Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File: 53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier: ZJ7MAb1/jyFUSAJIluI2zuVSYtwvLwgT5ry0xq5VMPc=
Subject key identifier: 55:5D:41:15:60:5D:04:E0:D0:A7:E4:98:A5:D3:35:C5:C0:B0:8F:06
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer: /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial: 59FD92D8C7EB8DB246228D4C3B0F27A45384A836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number: 03A0
Signing time: Fri 12 Jun 2026 17:35:15 +0000
Manifest this update: Fri 12 Jun 2026 17:30:15 +0000
Manifest next update: Sat 13 Jun 2026 19:44:15 +0000
Files and hashes: 1: AS215171.asa (hash: gdJa6WG2GERDZaDbnz7OAqIN3lLaJy+y5wFkZsKkjzo=)
2: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: YKJyKrqnrqWIeCk1Zu4vCpmALPgiofPaKb8EXFPQXDo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fd:92:d8:c7:eb:8d:b2:46:22:8d:4c:3b:0f:27:a4:53:84:a8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Validity
Not Before: Jun 12 17:30:15 2026 GMT
Not After : Jun 13 19:44:15 2026 GMT
Subject: CN=555D4115605D04E0D0A7E498A5D335C5C0B08F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:3a:2d:e2:42:c5:e0:28:be:1b:07:74:ca:
42:81:1d:f7:c3:f3:fc:d1:94:5b:ca:11:b4:ca:09:
70:c0:98:fc:c0:4a:d2:44:5a:a9:2e:c0:25:7d:ab:
7f:1e:b9:2a:e5:9b:fe:bf:19:5c:22:fb:ec:14:a8:
29:f8:ad:0e:29:30:8c:78:57:4b:25:58:4a:4f:09:
f7:28:19:db:fb:6a:a5:af:ea:a8:4a:c6:df:bd:80:
07:b8:aa:9f:89:99:fa:d5:b2:21:ba:90:15:fc:87:
e8:f4:c6:f8:8b:37:00:c4:26:89:3c:7f:99:76:86:
cf:3e:3d:52:77:e5:e3:b5:ce:82:b8:6a:82:da:cb:
5a:70:08:9c:91:a4:fa:e8:c2:e3:8a:e7:d9:42:63:
fb:cb:78:c9:ac:5c:06:f1:3f:08:31:b3:3d:49:91:
d2:dc:bd:41:24:64:f6:c0:7a:30:96:ad:4e:ce:95:
50:23:cd:af:73:28:48:1a:d6:65:ea:80:00:1d:27:
78:dd:11:3c:15:0f:99:6d:31:69:de:d2:68:31:22:
71:25:b4:e8:e5:ed:3d:a2:08:be:d9:d9:44:ed:64:
2a:8c:a6:c4:cd:23:aa:03:94:2b:8a:22:85:20:a0:
7e:0a:47:7c:dc:0b:ab:1a:c8:d7:fa:ac:5e:b3:50:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5D:41:15:60:5D:04:E0:D0:A7:E4:98:A5:D3:35:C5:C0:B0:8F:06
X509v3 Authority Key Identifier:
keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a9:d4:c8:f4:99:ca:4c:dc:d4:30:7b:6a:a3:10:27:5d:ea:
1b:36:b3:8a:55:b2:2d:15:7a:70:74:21:3d:60:91:5f:26:bc:
b1:54:e5:3b:ce:00:1f:2c:e6:20:f4:ff:ba:c7:b3:fb:5a:c4:
41:80:bd:50:47:67:fb:b0:fb:a9:4c:a1:8d:bf:c8:22:10:f9:
bd:33:7e:a5:cd:0e:f3:e9:83:40:8b:19:d4:8d:92:fb:00:96:
d0:0a:60:33:8f:89:c0:c8:9b:42:9d:5f:a5:d7:ed:9b:92:5b:
1b:98:ce:25:25:a2:a3:5a:26:92:73:4c:09:5d:9e:dc:5d:26:
5d:4f:a6:27:81:3b:cf:fc:22:cf:12:10:94:53:ac:71:d1:81:
06:ba:db:d4:63:e7:cf:58:25:4c:41:10:3e:d2:9e:20:af:65:
79:29:1f:32:c2:3a:ec:88:f0:56:69:78:0a:f8:0b:89:b8:93:
0a:54:77:63:f0:ea:2d:7f:7c:03:25:9e:e2:bc:b7:ca:9b:98:
de:3a:ea:be:8f:c9:50:60:7c:3c:76:01:f9:87:a7:66:92:2e:
19:29:90:c6:75:0a:a1:20:0c:1d:96:c3:53:f9:d9:f6:9b:a1:
de:95:66:7e:45:0a:10:97:f0:66:90:17:6c:d7:e8:f6:16:d5:
6a:6a:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:06 2026 by rpki-client