Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/0/DAD29C325209665A9DF4E00FA33AC7488DF68549.mft
File: DAD29C325209665A9DF4E00FA33AC7488DF68549.mft (raw, json)
Hash identifier: rH3tWlQHYx/hfKZCF0UWS/K7SZnsCcb5CVwhjTSf66I=
Subject key identifier: 81:24:E6:8D:36:15:01:3C:C6:A6:0A:14:35:1D:4D:F1:6B:D6:74:68
Authority key identifier: DA:D2:9C:32:52:09:66:5A:9D:F4:E0:0F:A3:3A:C7:48:8D:F6:85:49
Certificate issuer: /CN=dad29c325209665a9df4e00fa33ac7488df68549
Certificate serial: 19DC93C3CACF8C9E434550425F20210928AAEDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tKcMlIJZlqd9OAPozrHSI32hUk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/0/DAD29C325209665A9DF4E00FA33AC7488DF68549.mft
Manifest number: 32
Signing time: Wed 17 Jun 2026 00:23:15 +0000
Manifest this update: Wed 17 Jun 2026 00:18:15 +0000
Manifest next update: Thu 18 Jun 2026 03:26:15 +0000
Files and hashes: 1: AS200378.asa (hash: dSIs8CnyyNF0RDFDPwaimeEvkNdqAWEENyo5ytm51aU=)
2: DAD29C325209665A9DF4E00FA33AC7488DF68549.crl (hash: jNC+IYBT1e4Pg+qDybDNuJkiM/AXkS9/AHK1yQlmarw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/0/DAD29C325209665A9DF4E00FA33AC7488DF68549.crl
rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/0/DAD29C325209665A9DF4E00FA33AC7488DF68549.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tKcMlIJZlqd9OAPozrHSI32hUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:dc:93:c3:ca:cf:8c:9e:43:45:50:42:5f:20:21:09:28:aa:ed:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad29c325209665a9df4e00fa33ac7488df68549
Validity
Not Before: Jun 17 00:18:15 2026 GMT
Not After : Jun 18 03:26:15 2026 GMT
Subject: CN=8124E68D3615013CC6A60A14351D4DF16BD67468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:e1:0f:a1:0a:3f:f7:2f:a3:2d:e6:73:eb:
d1:af:85:e3:c6:92:cd:2d:16:c6:c0:97:07:61:c9:
06:bf:5e:2b:02:a4:2f:af:a2:c8:24:2f:2f:0c:cf:
bf:9c:2f:1a:c6:b2:8e:af:a8:d1:63:e6:de:96:43:
77:ce:08:08:e9:46:a5:01:61:b6:a0:89:76:66:fd:
61:c9:ef:7f:e3:f1:41:9b:9e:8d:b7:25:90:4a:99:
0f:07:15:0e:36:a4:be:fd:2d:b5:9a:72:3b:f9:dd:
eb:17:bf:6b:72:5d:79:b1:cf:13:e6:3f:9f:b8:66:
72:7d:48:3b:5e:77:85:0b:ab:3e:3e:16:d4:ca:4d:
34:26:13:80:6e:2a:28:6d:2e:f3:89:74:ea:55:02:
08:c2:a2:29:e3:1b:15:ab:13:f1:e2:54:f7:f7:19:
2f:3a:56:a9:fa:df:95:cf:5b:76:c8:ce:5e:a9:af:
6a:2c:f7:5e:99:c9:d1:1b:4c:18:e1:01:2e:f7:6c:
f9:55:49:9c:4f:69:98:3b:85:d3:25:c6:3e:8c:fa:
79:bb:7b:da:cf:60:85:5d:52:6f:d0:20:37:a8:99:
b0:8f:48:97:e8:35:bf:ca:cd:3e:00:88:87:4d:14:
52:3d:8b:9d:e5:91:78:d6:62:a6:2b:2b:de:aa:96:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:24:E6:8D:36:15:01:3C:C6:A6:0A:14:35:1D:4D:F1:6B:D6:74:68
X509v3 Authority Key Identifier:
keyid:DA:D2:9C:32:52:09:66:5A:9D:F4:E0:0F:A3:3A:C7:48:8D:F6:85:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/0/DAD29C325209665A9DF4E00FA33AC7488DF68549.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tKcMlIJZlqd9OAPozrHSI32hUk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/0/DAD29C325209665A9DF4E00FA33AC7488DF68549.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:49:61:04:bd:15:73:18:e0:ee:05:49:e3:82:7a:53:fc:ea:
86:d8:e3:09:02:dc:f8:42:ff:03:d6:03:09:59:da:c4:f5:14:
62:9b:a3:d6:63:67:ea:03:d7:85:5e:e9:e2:7c:6c:aa:5f:6a:
6f:f5:aa:c5:d8:bd:15:dd:5a:2a:a9:55:91:69:8a:0f:5a:ec:
9c:2e:a8:bc:fe:5e:59:6a:20:6f:1f:aa:3c:40:03:ac:80:e9:
e1:a0:7d:65:3b:4b:06:c4:01:21:dc:70:d2:a5:48:b0:41:e0:
a0:89:9b:9b:6f:75:d9:22:f2:ce:12:1d:5a:96:20:da:f7:80:
b2:75:12:28:d3:f3:8b:62:50:9c:88:19:76:02:19:49:e6:00:
6a:9f:42:9c:4b:bd:d3:ce:f2:e0:f0:8c:fc:d9:da:fe:af:d0:
87:15:d5:a7:23:1b:91:b8:41:c0:cf:29:33:7c:68:e7:ac:bc:
5e:91:60:e5:3f:c5:02:f4:27:c1:16:46:12:2c:44:98:a9:e3:
95:85:da:f5:8b:9a:cd:9c:fc:26:aa:a2:cb:d0:3c:dc:8d:8c:
67:a4:7f:aa:b7:36:e2:a7:60:b4:a1:51:5a:ba:5e:05:b4:c3:
f4:5a:17:09:b5:20:58:cd:22:6c:2a:e7:90:0b:cb:78:8b:f0:
de:d4:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:16:54 2026 by rpki-client