Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: CIZLkUk8O49hIUaeW2E2IEQqVMhhX3lQFGkuEj/LhOM=
Subject key identifier: D1:70:C1:E5:C3:12:51:F8:88:F7:0F:0B:D2:09:5F:BF:A9:68:EE:77
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 218B2E08B02A6E413420F9886BAC97D78FBE0A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: 0160
Signing time: Fri 12 Jun 2026 20:13:25 +0000
Manifest this update: Fri 12 Jun 2026 20:08:25 +0000
Manifest next update: Sat 13 Jun 2026 20:17:25 +0000
Files and hashes: 1: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: J1HG0OMrjIFaGXRRNUqDlj9Wjr3EYNiVY9djg5Z3eOw=)
2: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: 1M3fOgJcAgsvn2As7vaCXGTa2rJVR8Jq30z48NC+/lQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:8b:2e:08:b0:2a:6e:41:34:20:f9:88:6b:ac:97:d7:8f:be:0a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Jun 12 20:08:25 2026 GMT
Not After : Jun 13 20:17:25 2026 GMT
Subject: CN=D170C1E5C31251F888F70F0BD2095FBFA968EE77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:94:01:60:45:d6:e1:51:60:6d:c7:76:22:49:
5c:01:c3:91:b9:fe:b6:14:11:82:8b:84:c9:93:3e:
76:24:37:11:71:57:0f:d5:d1:85:0b:e4:16:89:ab:
98:f2:fb:85:d5:c1:a4:5a:ce:ec:a3:ff:6d:35:5c:
99:08:db:7b:a4:b3:20:2d:f7:d9:fc:5c:37:d7:ff:
73:b7:33:a4:d1:44:c0:81:10:f5:14:8c:46:37:89:
71:cb:ad:c7:21:66:a3:ef:66:49:06:c8:83:63:dd:
2c:d7:82:f1:15:62:ed:7e:9b:ef:41:74:08:04:a6:
85:1e:d0:4e:e0:54:8b:d5:e3:17:c0:9f:f3:43:35:
f2:5d:2e:13:1e:a5:70:ea:1c:af:09:0a:e8:85:eb:
0d:35:18:f4:73:bf:8c:7c:08:93:9e:34:64:95:06:
a5:98:e0:a3:48:b0:19:3b:46:cd:cf:82:7e:25:8c:
9e:a9:a0:46:5f:28:3e:c0:a0:9c:91:94:86:cd:29:
95:28:26:3c:1e:34:ac:5d:75:2c:92:46:de:0a:5c:
ff:24:85:f8:4d:35:85:15:1d:e0:12:5c:ec:95:46:
6e:c0:32:b2:a1:9a:f9:bb:a8:dd:b5:c5:94:b0:ef:
0c:1c:8c:a1:88:75:82:7b:86:1b:a4:67:5d:8d:d8:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:70:C1:E5:C3:12:51:F8:88:F7:0F:0B:D2:09:5F:BF:A9:68:EE:77
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d5:1c:13:99:5a:1a:ac:12:ab:a4:2e:a2:5b:e3:83:3e:83:
11:66:fd:30:45:db:a4:56:35:67:7e:e5:7a:12:70:29:d7:54:
40:db:8d:b2:fd:36:f8:da:1f:21:0e:9d:27:c8:4e:f1:90:85:
ec:39:df:75:a3:b8:f2:a1:5c:6c:1b:80:ed:4f:cf:d1:3f:6f:
02:4d:3d:f8:fa:af:14:84:5f:e0:5e:b3:38:fc:41:d4:eb:d6:
2d:13:35:f1:c5:76:28:d7:dc:3a:47:22:b9:b0:77:2b:d3:cd:
bf:ea:83:a9:1a:da:cf:13:8f:40:39:1c:5c:ab:46:0d:1d:b7:
7b:37:50:7b:b0:38:41:96:ae:b5:78:31:d8:d3:68:ef:51:de:
be:c7:9d:76:05:83:4d:f5:31:95:d1:2f:02:36:7c:5b:4e:46:
5d:54:b1:e5:bf:8c:39:5a:56:cb:2b:62:33:f6:77:9d:bd:28:
1f:e0:30:97:14:36:d1:e0:2c:a3:a9:f5:53:33:2e:45:98:20:
bb:86:26:3d:54:17:c5:00:0d:38:fe:24:2a:22:37:97:d4:97:
f1:33:19:87:9f:69:4f:bc:2f:a1:df:e8:01:dc:63:5c:e1:38:
72:5c:d3:c1:56:04:49:f2:31:c8:79:85:74:b5:0e:ec:cd:23:
6a:19:19:d0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUIYsuCLAqbkE0IPmIa6yX14++CkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDBhNTE2YjUwNDI2MjAyYTQyNGYwZWJmY2I3ZDJiZDRm
NzQ0Zjk2NDAeFw0yNjA2MTIyMDA4MjVaFw0yNjA2MTMyMDE3MjVaMDMxMTAvBgNV
BAMTKEQxNzBDMUU1QzMxMjUxRjg4OEY3MEYwQkQyMDk1RkJGQTk2OEVFNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdlAFgRdbhUWBtx3YiSVwBw5G5
/rYUEYKLhMmTPnYkNxFxVw/V0YUL5BaJq5jy+4XVwaRazuyj/201XJkI23uksyAt
99n8XDfX/3O3M6TRRMCBEPUUjEY3iXHLrcchZqPvZkkGyINj3SzXgvEVYu1+m+9B
dAgEpoUe0E7gVIvV4xfAn/NDNfJdLhMepXDqHK8JCuiF6w01GPRzv4x8CJOeNGSV
BqWY4KNIsBk7Rs3Pgn4ljJ6poEZfKD7AoJyRlIbNKZUoJjweNKxddSySRt4KXP8k
hfhNNYUVHeASXOyVRm7AMrKhmvm7qN21xZSw7wwcjKGIdYJ7hhukZ12N2C3NAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU0XDB5cMSUfiI9w8L0glfv6lo7ncwHwYDVR0j
BBgwFoAU0KUWtQQmICpCTw6/y30r1PdE+WQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4
NDhjLzAvRDBBNTE2QjUwNDI2MjAyQTQyNEYwRUJGQ0I3RDJCRDRGNzQ0Rjk2NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBLVVd0UVFtSUNwQ1R3Nl95MzByMVBk
RS1XUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MTcwOGE2Yi02
YzNhLTQwYTAtYTMwMi01OTVlY2MxNzg0OGMvMC9EMEE1MTZCNTA0MjYyMDJBNDI0
RjBFQkZDQjdEMkJENEY3NDRGOTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9UcE5laGqwSq6Quolvj
gz6DEWb9MEXbpFY1Z37lehJwKddUQNuNsv02+NofIQ6dJ8hO8ZCF7DnfdaO48qFc
bBuA7U/P0T9vAk09+PqvFIRf4F6zOPxB1OvWLRM18cV2KNfcOkciubB3K9PNv+qD
qRrazxOPQDkcXKtGDR23ezdQe7A4QZautXgx2NNo71HevseddgWDTfUxldEvAjZ8
W05GXVSx5b+MOVpWyytiM/Z3nb0oH+AwlxQ20eAso6n1UzMuRZggu4YmPVQXxQAN
OP4kKiI3l9SX8TMZh59pT7wvod/oAdxjXOE4clzTwVYESfIxyHmFdLUO7M0jahkZ
0A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:09 2026 by rpki-client