Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File: 193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier: gCs9QXxLu5Xc88cdCgMyIB0/VHyCNV1Mj6KSDLJ19d4=
Subject key identifier: 9E:B3:06:40:64:9A:77:D5:0F:28:7B:6B:7A:66:5D:FB:98:7E:A9:79
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer: /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial: 0B58874843D68393198CA3C55B767F66F40D7D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number: 02FE
Signing time: Sun 01 Mar 2026 10:05:48 +0000
Manifest this update: Sun 01 Mar 2026 10:00:48 +0000
Manifest next update: Mon 02 Mar 2026 11:29:48 +0000
Files and hashes: 1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: Lr23gFgLKs13s1UmtoE0naEOvvK3Tyla4JB6NiOxruk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 11:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:58:87:48:43:d6:83:93:19:8c:a3:c5:5b:76:7f:66:f4:0d:7d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
Validity
Not Before: Mar 1 10:00:48 2026 GMT
Not After : Mar 2 11:29:48 2026 GMT
Subject: CN=9EB30640649A77D50F287B6B7A665DFB987EA979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:e4:fe:45:74:26:7b:73:48:5a:ac:cc:05:
b1:8c:a7:1f:fc:51:9f:fe:54:eb:96:93:f3:80:e0:
08:59:db:c0:5b:d3:87:b9:d0:84:a6:a6:59:46:46:
35:64:b9:45:1c:a5:71:78:89:5e:62:5d:7f:61:5d:
47:39:86:81:cf:55:ea:97:26:3b:82:80:94:e3:ab:
05:15:61:61:a8:62:f4:a5:6a:e7:fa:0e:f8:75:c6:
19:77:52:00:00:e0:93:2b:88:ff:e2:5d:55:da:81:
52:76:2a:5d:6a:bc:be:50:4d:27:27:79:96:c3:53:
69:ec:97:af:cc:20:08:e8:24:e6:98:3c:3d:12:60:
3b:d9:81:2a:2a:33:17:05:dc:81:41:54:5f:42:8e:
89:c2:40:d0:f8:bc:60:92:17:50:ed:27:10:7c:e6:
af:63:01:53:53:8e:74:a9:55:ed:f4:c2:f1:e3:2a:
11:a7:63:6f:12:ae:00:2d:a2:87:f2:dc:8d:ae:fc:
93:ee:f2:3b:41:40:5b:1d:33:1d:e3:ed:30:9d:4b:
1b:e8:40:d9:1f:d6:93:6a:5b:4f:20:44:1a:97:ab:
26:bb:2d:c3:f1:ce:7a:77:66:e4:fd:36:42:9c:2e:
63:af:f6:e1:17:d2:8b:c1:15:e1:9d:11:f9:04:18:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B3:06:40:64:9A:77:D5:0F:28:7B:6B:7A:66:5D:FB:98:7E:A9:79
X509v3 Authority Key Identifier:
keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:04:8c:03:ed:ea:0a:5d:e8:ba:c2:65:ed:6a:12:1e:6c:77:
24:a0:aa:e0:af:2f:cb:d9:8e:6b:9e:b7:f0:b2:51:ad:0b:3d:
e0:db:98:27:09:c3:dc:ec:37:fe:0f:5f:e8:29:6e:da:0d:16:
26:64:8f:9a:00:e6:b2:b3:4c:59:e7:45:fb:77:b3:46:78:25:
dc:68:6b:10:6b:3d:5e:ca:83:65:89:dc:34:a5:5b:44:ca:20:
ba:57:56:e6:a5:48:72:30:2f:0b:a0:54:00:0b:c9:6e:1b:38:
4e:9e:cf:0f:aa:38:67:3a:64:60:1c:05:b6:3e:ea:5d:60:ea:
3b:23:ad:47:f1:04:14:2f:e7:3c:ed:35:d8:28:43:32:16:04:
bd:82:5b:ec:4d:58:b4:34:e3:89:3d:d8:35:f8:d5:0c:ad:f8:
da:44:74:df:d6:d8:92:b7:4f:16:1c:93:01:52:28:96:16:e1:
d2:1f:17:75:f4:5a:ed:2e:89:e6:c5:77:93:13:bc:14:8a:f2:
88:a9:5b:31:aa:5f:04:70:9b:57:20:42:b3:e8:92:5f:96:cd:
88:f0:41:2b:f9:ce:aa:d9:cd:c7:c3:5d:52:b3:b1:b0:c7:a3:
85:f4:fa:05:2c:eb:fe:fa:2d:4b:89:1e:25:13:8b:34:ff:7e:
29:d5:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:25 2026 by rpki-client