Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: Q0Bhth/hn363wlSfyPN0vVKXmNDhkMQlPbgH2HEfQTY=
Subject key identifier: 1C:7B:EA:8C:01:BD:1F:35:F3:E4:58:02:EA:AB:5B:79:50:C3:27:3E
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 1F34F948B6EA7574D838CCE76AE895EF777F03DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: 0112
Signing time: Thu 16 Apr 2026 23:58:34 +0000
Manifest this update: Thu 16 Apr 2026 23:53:34 +0000
Manifest next update: Sat 18 Apr 2026 01:46:34 +0000
Files and hashes: 1: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: J1HG0OMrjIFaGXRRNUqDlj9Wjr3EYNiVY9djg5Z3eOw=)
2: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: Lp4v0l1OSQZ4eYXF/pdpFw01q+wAaxv/V7+G4oMEiBI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:34:f9:48:b6:ea:75:74:d8:38:cc:e7:6a:e8:95:ef:77:7f:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Apr 16 23:53:34 2026 GMT
Not After : Apr 18 01:46:34 2026 GMT
Subject: CN=1C7BEA8C01BD1F35F3E45802EAAB5B7950C3273E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:b7:b5:ec:e1:91:86:a4:73:51:35:56:36:
25:29:3b:4b:b9:83:1a:f7:bf:ac:f1:3a:ab:04:7e:
a5:4d:00:2c:ec:1f:2f:f4:bd:e6:ba:07:41:2f:6a:
51:d9:d7:57:dd:76:81:10:c8:42:34:72:29:f4:f2:
a3:d8:23:0b:6e:51:62:84:18:a6:de:ee:75:af:ed:
af:4d:04:e0:13:f6:49:09:a7:02:49:39:59:01:26:
bc:6f:cf:46:91:94:5b:47:35:6f:78:ea:4f:41:20:
08:83:b4:3e:11:41:de:ac:ae:9f:f3:a3:52:b4:7a:
ad:9b:6f:a3:d2:3c:ea:d1:a6:9a:09:c4:e3:a6:29:
a4:2d:3a:b7:b5:e5:ee:c4:c7:04:7e:02:5e:24:fd:
45:2c:02:96:ea:af:f4:61:d4:d1:0a:72:e1:44:be:
3a:15:59:03:1d:00:ca:50:76:02:5d:10:d1:63:2f:
90:6d:c2:8b:9d:8a:fb:c6:d0:f8:5c:02:b2:e2:f5:
18:1e:a4:de:93:2d:5e:cc:f0:27:44:82:66:3f:ba:
f7:d4:86:fc:c6:70:6a:8b:f3:11:f2:a2:d7:23:80:
d6:3f:62:d6:d4:44:7a:39:c6:79:f6:b8:66:79:0f:
70:f4:01:6d:37:80:92:1d:27:ea:ac:e3:2c:76:21:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7B:EA:8C:01:BD:1F:35:F3:E4:58:02:EA:AB:5B:79:50:C3:27:3E
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4f:88:09:2f:4b:75:99:79:80:ae:53:38:64:7a:84:ed:96:
24:83:d0:0d:6c:21:27:4f:84:f1:17:84:17:22:de:b3:f6:48:
62:fc:6b:28:74:c5:8e:7a:ae:bb:24:2f:42:7f:e1:60:d8:0f:
15:89:01:b1:04:58:f8:6d:a4:bf:3d:7f:92:f9:b8:0b:f1:96:
f1:74:92:4f:fe:e0:a7:2b:28:a5:6e:93:91:67:e8:10:88:b5:
51:c8:e9:02:23:9f:ba:95:7d:7c:d9:85:e5:56:f6:25:6e:b2:
77:86:86:44:3b:f4:dd:76:a7:58:f6:9d:77:4b:6c:a1:51:23:
b8:8a:7b:76:7f:ea:65:12:42:e5:6d:ba:22:a5:44:79:67:db:
c0:82:ac:66:63:e0:e7:af:df:0e:eb:b4:3c:15:c7:f6:1a:09:
9d:e1:02:dc:f7:91:16:a6:c4:09:a0:5a:82:5f:06:17:df:1e:
f2:62:75:3d:17:00:80:9e:ef:3f:77:82:07:7b:3a:b4:66:2e:
44:f4:a0:68:ca:7f:81:a1:38:87:83:ef:08:d8:c8:89:d4:14:
31:83:43:02:4a:af:1f:d1:e6:ad:56:a9:8a:96:39:75:18:a2:
3b:71:09:a3:ba:1e:2c:19:11:1b:d8:12:bf:d6:1e:f8:98:ba:
85:52:47:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:27 2026 by rpki-client