Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: sbwDUeflkVCPB3rvABXIZRNWWXkwrrLlFIE4sNicizQ=
Subject key identifier: 71:FC:D7:67:AE:EA:93:45:84:60:92:66:29:3F:A2:72:02:6A:74:6D
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 104DFFCCA3100EC8A37D48C3C662F00188186717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 02ED
Signing time: Fri 17 Apr 2026 06:47:04 +0000
Manifest this update: Fri 17 Apr 2026 06:42:04 +0000
Manifest next update: Sat 18 Apr 2026 07:09:04 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: 6DoI6OMbM742+hhCdk72ck5RlkzoR2D9yJ1TMhZmgHA=)
2: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:4d:ff:cc:a3:10:0e:c8:a3:7d:48:c3:c6:62:f0:01:88:18:67:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Apr 17 06:42:04 2026 GMT
Not After : Apr 18 07:09:04 2026 GMT
Subject: CN=71FCD767AEEA934584609266293FA272026A746D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:92:b0:bc:25:18:92:4b:2e:ac:ca:d3:44:4f:
07:1d:6d:cf:c7:a7:4f:2f:eb:49:1f:ee:cc:cb:a5:
fe:53:ce:0a:3d:8c:fc:fd:22:dd:99:b3:d3:67:ac:
0d:ac:e9:1c:4c:c8:19:b4:a0:70:57:13:3c:5f:9c:
e9:6c:ed:42:2d:b9:2f:b2:36:da:d2:93:86:31:24:
41:a9:be:cf:99:fe:1d:be:ac:d3:c3:10:ab:3c:e7:
25:15:77:48:e8:e3:be:b9:c5:ba:ea:dc:c7:56:da:
d1:59:da:f2:5a:93:74:25:aa:73:3b:2d:79:2c:b9:
0c:44:3a:c1:b5:76:dd:80:ec:0d:68:52:59:d5:0a:
3a:3b:7a:e5:4b:70:92:cc:26:cf:b4:f4:aa:dc:42:
98:f3:46:c7:95:0d:ff:28:fd:63:b6:59:a3:d4:07:
c2:86:a6:26:b7:ee:b7:bf:b1:39:a2:95:1b:17:7c:
74:b0:d0:05:fe:7f:19:ec:74:b3:9f:d4:5e:df:c0:
19:9f:af:ef:82:45:e8:51:7b:fa:a6:64:c6:c0:46:
41:81:10:0a:08:72:2e:47:aa:a3:ed:44:c7:23:5a:
7a:ab:40:0a:a3:5a:b8:46:95:ec:52:76:31:c0:6b:
b2:f8:0e:de:a2:fd:01:90:b8:40:c0:51:51:b5:9a:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FC:D7:67:AE:EA:93:45:84:60:92:66:29:3F:A2:72:02:6A:74:6D
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:48:3b:7d:69:c0:fe:3e:78:a6:be:89:5a:ae:6d:5b:d2:50:
a0:1d:6f:1e:af:a6:25:e2:d4:59:1f:f9:19:c6:01:3d:65:35:
1f:9a:72:b1:0f:6e:f5:e9:b2:f0:4a:02:91:f2:8d:b3:e8:1a:
c2:24:47:32:aa:ea:c2:09:49:81:b6:b8:fe:54:49:b4:cd:1e:
ca:a3:6c:da:75:87:76:ca:a2:aa:47:12:0f:9e:d4:e0:8d:d1:
4d:26:68:9f:6b:ef:a2:ad:34:0e:f4:af:2f:3d:8f:61:86:f5:
98:57:7e:a4:fd:67:d1:2e:89:52:d3:2c:dd:aa:53:04:63:fa:
66:3f:55:de:97:f3:47:46:41:0f:b5:05:3d:c9:7d:fa:19:c7:
8c:27:2d:b1:6a:2e:57:52:d2:33:33:11:d4:72:de:eb:64:5a:
da:7e:7c:09:07:49:b9:1d:8a:f5:0a:44:d8:2c:d2:05:a5:fe:
8e:2e:64:66:8d:63:cb:fc:56:1c:4d:01:56:cb:e1:0f:6f:46:
a4:35:f1:f0:68:c0:d8:bf:d3:b9:8e:8e:09:85:32:1d:63:0b:
1e:3e:be:18:a0:24:dc:ae:4c:50:54:e2:14:c8:c3:9f:29:b7:
ca:84:49:4d:6d:9e:e7:cc:99:b9:94:80:39:c9:bc:db:2c:6d:
45:cd:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:42 2026 by rpki-client