Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: gDQjrGpAipdhuGCn8L5yjnDF5l+OrY3/Khcf5RmKXL4=
Subject key identifier: 28:EB:D7:7B:38:8E:03:94:20:55:03:B7:92:44:A0:72:28:50:56:AC
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 4EE2316BAC6BFF1EA0A5281EC25E2EB8C4E946E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: 01EB
Signing time: Thu 24 Sep 2026 21:43:33 +0000
Manifest this update: Thu 24 Sep 2026 21:38:33 +0000
Manifest next update: Sat 26 Sep 2026 00:06:33 +0000
Files and hashes: 1: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: FdF3FIc9GYkDVdS1/PsBjJ2XS8K0DVoK0Q8dmW2upPA=)
2: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: XTrRc7BvhR1v4bi5yv/rUwu+Cr89uiOaZylHW/FtRgY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e2:31:6b:ac:6b:ff:1e:a0:a5:28:1e:c2:5e:2e:b8:c4:e9:46:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Sep 24 21:38:33 2026 GMT
Not After : Sep 26 00:06:33 2026 GMT
Subject: CN=28EBD77B388E0394205503B79244A072285056AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:c6:20:ee:da:5d:96:93:a4:4a:48:59:14:
d4:cf:39:3c:fe:19:d3:ef:0c:6c:7e:60:2f:38:e3:
12:29:fd:7a:a9:f3:c4:99:e4:dc:e2:a8:f5:92:c6:
87:7c:c4:85:0c:d4:8d:43:20:4c:43:92:3b:98:4a:
ff:63:85:26:f1:ae:a8:b5:c9:21:d2:dd:d3:25:d3:
0c:65:eb:bb:0b:a5:84:7d:9a:15:fe:fe:aa:b4:9e:
88:ed:fc:19:c6:8b:c3:95:cf:06:e8:91:93:3e:ff:
5b:de:ff:51:d4:8f:37:67:95:ae:ce:b3:db:0d:3c:
35:d6:81:dc:b2:3a:e1:53:41:a9:da:7a:a9:ca:f3:
d0:ed:2a:45:27:a1:dc:1d:50:07:8f:8d:75:43:8e:
b8:47:f3:2f:85:dc:82:d9:97:44:6c:7c:33:06:bb:
44:43:b6:39:c7:90:2c:7a:dc:b4:b8:79:c0:7b:e4:
17:ee:25:46:0e:d4:2b:69:46:3a:60:08:be:cc:96:
db:05:50:e9:3b:6e:91:c3:23:82:9a:08:bb:57:5b:
12:55:5b:6b:77:1f:d3:3c:13:e4:55:30:71:85:37:
cc:2b:9c:a9:44:9a:54:82:f7:7d:2e:22:e2:23:48:
5c:6a:ce:64:22:ad:64:b3:e7:f8:ad:4b:6a:50:c4:
a3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EB:D7:7B:38:8E:03:94:20:55:03:B7:92:44:A0:72:28:50:56:AC
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:92:cc:78:9d:1e:64:c5:ca:0e:d4:0d:82:ff:70:73:5a:6d:
b5:59:d5:11:2a:fc:1c:9a:66:9f:29:b3:16:14:2f:34:84:3d:
e4:ef:2d:92:77:b7:a3:76:59:ba:bd:79:c7:1a:56:60:7c:2e:
2b:3b:85:0e:7b:eb:20:04:9e:ef:db:4c:1b:1c:40:f0:83:4d:
e1:22:8b:24:05:16:b1:6d:b2:54:5e:04:a3:69:a1:6f:d9:4e:
c8:dc:8d:9c:0f:d5:29:40:70:8d:c5:ed:70:cf:55:4d:c4:05:
f7:33:e9:20:97:2d:21:98:d2:b3:c5:ef:78:73:1a:90:6c:0a:
bf:83:be:3d:c9:f6:06:9e:25:a7:31:25:e2:56:78:08:8d:bd:
18:f9:d0:3a:c8:5d:15:b8:74:86:99:0d:3e:f4:ec:d8:f8:37:
99:22:00:49:58:a9:30:c1:3a:58:97:9a:90:9b:f0:95:44:02:
cb:c3:6c:f0:18:c3:89:22:c4:ae:17:00:b2:22:b3:c4:7b:c5:
ed:dd:8c:c1:9b:72:23:ae:23:1d:07:48:9d:ad:e1:af:e2:5a:
41:4f:3b:f6:12:3c:9d:af:fc:95:23:ee:04:a0:10:fc:39:9f:
ae:45:e1:b7:1a:94:4d:ab:31:18:c4:2e:a0:88:00:67:a6:d7:
52:28:1a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:58:43 2026 by rpki-client