Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: L3XyK4T6ZXKirColhugFfytKsAmGOsyqaJ8gXhoIH98=
Subject key identifier: 07:88:F6:D7:BA:4F:4C:EA:2D:C3:38:37:EA:B9:FD:12:EC:87:BA:4E
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 54267C6AE2762CBCBC794BC08DE68F80B5C55CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: 01EA
Signing time: Thu 24 Sep 2026 05:38:33 +0000
Manifest this update: Thu 24 Sep 2026 05:33:33 +0000
Manifest next update: Fri 25 Sep 2026 05:41:33 +0000
Files and hashes: 1: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: Uo1CJndmaMxoNbqoifLfmbA/sDn2IBjFFmlBnNOatN0=)
2: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: XTrRc7BvhR1v4bi5yv/rUwu+Cr89uiOaZylHW/FtRgY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:26:7c:6a:e2:76:2c:bc:bc:79:4b:c0:8d:e6:8f:80:b5:c5:5c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Sep 24 05:33:33 2026 GMT
Not After : Sep 25 05:41:33 2026 GMT
Subject: CN=0788F6D7BA4F4CEA2DC33837EAB9FD12EC87BA4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:50:67:e4:85:84:f5:4d:89:f2:1e:55:bd:
1e:7c:67:20:49:5b:08:a7:57:a3:53:91:92:78:fc:
6e:c5:a3:c8:57:f5:08:85:03:91:56:4a:db:06:bd:
df:dd:b1:22:03:d6:05:7e:94:d0:e6:13:1c:0b:c5:
c2:dd:b5:2f:f4:bc:dd:82:0d:1e:94:43:30:01:73:
76:ee:76:2f:31:a6:a7:4a:d3:05:4b:25:c6:ac:ed:
b5:e8:9b:db:d9:c2:29:ec:02:e3:a2:38:a2:7a:0e:
a6:50:a2:fa:c6:35:25:ec:59:cb:67:64:77:e6:53:
97:c1:3a:20:37:c2:7f:2d:84:20:5a:ba:a2:d3:40:
ec:0d:81:8c:be:19:f7:11:e1:cd:89:4f:46:47:19:
b1:bf:76:62:aa:6e:8e:41:75:c0:81:a4:ec:ea:39:
86:e1:8a:c1:a1:05:0a:35:26:ee:4f:69:52:86:d9:
50:17:a7:96:0c:e8:ae:37:70:bc:ce:61:d2:6c:cb:
02:b1:75:47:ad:25:a0:3b:dc:47:58:ba:15:d5:b7:
38:14:2d:0b:48:e8:c9:a6:1f:6b:1a:b0:69:ec:71:
d3:c1:e1:3e:75:4e:d4:7a:97:54:a9:a8:09:11:f7:
6f:06:8c:b1:56:11:a4:ba:f6:54:04:3e:19:90:fc:
e4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:88:F6:D7:BA:4F:4C:EA:2D:C3:38:37:EA:B9:FD:12:EC:87:BA:4E
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5b:a0:fa:42:b0:d6:69:28:17:18:ef:71:25:89:6d:ce:da:
d0:72:5d:2c:d8:cb:c9:26:0b:bc:fd:c2:a6:86:d5:22:67:9c:
a5:a6:0e:04:79:b5:79:ee:aa:43:6c:a6:a5:22:c4:b2:19:78:
7b:66:17:3a:de:28:f0:19:6b:16:76:49:3b:63:1a:5d:80:2b:
03:ca:99:20:cd:23:9d:a0:6b:aa:77:25:f7:4a:3b:98:f0:1e:
0c:f3:c2:b7:59:89:30:94:cd:70:d8:a2:c1:28:73:ab:78:ca:
14:72:65:7e:e7:b6:5e:4f:6b:ca:71:4d:10:c5:aa:d2:e7:e7:
f1:65:ec:15:0d:a6:d2:1f:50:0b:a6:f5:27:a9:a7:bb:59:0c:
82:7c:60:2d:40:f6:c3:c9:4b:f0:31:ec:77:db:85:d6:da:bf:
81:15:2a:03:61:44:00:37:66:fd:85:cf:a6:9d:5c:2a:54:39:
b5:63:36:50:f1:94:ce:1a:0d:04:14:01:cd:e3:02:c7:64:b3:
7d:e1:6c:34:4b:69:b5:40:2a:b5:d0:b7:35:bc:60:81:e4:59:
27:11:62:38:f2:fd:7c:6f:98:79:c5:4c:5e:f3:73:75:af:f0:
c2:e0:aa:89:57:95:cc:e2:83:6c:2d:b8:14:1f:10:c5:7b:29:
b2:1d:9c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:01:25 2026 by rpki-client