Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier: +Jryiv+AnYqY+dSZFxmuXH13SLPF/G520T+GXWRMX/Y=
Subject key identifier: BA:21:17:02:FF:31:04:CF:D9:55:CF:52:34:E2:8A:12:86:13:75:8D
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer: /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial: 0B6F04CE61C0718B83DBEAFA4D4F8C66753B01C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number: 0160
Signing time: Mon 02 Mar 2026 05:59:40 +0000
Manifest this update: Mon 02 Mar 2026 05:54:40 +0000
Manifest next update: Tue 03 Mar 2026 07:14:40 +0000
Files and hashes: 1: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: FHbZrizPNzWl6B0enhfnrMfgf17Ounw/B/9INb/aAg0=)
2: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:6f:04:ce:61:c0:71:8b:83:db:ea:fa:4d:4f:8c:66:75:3b:01:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Validity
Not Before: Mar 2 05:54:40 2026 GMT
Not After : Mar 3 07:14:40 2026 GMT
Subject: CN=BA211702FF3104CFD955CF5234E28A128613758D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:4d:92:d5:f1:6f:5a:a2:98:2e:32:49:79:
35:ac:37:a0:01:81:93:ae:dc:12:7a:0e:9d:79:2c:
57:cd:d9:49:7c:2d:ce:9c:02:b9:ed:99:cb:6a:f3:
0b:e6:1f:48:45:85:82:28:41:e3:f0:da:09:88:56:
00:b4:d8:b8:6d:a8:49:82:68:eb:02:3d:db:39:3d:
86:96:25:b5:bb:88:23:c0:e3:f1:c8:62:c3:59:44:
82:51:b2:3f:45:ce:de:b1:6d:a2:68:fb:c3:60:9e:
00:8f:e1:89:54:fc:7f:f1:9c:2c:d0:98:ea:2a:f6:
3b:b2:da:fd:76:e0:84:a8:ba:61:92:0e:aa:9f:47:
52:5e:ee:8f:3a:55:39:c2:84:e8:4b:7f:e6:1f:c8:
34:04:1b:63:33:ec:f5:1a:e0:d4:d4:e1:9c:b7:ef:
1b:ef:68:b8:f1:31:95:e3:c9:9f:f1:5d:19:2b:b9:
f9:a6:bb:b5:4f:8e:4b:d5:49:6a:78:e9:57:29:92:
76:4d:43:0f:f5:74:4a:47:11:40:ab:3e:04:00:bf:
74:8e:16:15:25:ee:24:93:20:cc:68:0f:da:db:b3:
39:d0:68:fa:c1:5d:a0:28:72:6a:21:1e:b6:f7:6b:
e8:77:5c:02:3e:71:bf:9c:78:67:d5:89:cf:de:3f:
c1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:21:17:02:FF:31:04:CF:D9:55:CF:52:34:E2:8A:12:86:13:75:8D
X509v3 Authority Key Identifier:
keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7f:24:03:72:58:55:a9:b4:61:a3:8c:f3:b0:5b:3f:da:0c:
ea:b1:d4:60:54:08:cd:f4:26:82:36:db:c7:b7:44:d3:49:6f:
36:ed:ec:c3:89:3f:cb:61:b5:db:e5:28:cd:72:2e:dd:b8:3e:
ec:b9:a3:9c:71:f4:39:4d:22:4d:5e:bf:2d:67:5a:08:ee:b9:
13:25:c7:5d:92:b0:3e:ca:ec:79:59:1b:f9:d9:12:4d:34:5c:
f1:c0:87:91:e7:11:e8:3d:9e:37:d2:bc:38:be:fa:f8:b2:73:
6c:65:1a:a6:f2:fb:c1:83:96:37:e1:d6:88:96:50:e4:b6:e8:
27:9b:9c:69:82:cf:dc:a8:cb:5a:7e:17:79:22:f6:5c:2f:dd:
a9:54:13:c8:1e:27:98:28:ff:9e:d3:03:b7:f7:2d:79:7d:b2:
14:48:a2:3d:9a:82:32:27:56:f1:2a:ea:91:89:0c:41:a6:c7:
45:42:08:29:48:af:dc:ba:6d:0c:db:40:68:29:83:bd:7a:e4:
03:37:56:e7:d5:b3:2b:d5:cc:b7:5b:14:69:f7:8c:3b:aa:6a:
ec:16:93:26:c4:33:cf:ed:ee:79:d2:72:17:42:f7:09:96:79:
70:41:e6:0e:e4:42:da:07:5d:7e:02:ab:c8:e0:20:40:75:61:
b1:f2:c2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:54 2026 by rpki-client