Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
File: DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft (raw, json)
Hash identifier: 7TNBOzpLQL77Kyo3qhEGck9kShdeHWoLHRf1Mpcy0bg=
Subject key identifier: D0:5A:9E:32:12:AE:7F:DD:D9:10:48:A9:57:A6:83:0E:C3:6F:7D:DA
Authority key identifier: DB:1E:7C:42:15:D9:A1:EE:A8:1F:0B:12:99:F6:76:0D:27:56:26:10
Certificate issuer: /CN=db1e7c4215d9a1eea81f0b1299f6760d27562610
Certificate serial: 03B84E2732BDDA2A4C2063B64F934F5DED4E763E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
Manifest number: 2C
Signing time: Tue 22 Sep 2026 13:44:19 +0000
Manifest this update: Tue 22 Sep 2026 13:39:19 +0000
Manifest next update: Wed 23 Sep 2026 14:25:19 +0000
Files and hashes: 1: DB1E7C4215D9A1EEA81F0B1299F6760D27562610.crl (hash: bX4zS//z3O09PtIKVCj8ARTPLSAqATgC3AZzbpLdwlk=)
2: AS218904.asa (hash: 2APSJj4sILOj/UlCFaW7JSoWtAv3v4pfE4ClbXw+p6M=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b8:4e:27:32:bd:da:2a:4c:20:63:b6:4f:93:4f:5d:ed:4e:76:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1e7c4215d9a1eea81f0b1299f6760d27562610
Validity
Not Before: Sep 22 13:39:19 2026 GMT
Not After : Sep 23 14:25:19 2026 GMT
Subject: CN=D05A9E3212AE7FDDD91048A957A6830EC36F7DDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:b4:79:f4:7f:d1:12:05:b0:c2:b9:41:3c:
d6:d2:a6:30:78:35:a1:0a:68:fa:5b:d2:6c:29:33:
19:f2:62:f6:b4:a8:7d:83:d5:73:bb:8e:5e:08:f6:
57:a8:4d:79:71:8f:eb:0b:d5:6d:68:e7:cd:45:57:
22:bb:00:47:b3:fc:01:72:b6:f8:d1:cb:24:16:20:
07:91:10:c4:af:38:f0:02:99:e5:3a:86:6d:ed:13:
d7:bb:dc:9b:69:f7:b5:d3:8f:3d:d8:97:a2:40:c5:
3c:4f:64:0c:2a:d7:ff:45:a4:55:58:64:b2:02:a6:
3a:14:ce:19:93:85:20:55:e3:f1:33:dd:e1:d6:f1:
b1:b0:0b:ff:bb:33:3e:fe:57:e9:2c:7c:56:0f:4a:
b9:0a:19:16:c2:ac:04:f2:e2:16:a9:9e:5d:00:b8:
b5:b7:0d:76:6f:52:e7:31:30:f0:14:54:d3:af:06:
7e:f2:5d:9e:1d:e9:2f:84:5f:ff:7d:9e:36:2c:3f:
93:db:99:e4:34:80:57:dd:e8:c6:d3:ee:c5:d3:d0:
e3:9a:a5:c7:de:b4:47:a1:64:c3:b4:86:74:91:9e:
36:c0:fd:fe:4d:54:64:8c:4e:84:79:f3:00:86:86:
f9:0b:b9:17:00:da:8b:f7:a2:dc:98:42:b6:6c:56:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5A:9E:32:12:AE:7F:DD:D9:10:48:A9:57:A6:83:0E:C3:6F:7D:DA
X509v3 Authority Key Identifier:
keyid:DB:1E:7C:42:15:D9:A1:EE:A8:1F:0B:12:99:F6:76:0D:27:56:26:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x58QhXZoe6oHwsSmfZ2DSdWJhA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/2/DB1E7C4215D9A1EEA81F0B1299F6760D27562610.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8a:73:2c:1d:c1:02:70:88:60:eb:00:4f:fc:d4:db:5b:6c:
6e:55:ab:f7:1a:4d:6f:90:c2:c2:07:02:d5:d7:f2:3e:f7:1a:
f5:90:5c:01:1c:59:6f:64:60:15:11:a1:e6:b7:ca:5b:df:10:
c3:fc:7e:54:65:7b:97:59:a7:9c:dc:25:0c:7c:bb:96:39:8f:
34:95:ac:7f:4e:e1:09:01:bc:4c:f4:b1:2d:c9:50:2f:e1:f3:
6d:2b:68:64:65:98:a6:93:bc:e6:1b:e3:e1:8d:d8:d4:2e:d8:
d4:78:a1:93:ab:70:be:a6:9b:5c:e4:db:ec:2a:d2:8d:85:3e:
f5:84:90:89:cc:51:85:52:50:46:46:56:fc:1d:cb:09:10:2d:
aa:b8:f7:57:37:aa:8c:e1:ff:65:59:2b:a9:cd:a2:b8:76:13:
42:e2:23:9c:df:a5:4f:63:3a:cc:dc:53:6d:16:3c:19:55:6b:
fc:d6:39:80:68:c1:cc:43:a1:1f:0f:d2:8b:70:e8:97:91:28:
77:0c:61:13:b6:7c:b1:98:80:18:9b:00:48:cb:99:9a:dc:ab:
75:28:cf:d4:88:e2:4a:fc:2b:41:51:fd:ca:fa:ff:07:16:7d:
1e:10:7c:b1:c8:29:c4:05:ad:33:f3:b7:05:5e:ee:19:73:3c:
ff:4a:16:28
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUA7hOJzK92ipMIGO2T5NPXe1Odj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGIxZTdjNDIxNWQ5YTFlZWE4MWYwYjEyOTlmNjc2MGQy
NzU2MjYxMDAeFw0yNjA5MjIxMzM5MTlaFw0yNjA5MjMxNDI1MTlaMDMxMTAvBgNV
BAMTKEQwNUE5RTMyMTJBRTdGREREOTEwNDhBOTU3QTY4MzBFQzM2RjdEREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClgbR59H/REgWwwrlBPNbSpjB4
NaEKaPpb0mwpMxnyYva0qH2D1XO7jl4I9leoTXlxj+sL1W1o581FVyK7AEez/AFy
tvjRyyQWIAeREMSvOPACmeU6hm3tE9e73Jtp97XTjz3Yl6JAxTxPZAwq1/9FpFVY
ZLICpjoUzhmThSBV4/Ez3eHW8bGwC/+7Mz7+V+ksfFYPSrkKGRbCrATy4hapnl0A
uLW3DXZvUucxMPAUVNOvBn7yXZ4d6S+EX/99njYsP5PbmeQ0gFfd6MbT7sXT0OOa
pcfetEehZMO0hnSRnjbA/f5NVGSMToR58wCGhvkLuRcA2ov3otyYQrZsVuhBAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU0FqeMhKuf93ZEEipV6aDDsNvfdowHwYDVR0j
BBgwFoAU2x58QhXZoe6oHwsSmfZ2DSdWJhAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2NiZmFkOTYtNzk0Ny00ZTQ5LWFjZTEtOGJmODk5OTNi
ZDQyLzIvREIxRTdDNDIxNUQ5QTFFRUE4MUYwQjEyOTlGNjc2MEQyNzU2MjYxMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJ4NThRaFhab2U2b0h3c1NtZloyRFNk
V0poQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zY2JmYWQ5Ni03
OTQ3LTRlNDktYWNlMS04YmY4OTk5M2JkNDIvMi9EQjFFN0M0MjE1RDlBMUVFQTgx
RjBCMTI5OUY2NzYwRDI3NTYyNjEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPopzLB3BAnCIYOsAT/zU
21tsblWr9xpNb5DCwgcC1dfyPvca9ZBcARxZb2RgFRGh5rfKW98Qw/x+VGV7l1mn
nNwlDHy7ljmPNJWsf07hCQG8TPSxLclQL+HzbStoZGWYppO85hvj4Y3Y1C7Y1Hih
k6twvqabXOTb7CrSjYU+9YSQicxRhVJQRkZW/B3LCRAtqrj3VzeqjOH/ZVkrqc2i
uHYTQuIjnN+lT2M6zNxTbRY8GVVr/NY5gGjBzEOhHw/Si3Dol5EodwxhE7Z8sZiA
GJsASMuZmtyrdSjP1IjiSvwrQVH9yvr/BxZ9HhB8scgpxAWtM/O3BV7uGXM8/0oW
KA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:03:21 2026 by rpki-client