Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
File: D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft (raw, json)
Hash identifier: z+x3GBCpsV57Fqr7Lg22w4HbIDujTrb2UZfOV1mBqmk=
Subject key identifier: E5:2A:B2:25:FB:9E:B3:A8:DC:F0:10:F1:55:BF:00:67:E9:2B:18:9C
Authority key identifier: D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
Certificate issuer: /CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Certificate serial: 5454AABC55A0BFA2437CF13B6A619F9A3679BDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
Manifest number: 01E5
Signing time: Sun 20 Sep 2026 10:01:28 +0000
Manifest this update: Sun 20 Sep 2026 09:56:28 +0000
Manifest next update: Mon 21 Sep 2026 10:58:28 +0000
Files and hashes: 1: D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl (hash: LkH2gSnsjGyqbd3w5OUQqwaCCfEStTeXNYXTtBztnbk=)
2: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer (hash: XTrRc7BvhR1v4bi5yv/rUwu+Cr89uiOaZylHW/FtRgY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:54:aa:bc:55:a0:bf:a2:43:7c:f1:3b:6a:61:9f:9a:36:79:bd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a516b50426202a424f0ebfcb7d2bd4f744f964
Validity
Not Before: Sep 20 09:56:28 2026 GMT
Not After : Sep 21 10:58:28 2026 GMT
Subject: CN=E52AB225FB9EB3A8DCF010F155BF0067E92B189C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:d7:f7:7d:03:de:17:0a:57:ac:60:55:99:
e1:17:02:30:67:80:2a:c7:52:3a:65:6c:bc:a5:59:
9e:be:a3:99:32:3e:16:da:e0:28:e6:98:1b:f4:94:
fb:c4:2e:77:30:30:81:e3:a3:c6:60:48:e5:87:2f:
e7:cd:f2:87:a6:db:6f:d0:73:05:28:01:23:2a:62:
55:18:7c:70:b3:6c:9b:5d:9a:ea:95:b6:f8:98:34:
37:45:90:ed:f0:cf:76:6b:da:24:e3:b3:0d:60:52:
a4:f5:df:c8:0c:e3:0b:b2:01:f3:74:a2:4c:3d:58:
99:1b:84:c9:7c:c1:88:77:62:8d:95:a8:23:ed:1d:
07:dc:5d:15:16:81:c2:b7:eb:1d:3f:63:1c:2e:03:
3f:29:b8:d7:68:6e:b3:4a:2d:c9:23:e7:42:02:19:
0b:75:c2:1c:69:e8:da:5b:81:c1:91:e2:1e:7d:79:
66:c1:d7:85:45:c0:c9:c8:01:40:31:58:6d:3e:45:
dd:5c:bb:be:db:ff:be:bd:87:d2:20:84:bd:40:fb:
ce:f5:fd:6e:79:ea:d0:84:85:62:db:33:e9:b9:45:
34:93:14:f1:5c:85:39:19:a5:24:1d:97:a4:ea:c1:
df:a6:94:2e:80:50:a3:0f:32:ac:7f:44:03:62:c6:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2A:B2:25:FB:9E:B3:A8:DC:F0:10:F1:55:BF:00:67:E9:2B:18:9C
X509v3 Authority Key Identifier:
keyid:D0:A5:16:B5:04:26:20:2A:42:4F:0E:BF:CB:7D:2B:D4:F7:44:F9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c0:ee:80:45:ac:af:8d:9d:6d:a3:43:a8:75:96:d2:49:b3:
ba:7e:46:26:92:9f:8e:7c:40:2c:fa:bc:45:50:7d:02:de:78:
f1:be:10:98:52:45:23:bf:7e:db:83:4f:eb:1b:62:d9:f9:2e:
71:9f:82:8d:83:8d:dc:e4:5f:ba:36:d0:7f:af:51:97:e1:f1:
90:b0:1e:e5:bc:96:ed:d1:98:d5:ba:59:d7:a2:26:33:00:a4:
72:89:03:10:c8:98:1d:b7:11:74:66:4d:07:9b:7b:13:86:69:
06:30:ab:ab:13:6b:c3:67:48:11:6c:76:e1:25:8c:c8:9d:26:
ea:3f:ce:e6:05:e0:7a:62:15:bb:89:8e:fa:d3:a0:c0:2e:19:
d1:10:e4:97:fa:f0:f3:f2:84:b8:dd:80:7f:26:f4:21:42:89:
ea:5b:43:6c:7d:b6:2f:03:b4:e4:6f:7c:a1:e9:4a:da:fc:15:
65:ba:9d:9f:96:bf:71:34:60:6c:11:7b:e4:ad:12:e7:d0:82:
57:38:9f:d1:a5:1b:0e:f8:3b:ae:7b:23:df:27:1a:3c:bf:57:
b3:81:33:53:c1:8e:de:fb:1d:21:41:b7:60:c7:96:90:93:37:
6d:c6:70:f5:54:86:a0:3d:dd:91:e4:45:29:fd:02:9b:03:1d:
70:d6:3a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:31:59 2026 by rpki-client