Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File: 53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier: Ku+B7tKJxJ7M8uhId723PHhF7SN2rvCQH3hZ177dSZc=
Subject key identifier: A8:DC:53:9D:22:24:A2:01:A8:52:70:B1:DD:07:A6:C5:64:71:F8:77
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer: /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial: 2EE3071394346805C0EEC87359B2D79D53193E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number: 0427
Signing time: Mon 21 Sep 2026 00:57:17 +0000
Manifest this update: Mon 21 Sep 2026 00:52:17 +0000
Manifest next update: Tue 22 Sep 2026 04:14:17 +0000
Files and hashes: 1: AS215171.asa (hash: gdJa6WG2GERDZaDbnz7OAqIN3lLaJy+y5wFkZsKkjzo=)
2: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: cWPgt3uieTpaIYwI49rcN4m0umI08r5ADHfuhsPXLoI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e3:07:13:94:34:68:05:c0:ee:c8:73:59:b2:d7:9d:53:19:3e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Validity
Not Before: Sep 21 00:52:17 2026 GMT
Not After : Sep 22 04:14:17 2026 GMT
Subject: CN=A8DC539D2224A201A85270B1DD07A6C56471F877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c7:c2:bb:89:01:e5:ce:32:84:0f:2f:32:26:
d4:d0:7b:dd:53:91:e0:60:a3:70:58:d6:ff:7e:0e:
24:78:05:00:db:91:71:70:7d:fe:a3:1d:1f:b6:bf:
d0:1b:4b:e9:e2:2d:43:12:ce:df:15:e6:ac:f9:04:
19:a1:3a:fd:18:4a:76:18:a0:f8:b0:18:30:ec:53:
b8:9a:9d:31:be:af:73:f3:d8:3f:90:de:a9:38:7f:
5f:27:51:e2:f9:dc:62:c9:8e:ba:93:3b:b6:3d:12:
11:c4:44:19:96:a4:de:41:9b:6f:cf:d7:c4:34:d9:
29:7a:74:18:7a:37:ba:ba:f8:1c:68:9d:e3:1a:b8:
49:70:ba:a3:80:86:26:7c:d6:ee:9e:89:4a:7e:03:
a6:fa:49:8c:69:55:32:4e:96:69:80:6b:fa:6d:3b:
a0:52:35:60:df:bd:1a:36:86:f8:c5:98:33:ed:9d:
86:32:e0:9f:da:79:f7:f5:c4:06:de:c0:28:2f:14:
ea:83:c3:f2:dc:58:23:38:b8:65:e2:90:10:13:82:
00:3b:f7:da:a1:51:ae:d2:a8:dc:37:50:c1:ce:89:
b1:8a:b4:d6:9a:a4:66:24:92:60:bd:54:33:4a:34:
53:16:14:ac:f4:d9:ca:f0:bc:d0:ad:0f:d1:4c:b1:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:53:9D:22:24:A2:01:A8:52:70:B1:DD:07:A6:C5:64:71:F8:77
X509v3 Authority Key Identifier:
keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d4:b5:c6:c2:ef:67:bb:9f:27:1f:75:61:3a:53:ea:3e:b2:
0a:3a:23:63:20:ea:bd:cc:e3:bd:53:c4:26:cb:c7:1a:50:20:
cf:03:79:b6:7a:eb:88:d1:1a:12:a0:d3:3b:70:fa:fb:33:9b:
6f:a2:e5:21:d2:c2:0b:25:8f:3e:06:bb:9c:35:47:a7:df:3c:
a4:ac:3f:8b:9f:65:54:0c:84:b6:7c:d8:98:d6:cd:ae:7c:3f:
92:24:c8:e7:90:cb:f6:91:74:c3:bc:f4:3b:54:28:9f:f9:d7:
ea:d1:8e:ae:0a:5c:1b:6b:c6:ac:d0:3a:70:4e:3d:76:6d:56:
a6:b8:72:a7:c2:01:29:b7:40:22:c1:bf:43:e0:a4:62:cb:4b:
9e:8b:6b:5a:e6:e9:12:6f:8b:45:ca:a0:32:bf:8e:34:79:bc:
64:d2:36:1f:03:f0:b0:6f:b2:13:81:1c:cc:e9:71:9d:73:ee:
7d:e1:59:4d:68:44:b6:26:57:ce:19:52:4f:78:40:62:95:2d:
b1:ff:7b:eb:90:87:88:25:d0:9d:43:74:7a:4f:c7:c2:95:4a:
0b:3f:a1:5b:0d:8d:88:21:41:b5:ca:85:9c:64:0f:ea:25:83:
83:1c:d5:20:39:fa:f0:86:a5:02:19:25:b3:50:18:db:52:fa:
04:dd:0f:ef
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULuMHE5Q0aAXA7shzWbLXnVMZPhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNhMmFhMTYwMWNjMDkyMTQ0NjFkMDNjYTc3MWVkNTBl
YzFkNjMyNTAeFw0yNjA5MjEwMDUyMTdaFw0yNjA5MjIwNDE0MTdaMDMxMTAvBgNV
BAMTKEE4REM1MzlEMjIyNEEyMDFBODUyNzBCMUREMDdBNkM1NjQ3MUY4NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhx8K7iQHlzjKEDy8yJtTQe91T
keBgo3BY1v9+DiR4BQDbkXFwff6jHR+2v9AbS+niLUMSzt8V5qz5BBmhOv0YSnYY
oPiwGDDsU7ianTG+r3Pz2D+Q3qk4f18nUeL53GLJjrqTO7Y9EhHERBmWpN5Bm2/P
18Q02Sl6dBh6N7q6+BxoneMauElwuqOAhiZ81u6eiUp+A6b6SYxpVTJOlmmAa/pt
O6BSNWDfvRo2hvjFmDPtnYYy4J/aeff1xAbewCgvFOqDw/LcWCM4uGXikBATggA7
99qhUa7SqNw3UMHOibGKtNaapGYkkmC9VDNKNFMWFKz02crwvNCtD9FMsZBhAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUqNxTnSIkogGoUnCx3QemxWRx+HcwHwYDVR0j
BBgwFoAUU6KqFgHMCSFEYdA8p3HtUOwdYyUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4
NzU1LzUvNTNBMkFBMTYwMUNDMDkyMTQ0NjFEMDNDQTc3MUVENTBFQzFENjMyNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1U2S3FGZ0hNQ1NGRVlkQThwM0h0VU93
ZFl5VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMTFlNDdjNC0w
MmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNS81M0EyQUExNjAxQ0MwOTIxNDQ2
MUQwM0NBNzcxRUQ1MEVDMUQ2MzI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9S1xsLvZ7ufJx91YTpT
6j6yCjojYyDqvczjvVPEJsvHGlAgzwN5tnrriNEaEqDTO3D6+zObb6LlIdLCCyWP
Pga7nDVHp988pKw/i59lVAyEtnzYmNbNrnw/kiTI55DL9pF0w7z0O1Qon/nX6tGO
rgpcG2vGrNA6cE49dm1Wprhyp8IBKbdAIsG/Q+CkYstLnotrWubpEm+LRcqgMr+O
NHm8ZNI2HwPwsG+yE4EczOlxnXPufeFZTWhEtiZXzhlST3hAYpUtsf9765CHiCXQ
nUN0ek/HwpVKCz+hWw2NiCFBtcqFnGQP6iWDgxzVIDn68IalAhkls1AY21L6BN0P
7w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:13:35 2026 by rpki-client