Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: ZklphWew9E2NpAVE1yEsR5XQ+dkvoXVHbPhKLqr+jdY=
Subject key identifier: AE:F1:43:CC:93:DC:3C:8D:4C:1E:3D:59:1F:85:34:A9:6E:2D:50:31
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 4C7DA7BF912CF150E2436F38A3822912E0A163FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: D5
Signing time: Mon 02 Mar 2026 02:28:24 +0000
Manifest this update: Mon 02 Mar 2026 02:23:24 +0000
Manifest next update: Tue 03 Mar 2026 02:55:24 +0000
Files and hashes: 1: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: /yu/h4aJ3c18yxcw90yUCL3B1unQCXKuQeyF76tw9c4=)
2: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: J1HG0OMrjIFaGXRRNUqDlj9Wjr3EYNiVY9djg5Z3eOw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:7d:a7:bf:91:2c:f1:50:e2:43:6f:38:a3:82:29:12:e0:a1:63:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Mar 2 02:23:24 2026 GMT
Not After : Mar 3 02:55:24 2026 GMT
Subject: CN=AEF143CC93DC3C8D4C1E3D591F8534A96E2D5031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:74:00:02:e7:38:b5:69:36:a2:b8:b5:3a:
dd:d2:fd:4f:57:4a:4a:2a:f4:d4:da:40:e2:87:c0:
19:45:e0:f3:0c:fb:f1:66:5c:57:57:40:d3:e9:b7:
00:7d:bf:fa:ed:00:bd:1b:e0:5a:27:6f:c2:fc:96:
1d:dc:3b:b1:21:31:8d:57:5c:ab:99:3e:df:2d:59:
bd:c6:54:66:c1:98:84:74:54:bb:5a:a1:3c:71:7a:
62:a6:89:9a:bb:c6:26:df:4e:c1:31:0e:ef:00:d4:
b7:ed:02:e2:b5:d6:df:60:25:91:9e:34:cd:ab:85:
1e:89:7e:f4:a2:33:f2:db:85:cd:a8:62:f6:7e:e2:
f1:d2:f0:28:1e:77:e8:99:e6:b1:9c:7e:ca:f6:57:
d5:f4:1a:8b:68:57:44:03:d3:26:40:a1:33:d9:38:
50:8a:c8:b8:3a:2a:61:6b:88:34:15:bf:c1:10:fd:
2e:e5:a3:e3:34:a7:a0:97:29:de:14:ab:14:03:0e:
a0:27:dd:9b:dc:d8:0c:59:c5:44:be:c3:94:e8:52:
71:17:14:3e:1f:bb:ce:8e:2e:8f:6b:91:79:f9:d9:
db:fe:9d:f5:08:a9:5e:bd:f3:be:3c:2a:dc:2d:65:
08:a5:ea:03:7d:5b:dd:10:1e:a9:c3:9e:b6:91:70:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F1:43:CC:93:DC:3C:8D:4C:1E:3D:59:1F:85:34:A9:6E:2D:50:31
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8c:ec:bb:42:92:76:3f:c2:a5:e5:33:88:ca:c8:f7:af:eb:
a8:e5:6b:8f:9e:6f:93:b5:d8:8f:c7:2e:8f:c6:c9:0b:2c:fc:
87:05:64:57:6e:87:0a:08:e5:27:9b:0b:eb:53:43:f6:8a:87:
ab:68:87:10:48:72:fa:0a:df:f9:7b:7f:aa:5f:a2:65:e3:61:
77:05:4c:64:e9:83:42:78:3e:bf:d9:51:2e:89:fe:87:f3:ce:
4d:b6:32:19:5d:0a:8d:63:d1:ab:24:c0:fa:65:d8:b9:de:97:
f2:16:86:41:65:81:83:4e:c9:6c:db:76:2e:3e:ea:c1:2d:18:
f9:2d:47:95:59:74:f9:a6:15:7c:7b:db:8d:d4:d9:f4:9d:ca:
fc:cf:3c:08:b1:f6:c2:6b:a4:05:c8:69:3a:33:32:93:49:eb:
7b:f1:9e:ba:15:d8:eb:73:2a:13:76:11:c3:2a:28:8e:04:63:
fb:8e:a2:5f:35:e9:0b:9d:a3:62:4d:73:c6:4c:e0:d6:7c:66:
b8:0d:da:7f:57:a0:8d:af:b2:16:0b:ec:35:f1:6b:7e:ec:4d:
c6:c4:82:31:a0:00:eb:2d:bf:75:da:ac:8b:1c:98:89:74:39:
6d:18:0d:e0:e1:ec:3f:9b:df:3a:81:9f:40:06:ba:8e:c9:b5:
67:2b:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:29:20 2026 by rpki-client