Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File: 53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier: GBwrDL58Y6L9SRw3WBEx8AoxZwd1gDaFEd0HSyGe2vA=
Subject key identifier: 49:ED:05:1A:9D:5B:20:11:1E:85:F5:67:0F:63:67:E1:89:EF:75:4A
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer: /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial: 2DD48FD0C3562BC8D0CDC81491FA5C8DE8490802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number: 03DD
Signing time: Tue 28 Jul 2026 06:47:17 +0000
Manifest this update: Tue 28 Jul 2026 06:42:17 +0000
Manifest next update: Wed 29 Jul 2026 07:13:17 +0000
Files and hashes: 1: AS215171.asa (hash: gdJa6WG2GERDZaDbnz7OAqIN3lLaJy+y5wFkZsKkjzo=)
2: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: MEv7mZDL4PuqbleIhaV20BJV6W37XNcbHXzoWCZw3So=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d4:8f:d0:c3:56:2b:c8:d0:cd:c8:14:91:fa:5c:8d:e8:49:08:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Validity
Not Before: Jul 28 06:42:17 2026 GMT
Not After : Jul 29 07:13:17 2026 GMT
Subject: CN=49ED051A9D5B20111E85F5670F6367E189EF754A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:0e:18:bb:b5:f5:50:cd:6f:6e:6d:68:ea:
33:aa:ad:90:fb:c4:e9:de:3f:01:ec:a3:81:44:7e:
68:0a:65:be:0f:9b:b8:45:67:b9:9f:a2:fb:51:ae:
9d:62:ce:b4:56:6c:29:da:63:4e:d9:4b:3e:29:1f:
86:c8:7c:bb:4e:83:53:ef:ed:50:ae:f7:a9:9e:d1:
30:40:0d:56:4a:f4:c3:34:55:b0:16:8a:3c:53:01:
f7:6f:b7:d6:44:0e:37:04:6b:71:9c:25:c7:2a:1c:
a7:cb:d3:26:7a:83:d6:6b:cf:ac:be:71:23:69:d7:
8e:d7:a7:72:a2:d5:8d:d7:fd:ae:65:bd:2b:2e:ac:
8d:2e:80:e9:44:62:5a:46:49:a1:50:49:8b:f4:cc:
b9:d3:f5:08:76:bb:81:6a:7b:14:87:be:9d:39:94:
bd:c8:f8:79:9d:70:15:b1:c3:8d:ec:a0:6f:7f:7a:
2d:27:92:64:f3:39:e6:88:02:1a:9f:eb:45:d1:23:
72:bb:e5:c7:86:f8:df:c9:01:c1:3f:26:fe:d4:86:
a2:d5:fb:e1:1d:b7:ad:31:79:64:72:92:79:66:9e:
b4:3a:7a:61:52:58:3a:51:62:5d:27:dc:f8:73:22:
0d:96:dc:5c:0d:9b:5e:f7:a1:9a:80:eb:e3:fb:56:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:ED:05:1A:9D:5B:20:11:1E:85:F5:67:0F:63:67:E1:89:EF:75:4A
X509v3 Authority Key Identifier:
keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2f:31:fe:7a:12:65:7d:4b:94:7c:d7:84:3b:8d:12:24:b4:
8b:ec:62:2b:6d:7c:e8:65:7c:13:3a:ce:5a:de:cd:9b:10:f8:
47:41:0a:c9:b0:30:9c:ff:0a:d9:ff:a4:aa:e4:18:f9:c8:54:
3a:a3:67:38:74:a9:2a:42:48:07:b6:63:43:bf:2e:a6:13:8d:
0c:e4:e8:9b:8a:7c:12:a8:36:58:ba:31:c3:6a:f8:03:43:5f:
15:5d:f6:e7:d3:36:ec:e1:3d:ad:0b:cd:1b:37:a4:1b:cc:54:
94:d3:47:6c:5f:a0:8d:c0:13:bd:13:6c:e8:ef:f0:ef:06:56:
8c:64:5d:d1:30:f5:99:7c:0b:b3:ab:fb:40:c5:e1:14:08:81:
16:a5:f4:11:e1:37:12:44:da:a1:d3:7f:69:0f:64:0a:a8:47:
f3:42:63:93:d1:a4:1c:f1:eb:3e:c0:38:9f:84:e8:df:52:c3:
37:94:60:0a:a6:83:ea:c2:21:7c:36:ad:0d:46:53:ff:43:32:
d1:b7:f3:55:a0:cd:18:84:2c:1e:27:7f:61:66:dd:a5:11:64:
57:8c:88:28:46:3d:31:61:b2:e8:a7:f0:79:f5:f6:39:f2:20:
9f:a1:a8:62:7f:e5:9b:7a:bd:ac:58:aa:ca:9d:ba:af:cd:4a:
fa:55:cb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:16 2026 by rpki-client