Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: vNQE1XEWe+X4nK7T0KAKDSbjndDY17mIh3Zv4EOCed0=
Subject key identifier: FD:D7:97:CE:BE:92:D4:78:42:FB:9B:E0:63:AF:04:F9:4A:D8:26:FD
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 30FC7F2B2AA801E4970C3823520BE031B482D850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: 019D
Signing time: Tue 28 Jul 2026 11:29:33 +0000
Manifest this update: Tue 28 Jul 2026 11:24:33 +0000
Manifest next update: Wed 29 Jul 2026 15:09:33 +0000
Files and hashes: 1: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: bG3PbkhpazvoyZVgDWxu/f0h3nPSJu9/b7c90MK27Eo=)
2: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: XTrRc7BvhR1v4bi5yv/rUwu+Cr89uiOaZylHW/FtRgY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:fc:7f:2b:2a:a8:01:e4:97:0c:38:23:52:0b:e0:31:b4:82:d8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Jul 28 11:24:33 2026 GMT
Not After : Jul 29 15:09:33 2026 GMT
Subject: CN=FDD797CEBE92D47842FB9BE063AF04F94AD826FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:20:95:fd:9f:c1:c6:c9:64:79:b9:d9:9d:
7b:d6:21:c3:1c:dc:b0:93:35:b7:18:6e:ff:f5:41:
3e:de:fa:e6:c9:5e:25:2b:46:5c:53:33:ad:24:c8:
83:20:bd:79:50:d0:d6:3a:33:ee:8e:68:01:e1:ea:
66:21:0e:46:0a:99:b2:cd:fb:41:f4:f1:7d:29:49:
c8:bd:58:b5:17:e4:46:9e:e0:d5:04:77:2f:51:32:
15:20:c2:22:c3:c0:0c:73:76:86:ce:2a:ab:9c:ed:
29:fc:54:c4:9e:95:09:78:2e:c5:26:53:11:8b:f3:
be:b6:98:3e:94:95:52:61:89:45:2b:5b:ce:93:3a:
a6:59:59:85:d3:68:9c:ca:81:fd:fe:3c:33:7a:33:
c6:af:b1:60:2e:9d:92:4a:a0:93:ca:14:99:f1:e1:
34:09:c0:d5:32:1c:cf:14:a9:c1:07:67:06:0e:d5:
de:26:a6:d2:d8:0c:5b:b1:c8:8d:cd:be:5b:b3:a6:
e6:f4:a2:b2:ba:29:27:a2:51:e7:68:ad:eb:44:68:
21:20:f0:2e:34:41:b7:aa:06:15:d1:ed:67:3b:88:
b8:d9:82:4c:bd:30:3c:ce:d8:3e:c1:74:a7:de:13:
d8:98:d0:08:6f:92:a2:94:2e:f1:e4:01:6a:04:53:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D7:97:CE:BE:92:D4:78:42:FB:9B:E0:63:AF:04:F9:4A:D8:26:FD
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:32:c3:f4:6c:d7:e4:b5:e2:2a:ce:5c:2f:ce:90:14:a1:64:
82:40:22:50:7b:e6:cc:1b:af:2c:3e:96:0f:75:52:c2:24:fa:
f5:de:8a:2c:c3:ba:2c:45:b8:a5:85:2e:55:e7:5a:31:0b:ff:
32:02:3b:3c:5e:d3:df:aa:ab:e7:25:41:79:08:bb:e9:e9:d7:
f1:98:86:50:0b:63:f5:2c:b8:09:62:6d:5b:51:30:41:4b:ac:
4a:f5:f7:03:4d:cf:c9:81:cf:77:c0:f9:0c:07:b6:71:c4:75:
23:4e:27:08:e3:bb:39:90:65:91:1a:89:97:f4:49:38:c0:6a:
46:80:d3:0b:a3:a7:3f:fb:0c:7e:ae:e2:5e:ed:e0:6d:7f:c5:
fb:24:4c:27:5d:72:c1:69:bc:6f:2d:00:97:26:94:db:a6:9f:
cb:f8:1e:66:eb:ae:88:53:4a:60:01:2d:eb:40:b8:1d:00:d1:
0e:a6:7b:37:33:c2:4f:ca:fb:a2:94:a8:66:3a:6b:7d:b1:76:
dd:e1:22:e6:40:19:d0:a5:91:12:25:37:9e:10:96:b2:0c:1c:
30:79:de:10:e1:a4:51:da:de:bb:2d:17:46:6a:13:d1:f8:94:
1b:c6:e5:74:3d:3d:59:d6:34:a6:93:59:79:f2:60:9c:d4:d4:
87:17:ac:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:27 2026 by rpki-client