Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File: 53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier: OfhRYzpxKNQbtM/Ez5tFh+NcIsgBDUmrliQp/+g2kvw=
Subject key identifier: 7D:3A:6C:04:25:FB:0C:19:27:C6:08:D4:F0:94:C2:BD:09:96:AB:F4
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer: /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial: 59D53C72A266E0D3D0EB38681ADD1E662E543C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number: 0315
Signing time: Sun 01 Mar 2026 10:30:06 +0000
Manifest this update: Sun 01 Mar 2026 10:25:06 +0000
Manifest next update: Mon 02 Mar 2026 12:43:06 +0000
Files and hashes: 1: AS215171.asa (hash: gdJa6WG2GERDZaDbnz7OAqIN3lLaJy+y5wFkZsKkjzo=)
2: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: xELseJwFKx7GPKwCzuwgQpCBh3UwLl4lmMmsM1XzZXM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d5:3c:72:a2:66:e0:d3:d0:eb:38:68:1a:dd:1e:66:2e:54:3c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Validity
Not Before: Mar 1 10:25:06 2026 GMT
Not After : Mar 2 12:43:06 2026 GMT
Subject: CN=7D3A6C0425FB0C1927C608D4F094C2BD0996ABF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:e1:3d:ae:9e:9d:2d:16:a4:11:3f:8c:2f:
a7:21:90:4d:5c:6b:09:1a:6c:49:b2:84:46:34:5d:
4a:44:4c:e4:6d:0d:75:61:6a:cb:84:e4:15:9f:78:
f9:d0:97:ca:b4:c3:56:c0:62:60:d1:f4:4a:e5:c9:
1c:b0:0b:80:bb:84:c1:1b:86:17:90:36:1a:81:0b:
7b:0d:c7:cc:1b:d8:1b:82:ca:80:d7:38:b9:81:ce:
e6:ff:f2:1d:ec:0f:ac:db:f0:78:a1:35:c1:88:21:
4e:81:2a:c6:2a:d5:92:d5:9c:18:4b:31:97:fd:94:
be:97:5f:89:72:82:ca:69:35:83:80:31:6d:00:3f:
9c:a3:63:23:4b:74:02:ca:1d:68:5d:b7:ae:ca:66:
36:56:79:be:91:64:e6:62:5d:04:ab:13:62:4a:82:
54:53:22:91:7a:09:58:73:9f:ce:e3:b2:b0:92:ac:
a5:9c:68:58:9e:ba:12:83:f1:5d:cf:29:02:c5:1f:
f4:20:1c:a9:9b:4d:35:9a:8e:f5:2d:ed:f6:6a:52:
07:8f:69:0d:6a:f6:cb:cc:bd:55:77:c6:b6:99:a2:
fb:76:1b:aa:54:eb:01:73:ed:a7:85:73:3e:c8:88:
56:b0:2f:32:5b:d3:2f:eb:73:d7:36:0b:21:3c:3c:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3A:6C:04:25:FB:0C:19:27:C6:08:D4:F0:94:C2:BD:09:96:AB:F4
X509v3 Authority Key Identifier:
keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f3:35:76:b5:7a:01:39:b0:14:62:78:c9:e7:5c:6f:39:d7:
8d:32:6a:02:50:62:ec:4b:c0:f2:12:7a:9e:54:cd:ca:19:dd:
a6:89:b3:5e:07:3a:6d:2a:47:b0:f1:9f:a1:3a:58:47:df:6f:
63:81:fd:4b:fb:c9:bd:cd:8c:43:d2:a3:b1:89:c6:9a:99:4c:
f9:2d:cb:18:79:de:87:e2:8a:f7:a5:05:4d:3f:15:ec:b7:ad:
e7:33:35:1b:9a:a2:e3:b1:43:4c:01:f2:df:39:5c:bd:5c:17:
e2:a4:65:51:46:26:ae:9e:ca:79:6b:5d:b0:f3:e9:75:ab:a6:
6b:f0:ed:36:80:6e:b6:d3:01:42:17:cf:99:10:6e:8b:42:59:
53:b5:34:75:ac:5e:d3:a5:7c:a2:03:fc:3d:61:1a:fc:bc:c5:
fe:5d:94:a6:fa:2a:26:75:e3:79:cd:bb:5c:a5:8c:8e:22:d0:
da:49:f6:57:01:08:b9:5b:5a:a3:57:34:e2:b6:93:40:e8:5c:
e6:cf:50:e1:0d:3d:db:b0:e8:36:86:f9:e0:72:a1:02:02:ab:
f6:96:34:97:17:b0:67:02:36:73:c9:19:d8:9c:0c:2d:ef:58:
7e:71:50:71:20:56:53:ee:f2:6b:cf:9c:b9:fd:57:c2:08:c6:
67:57:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:04 2026 by rpki-client