Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: mgaLDy7fIv/q4gDl7I+sZB4AgrHTmxUoz6bMd17pIg4=
Subject key identifier: 3B:02:4F:40:DA:69:AC:9A:CF:C5:F6:2D:4E:75:2C:9D:53:CE:40:63
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 32E18C45D264BBB0A2EC887F4D59C9CE227F8437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 03C2
Signing time: Mon 21 Sep 2026 09:22:34 +0000
Manifest this update: Mon 21 Sep 2026 09:17:34 +0000
Manifest next update: Tue 22 Sep 2026 10:41:34 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: 9XCzhdGS8vXqskp9bT+6I4L4bjwUPiuFfOr+uZ8ADnA=)
2: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e1:8c:45:d2:64:bb:b0:a2:ec:88:7f:4d:59:c9:ce:22:7f:84:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Sep 21 09:17:34 2026 GMT
Not After : Sep 22 10:41:34 2026 GMT
Subject: CN=3B024F40DA69AC9ACFC5F62D4E752C9D53CE4063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:fd:9f:d4:0b:aa:1b:eb:f6:c3:19:c1:cf:fc:
dc:c1:3d:3d:81:f1:01:f1:c3:be:f4:19:08:c4:fe:
f4:d2:59:a2:ca:63:ea:b0:51:30:57:5f:ed:1b:4e:
53:57:88:98:ec:10:60:ca:3a:3c:1a:6b:8f:7a:58:
24:3d:c6:cd:56:e0:da:ac:82:a9:d9:a0:8c:c8:39:
31:51:44:47:32:1e:48:65:fa:57:54:1c:7d:88:d6:
2e:55:c5:40:fc:4e:a3:d9:8a:ea:00:3d:0f:31:4e:
39:0c:11:90:10:1e:18:a5:79:48:f5:42:ba:34:b4:
c1:16:b4:bc:58:56:3e:2a:bd:4b:14:38:21:1b:7f:
8f:e5:0f:ae:fa:1f:78:50:a7:28:2d:36:28:43:78:
b2:af:6c:c2:3d:61:ae:c0:36:c7:0c:06:cf:64:8d:
af:00:b0:5a:8a:5e:1c:8d:71:6e:f9:e2:48:26:b0:
8f:e5:62:8f:c1:da:f3:b0:0f:aa:01:a5:5e:b1:d7:
0d:81:2d:78:36:a2:ef:ec:7b:03:40:55:7b:f0:45:
c4:8d:6d:ef:37:0e:b7:09:9a:21:41:db:89:14:f7:
0e:e0:ed:6b:3e:8a:00:8e:34:cf:57:80:0d:76:98:
2e:88:f5:d3:a4:66:ea:7e:5d:ec:32:c8:35:db:1a:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:02:4F:40:DA:69:AC:9A:CF:C5:F6:2D:4E:75:2C:9D:53:CE:40:63
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e4:01:f1:d2:d9:7f:42:6d:ff:b9:c9:4b:9e:83:48:ee:ee:
ee:3c:f0:25:70:96:96:d1:e2:a8:2f:ed:91:32:c5:54:d1:1a:
a6:93:e1:49:4f:da:23:86:27:29:24:47:5d:ee:64:75:3b:4c:
36:1a:db:9b:f6:67:4b:9d:b9:0e:08:2e:83:04:c9:97:cc:e4:
4b:11:22:b3:32:fc:16:c6:c7:3c:53:a2:02:1c:3e:59:8f:89:
cc:e9:07:b5:e9:29:82:c5:b3:80:b7:59:62:e9:6b:0a:f0:f8:
42:82:03:d6:ae:c8:bc:f0:c8:fb:e2:2a:19:7d:c4:d8:cf:a8:
c3:81:ae:e6:fd:ec:1b:4c:d7:36:5b:ff:45:59:ef:00:56:e2:
49:f9:d2:ad:c0:6d:dd:39:dd:1c:66:68:70:e0:a5:0f:38:4c:
63:0b:95:7b:05:0b:34:b6:a9:ed:b6:48:fb:03:4e:79:c0:0c:
0e:61:e1:96:ac:30:c2:c5:a8:a8:a1:d5:fe:06:81:24:9c:4b:
ab:2e:c3:4d:f5:1e:0b:44:0e:e6:57:be:45:d5:19:2d:7e:86:
02:3f:2b:ac:2a:4f:f3:a0:01:4c:a2:90:51:da:cc:19:29:5d:
ea:47:f2:38:e7:fc:67:1e:f7:c9:25:e8:ab:e0:bf:ea:ed:2c:
55:f7:75:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:09:16 2026 by rpki-client