Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.mft
File: 7A52DCCEACF368A06878893555D774D9895F595A.mft (raw, json)
Hash identifier: IlVC4MnuRV7RzIy5OysqssjTlshHX7Yzr13PjVLqCgo=
Subject key identifier: BE:CA:3C:07:29:FD:00:C5:B7:04:B1:6C:78:46:95:67:6F:F1:2B:A7
Authority key identifier: 7A:52:DC:CE:AC:F3:68:A0:68:78:89:35:55:D7:74:D9:89:5F:59:5A
Certificate issuer: /CN=7a52dcceacf368a06878893555d774d9895f595a
Certificate serial: 73A19FB5B557527A9CE27A7EA73AC6B2C969B778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elLczqzzaKBoeIk1Vdd02YlfWVo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.mft
Manifest number: 2C
Signing time: Tue 22 Sep 2026 13:44:20 +0000
Manifest this update: Tue 22 Sep 2026 13:39:20 +0000
Manifest next update: Wed 23 Sep 2026 13:45:20 +0000
Files and hashes: 1: 7A52DCCEACF368A06878893555D774D9895F595A.crl (hash: I1Wf5HCQA8cH4Q/g+kM/KY+soBhYbWEZVOOq3hVRrZ0=)
2: AS218832.asa (hash: 54tkvEtBJCf3Is5IzKEM0iUioVT4Vi7w+l532kOHpmI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.crl
rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.mft
rsync://rpki.ripe.net/repository/DEFAULT/elLczqzzaKBoeIk1Vdd02YlfWVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a1:9f:b5:b5:57:52:7a:9c:e2:7a:7e:a7:3a:c6:b2:c9:69:b7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a52dcceacf368a06878893555d774d9895f595a
Validity
Not Before: Sep 22 13:39:20 2026 GMT
Not After : Sep 23 13:45:20 2026 GMT
Subject: CN=BECA3C0729FD00C5B704B16C784695676FF12BA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:b6:5c:1f:32:f0:90:38:6e:ee:62:38:d9:
5a:00:72:89:a2:73:a4:f7:cb:a1:bb:83:f9:c5:f6:
a2:30:d1:85:d4:53:b1:5c:fc:e1:43:67:49:b0:94:
9a:af:54:65:31:a9:fb:d5:0c:fb:84:c2:a8:e1:a6:
84:ed:c3:b8:48:d8:f3:ea:50:e1:60:6f:e1:e7:94:
75:9d:94:33:24:18:74:45:0b:da:aa:a4:fb:39:b6:
03:89:10:9b:34:12:d4:bb:4f:b6:a6:07:19:40:a2:
23:c8:88:17:11:e1:ee:dd:12:97:b7:62:54:3c:0d:
83:0e:a9:ae:51:93:4d:a1:0b:52:b4:16:29:e3:28:
44:5d:09:45:33:48:22:5a:6d:07:60:1c:7d:75:a5:
e8:0c:bb:53:10:d8:5f:5f:d1:0c:e7:1b:f4:44:9f:
61:ad:51:58:7e:4d:4a:ba:06:48:32:5d:8d:ae:d2:
96:51:27:50:3a:4b:65:f6:49:26:f5:ba:ae:43:39:
6d:e9:04:41:4e:05:b6:30:8e:61:33:cb:61:68:c1:
60:ff:89:ff:85:a9:72:5d:b3:9a:77:d6:8c:42:c2:
63:9e:24:1e:4c:f5:7b:47:9c:d4:70:a7:e8:e3:f9:
43:51:eb:b8:ef:8a:99:e9:63:4e:7d:da:82:35:c5:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CA:3C:07:29:FD:00:C5:B7:04:B1:6C:78:46:95:67:6F:F1:2B:A7
X509v3 Authority Key Identifier:
keyid:7A:52:DC:CE:AC:F3:68:A0:68:78:89:35:55:D7:74:D9:89:5F:59:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elLczqzzaKBoeIk1Vdd02YlfWVo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/3/7A52DCCEACF368A06878893555D774D9895F595A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9b:94:30:85:0b:99:e6:af:2d:b0:00:03:7a:ba:e0:d5:cd:
51:5d:e3:88:b1:98:7d:9c:92:c4:c8:ec:37:3d:1e:fc:eb:9c:
23:39:49:63:fb:80:f3:40:bc:61:56:f7:b2:3e:95:e2:d9:6a:
5d:6a:7b:f1:98:cf:2b:40:6f:ec:46:3f:0f:c9:9d:69:ae:df:
14:e6:3a:cb:05:23:a2:e5:a7:fb:5b:eb:3b:7a:7b:e2:30:ff:
a6:89:9f:72:f6:9b:79:d6:87:aa:2b:5a:da:31:87:61:d8:ca:
00:ce:27:ad:9c:85:56:ad:01:8c:42:36:47:14:88:b4:52:01:
92:b3:c9:a8:d7:21:64:f4:5d:72:be:60:9d:a8:70:75:97:e5:
db:f7:37:4b:30:3e:6b:91:48:d9:10:62:6b:cb:e3:7f:74:c2:
60:1a:1a:f6:7a:1f:ef:c6:47:77:bb:72:01:b3:a6:42:3e:68:
ed:ec:9c:cc:3d:e6:b2:ef:59:5d:19:26:9e:4c:07:f9:00:67:
13:f7:f3:f3:3d:da:2c:9b:a3:30:12:30:76:2f:64:98:35:37:
b5:15:35:1c:a8:70:31:13:58:99:00:67:e6:3d:63:be:dd:e0:
7d:62:c4:f3:3b:db:b2:6c:47:10:6a:70:5b:0c:42:85:36:be:
b9:cf:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:03:13 2026 by rpki-client