Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: TOfM9Gm1/Y6eWOonqXyH99mtx6jKRZE3vyCSJIerdS8=
Subject key identifier: AF:F5:2C:0A:D5:74:BE:3C:15:64:85:C5:67:1F:B2:8F:53:68:AA:91
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 744142721B687BDFD2C4A99202F5383C1ECAE332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 040C
Signing time: Sun 15 Nov 2026 11:39:45 +0000
Manifest this update: Sun 15 Nov 2026 11:34:45 +0000
Manifest next update: Mon 16 Nov 2026 13:20:45 +0000
Files and hashes: 1: AS215084.asa (hash: Reax2PYd0y/98RgbB3IvlW1/jEUJ+EA7ob2LxwUCjLU=)
2: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: qqgEZRsxn3YJVgtvIPbzSt+DoSaPx5e0AZd+avExhCg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:41:42:72:1b:68:7b:df:d2:c4:a9:92:02:f5:38:3c:1e:ca:e3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Nov 15 11:34:45 2026 GMT
Not After : Nov 16 13:20:45 2026 GMT
Subject: CN=AFF52C0AD574BE3C156485C5671FB28F5368AA91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:aa:33:0d:30:40:ac:73:8f:47:43:cd:cf:
c2:65:5d:f0:47:11:c9:21:16:19:1f:00:73:64:61:
60:45:08:c2:7f:2c:8d:f4:79:d4:22:25:34:27:fd:
2c:11:4e:0b:ae:93:2f:65:97:91:55:d6:c7:08:37:
dc:9a:bc:8c:de:d6:a8:04:3c:2b:78:67:3e:0d:f8:
24:c4:67:1a:1b:d1:30:31:ba:ad:81:8e:28:c9:26:
4d:5d:a5:be:46:b4:b6:10:65:7b:9f:cd:df:f7:4d:
d8:76:87:f5:18:0c:82:0e:ac:42:2f:04:ca:fb:43:
2e:bb:bb:e8:41:97:d4:33:88:d0:d6:b2:f2:e7:91:
ee:63:9b:81:63:7c:02:a4:a7:02:7b:2c:af:f8:6a:
0e:d1:58:c7:d5:03:af:51:58:73:e2:6b:5c:ba:9b:
7e:af:b9:ce:fc:b5:34:dd:56:4f:7c:63:b5:65:10:
fd:1e:1f:9d:89:26:33:21:84:af:fc:54:d8:fa:65:
90:5f:38:ff:0b:e7:44:b6:d0:63:71:87:23:60:c7:
a7:5e:2a:d4:6d:ee:83:12:fd:6a:d6:f9:36:5a:b8:
68:a2:28:ba:6d:ed:14:76:20:68:e3:90:48:5a:c2:
b8:48:b1:0c:e7:2c:ea:48:03:21:c1:4b:cb:80:12:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F5:2C:0A:D5:74:BE:3C:15:64:85:C5:67:1F:B2:8F:53:68:AA:91
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c8:73:72:33:8b:cc:eb:32:24:b6:d1:b1:0c:40:3e:fe:24:
15:98:ec:5d:ef:e0:ba:e1:44:30:60:3f:85:46:1b:a7:17:11:
ea:78:85:5c:5f:79:1a:30:52:24:68:11:43:c3:c1:e5:8c:12:
54:4c:02:68:46:e9:f7:1a:c6:89:6f:be:35:14:af:f8:56:0b:
6f:e4:f9:6a:95:45:97:87:20:6a:38:f4:29:7e:87:7d:06:4a:
cd:37:dd:d2:11:08:c3:aa:bd:8f:03:ae:79:3c:32:6c:9d:73:
61:98:62:dc:23:56:d4:c1:3f:9d:a6:98:68:ad:b3:03:f5:d5:
8e:d9:41:8e:ac:64:bf:9a:ff:0b:30:bc:f2:85:b4:9c:ab:e4:
0b:dc:d0:bb:e7:37:e2:b2:98:d9:bc:28:50:e7:60:9c:32:1b:
d2:54:04:5d:8a:6e:3d:21:15:60:5d:62:4f:42:3a:70:aa:2e:
72:21:da:5d:a6:49:2f:7a:8c:ed:50:14:4f:ac:d1:b3:57:c4:
60:a6:2e:ea:09:62:b9:bb:a3:f3:f5:ea:64:53:00:43:38:4e:
a5:7a:7f:88:cb:6a:0d:7c:14:35:0a:8d:73:30:60:47:66:f6:
3d:d2:71:45:3a:6d:76:10:40:b9:a8:a7:d5:ac:f3:cc:d5:08:
b2:69:44:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:33:57 2026 by rpki-client