Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
File: 3491246EC3E1BE5219E15F1079BB12148609075C.mft (raw, json)
Hash identifier: QqMOUvOWqYBswzxUIDD3Qz/NN8R4SrKrM/g4oJaHJ3o=
Subject key identifier: 88:24:1E:FC:28:03:9C:68:50:1F:C9:EC:0E:C1:45:59:3E:77:9A:6A
Authority key identifier: 34:91:24:6E:C3:E1:BE:52:19:E1:5F:10:79:BB:12:14:86:09:07:5C
Certificate issuer: /CN=3491246ec3e1be5219e15f1079bb12148609075c
Certificate serial: 53491CA68356D983A8F309356C25E04A69A6A41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJEkbsPhvlIZ4V8QebsSFIYJB1w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
Manifest number: 2B
Signing time: Tue 22 Sep 2026 13:44:21 +0000
Manifest this update: Tue 22 Sep 2026 13:39:21 +0000
Manifest next update: Wed 23 Sep 2026 14:38:21 +0000
Files and hashes: 1: 3491246EC3E1BE5219E15F1079BB12148609075C.crl (hash: mhdDAqtMrNY914jKgPZ1itOWuo6T9m8s+eYgJwVj6uk=)
2: AS219157.asa (hash: W0SNHyIdOBlk/PqFSsz1uEHMFtmzaSHOyyOQWUgxKu4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJEkbsPhvlIZ4V8QebsSFIYJB1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:49:1c:a6:83:56:d9:83:a8:f3:09:35:6c:25:e0:4a:69:a6:a4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3491246ec3e1be5219e15f1079bb12148609075c
Validity
Not Before: Sep 22 13:39:21 2026 GMT
Not After : Sep 23 14:38:21 2026 GMT
Subject: CN=88241EFC28039C68501FC9EC0EC145593E779A6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:cb:4d:ae:af:e7:ee:6e:e7:ae:55:82:91:
f2:50:f0:00:f5:06:ef:c8:d0:ef:8f:5a:22:87:87:
0c:9d:9b:c6:74:ba:84:b9:68:8c:ce:8d:5f:99:67:
fc:8c:71:05:76:01:b4:7a:08:98:08:28:09:ad:1c:
89:a7:4e:b8:b4:16:46:7d:c8:0b:95:25:16:b6:72:
53:c2:44:2a:88:12:6e:8b:5e:9d:25:3c:c4:67:92:
58:76:3c:eb:d0:ec:d2:b5:fc:f6:8c:24:32:9e:d7:
4f:92:04:8a:3a:0f:0a:93:8e:70:e0:f8:a1:2b:57:
fd:82:4b:aa:f6:bc:4e:c9:e1:0e:b4:24:70:1a:03:
8b:71:f0:c2:95:9c:ec:59:ae:63:25:d4:38:e8:3d:
50:50:51:8a:fe:0c:b5:8d:5a:ef:06:2f:02:28:49:
3f:a3:5f:e5:42:f7:af:60:fb:11:f9:e5:14:67:b9:
e3:50:af:3c:85:b4:33:76:22:da:1d:db:4d:06:2c:
06:03:a0:6d:71:d7:7f:30:49:0f:41:bd:12:0e:13:
f8:c8:f7:f4:2f:66:69:b5:13:af:a6:95:c9:9b:b6:
5d:82:24:a2:71:dc:4f:77:4b:2a:a0:90:d6:6b:ff:
bd:0f:3b:8e:09:fa:51:0d:46:4c:05:73:f0:f1:62:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:24:1E:FC:28:03:9C:68:50:1F:C9:EC:0E:C1:45:59:3E:77:9A:6A
X509v3 Authority Key Identifier:
keyid:34:91:24:6E:C3:E1:BE:52:19:E1:5F:10:79:BB:12:14:86:09:07:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJEkbsPhvlIZ4V8QebsSFIYJB1w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/1/3491246EC3E1BE5219E15F1079BB12148609075C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:58:50:52:25:4e:8e:c9:aa:2c:d0:c8:31:68:ad:01:9a:8e:
31:57:bf:39:ec:24:62:9e:b9:08:9a:02:35:c0:2f:d1:3e:dd:
49:76:c8:d6:b9:3a:48:da:43:fa:f8:92:f6:89:32:59:40:4c:
54:5d:d9:9a:c4:87:7f:a9:f4:d2:53:db:d4:fa:6f:67:1a:5e:
eb:bd:36:ce:0d:6b:a2:2e:a6:44:c9:2b:e9:f0:f0:7e:f1:f1:
e3:9c:e2:e4:b0:1c:73:4c:eb:d8:6d:2a:96:6a:3c:7a:22:b4:
7c:50:72:3d:6e:d1:f8:a2:6d:50:ea:b3:e7:70:68:1d:5e:b6:
4e:c8:cc:d0:14:cf:d8:a7:71:de:1c:c8:56:9a:14:dd:68:9a:
a3:e5:b9:44:4d:0c:99:76:fb:c9:b4:52:6c:ab:e9:90:93:a7:
40:01:5d:cb:db:27:77:1d:5c:cb:23:b6:14:3c:b3:44:14:cf:
70:1d:1d:78:2c:e3:5c:b7:1c:4c:2b:ab:eb:57:93:24:47:73:
2b:3d:cb:c4:40:56:52:2d:6c:de:89:80:a1:79:72:83:5c:ad:
cf:a0:ea:b1:21:7e:3a:14:d3:8c:e1:df:82:3e:73:6d:12:61:
bd:c7:08:b0:be:84:2c:b5:07:bb:5a:32:92:ef:ec:f0:6f:b9:
5f:2b:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:04:58 2026 by rpki-client