:97:9E:C9:11:7D:C4:94:50:D3:A4:45:9B:E1:89:6D:2B:63:D5
X509v3 Authority Key Identifier:
keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:25:78:77:51:97:4b:72:54:1f:8f:ef:79:dc:87:18:ec:c5:
0e:10:62:90:53:98:3a:b9:8f:04:2d:fc:4c:35:df:69:cd:b2:
34:b5:68:c7:40:87:40:e6:ee:6e:9d:07:5d:d3:1c:a1:ff:59:
88:da:cc:21:81:d7:a0:22:d4:f2:b0:09:18:eb:7e:fe:a1:e3:
61:a3:b4:53:df:cb:46:42:57:ae:20:ca:77:09:c4:69:56:d6:
ae:59:bd:a9:c9:02:c4:15:07:d2:cc:c6:29:5e:f7:33:47:91:
72:7a:0b:e3:f0:75:98:be:3a:69:42:fc:58:db:2d:35:ab:50:
96:5f:04:24:22:1f:9c:46:cd:2e:78:c3:77:74:c9:3c:ac:a5:
32:8e:92:22:d4:ad:c0:50:20:5a:76:4b:57:16:0b:f4:0d:07:
87:31:62:15:82:66:23:c9:59:36:0e:ee:52:29:d5:e8:db:90:
3c:0a:9f:7b:80:ef:eb:90:96:4b:59:63:e7:a7:49:15:e6:07:
f1:98:d4:52:6d:4e:f2:bd:5c:dd:ef:59:3d:0e:84:b1:db:3a:
7b:3b:a5:26:63:df:e3:9c:3f:92:8c:fd:6a:81:69:b6:fc:be:
c5:27:cc:6c:df:37:35:31:46:3e:91:9e:52:56:e0:52:33:2c:
83:21:f2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:19 2026 by rpki-client