
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier: tT4Ft8AGmGXkKdryOZyUp9piUBMpY9KAsCcb4HMO7Lo=
Subject key identifier: 14:45:4C:C3:40:7C:C0:BE:AF:8E:4B:A6:78:E3:2C:75:AB:B2:E9:7A
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer: /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial: 1AE6134FAC2F7E8F9CB57F048A9B3B382CF0AFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number: 022D
Signing time: Tue 28 Jul 2026 16:02:08 +0000
Manifest this update: Tue 28 Jul 2026 15:57:08 +0000
Manifest next update: Wed 29 Jul 2026 18:07:08 +0000
Files and hashes: 1: AS215375.asa (hash: 6613tXmlrFhjtXfX2wfXrT8YPyqmoo6YFaOsXH5TeKI=)
2: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: 9AJsDOECuMhRfQHCbozvoY3Aysso8zNtJbnyjk/hXfE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e6:13:4f:ac:2f:7e:8f:9c:b5:7f:04:8a:9b:3b:38:2c:f0:af:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Validity
Not Before: Jul 28 15:57:08 2026 GMT
Not After : Jul 29 18:07:08 2026 GMT
Subject: CN=14454CC3407CC0BEAF8E4BA678E32C75ABB2E97A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:06:d9:c8:ec:ed:ee:c5:9e:e3:e5:dd:69:
66:b5:c7:0e:ee:d9:98:81:dc:c6:b4:ce:e6:ef:0d:
4e:f1:e7:1b:f2:6f:d8:c8:a9:cb:74:e0:e2:8e:bc:
c2:61:7e:65:88:db:f0:b9:55:66:2a:fd:bb:95:c4:
87:ab:ca:01:18:99:c8:97:79:11:ad:b6:cf:62:b5:
54:9a:66:04:b9:ad:ac:01:17:1f:d8:e2:21:b8:ed:
5e:04:3c:58:6a:e4:42:33:94:30:e2:2d:c7:4e:78:
33:b0:c2:60:26:10:e8:57:3a:7a:83:f4:e1:28:ad:
34:a8:1f:88:5a:c6:0d:96:48:af:0c:89:c8:20:6e:
15:3e:13:59:4e:3e:5f:68:0b:3c:35:f6:0b:45:1b:
80:7c:73:b3:d4:4e:de:95:24:cd:87:8d:51:99:f6:
5b:d2:87:ee:6e:68:b2:1c:c3:6b:3c:86:d9:7e:6a:
be:0a:1d:c6:99:67:04:21:9a:9b:05:fb:fc:11:79:
a8:8f:41:72:73:12:b0:2c:67:46:98:d7:e4:48:59:
52:8d:70:5c:31:21:45:55:a3:1b:f8:52:99:a0:ab:
a6:ed:fb:2e:d1:00:09:a2:0e:4d:11:56:a5:51:69:
37:ad:6c:21:10:bb:d0:0e:50:3d:76:d8:30:c0:c3:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:45:4C:C3:40:7C:C0:BE:AF:8E:4B:A6:78:E3:2C:75:AB:B2:E9:7A
X509v3 Authority Key Identifier:
keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:94:eb:34:8b:41:cf:a3:5d:33:48:de:b2:b6:ca:08:b9:cf:
38:b4:d0:96:bb:7b:8d:52:73:e6:3b:9d:1b:8a:f0:9c:6c:50:
17:e5:90:98:69:cc:c6:2b:d4:1e:12:b0:4d:75:55:b3:2d:9b:
5b:f7:4d:34:cf:ea:75:49:66:98:d0:88:58:39:a2:f6:52:be:
cc:95:9e:28:05:9c:dd:19:33:02:cc:f0:67:ef:53:50:0e:69:
a3:02:49:af:e4:5d:ad:b3:74:f0:61:58:21:4b:9a:ff:7a:38:
31:95:7e:f9:fc:f6:7d:e7:cc:6a:aa:34:b1:4c:e1:87:95:3c:
62:0e:48:1d:ed:95:01:de:b9:45:08:bb:e6:15:da:59:4a:1a:
65:b2:8d:cc:ca:9c:dc:be:5c:f0:a2:f1:b4:4b:fa:ed:53:52:
5a:40:57:02:e4:b9:35:63:d5:c0:23:52:97:6b:53:fc:8f:e9:
67:69:a1:78:2d:6b:de:c4:0d:80:b0:e2:28:ae:08:ea:78:98:
85:8f:a4:9a:61:84:8f:27:26:6c:6a:12:b8:7f:78:62:8d:c1:
0c:df:2e:73:6a:1b:bc:e8:fd:1e:bf:2b:3a:07:08:1f:99:5f:
aa:8a:40:51:29:77:96:0f:d1:0e:15:aa:ec:35:a5:3c:98:9a:
de:45:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:02 2026 by rpki-client