Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: TYvB3hZyoJzVu86lDP9KxywlvfA4yyIEtFGz1UI3aiw=
Subject key identifier: DF:85:A7:17:91:04:A0:D3:31:1C:22:5A:BF:33:64:86:07:4F:D5:3F
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 39BDFB9159734DA59C57840CEE722A17D1535C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 0379
Signing time: Tue 28 Jul 2026 14:03:32 +0000
Manifest this update: Tue 28 Jul 2026 13:58:32 +0000
Manifest next update: Wed 29 Jul 2026 14:23:32 +0000
Files and hashes: 1: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
2: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: 9fiF2r09UTpI6HC6Ps7cqrQ1YuUdF1OMP/ZZUSSu6lQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:bd:fb:91:59:73:4d:a5:9c:57:84:0c:ee:72:2a:17:d1:53:5c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Jul 28 13:58:32 2026 GMT
Not After : Jul 29 14:23:32 2026 GMT
Subject: CN=DF85A7179104A0D3311C225ABF336486074FD53F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:e9:ef:0e:d2:d7:30:2d:b7:c6:f9:0f:37:
5d:45:d0:fb:bd:4c:85:15:53:40:63:aa:25:00:b5:
56:ab:2f:4c:96:d3:8d:7c:31:09:23:81:5b:24:25:
ff:53:6a:46:48:1e:b5:17:0a:64:d3:a1:9d:4b:25:
1e:be:db:80:40:1e:ce:66:dd:0e:e2:d0:55:8b:74:
80:f0:41:4f:fd:81:66:5a:33:6a:a5:0f:de:38:a8:
a1:a0:e3:43:d7:82:36:c4:d0:3b:38:71:af:eb:1e:
3a:aa:4c:a0:9a:5d:b0:10:02:39:aa:76:80:72:b9:
80:b1:f2:99:ac:fb:73:ae:3e:c0:40:49:75:34:5c:
79:93:34:df:13:d1:c6:2a:91:1e:87:7f:85:e5:55:
f8:85:e7:49:2f:8d:48:d5:7a:f9:31:95:9f:5f:ee:
bf:ee:2e:bc:8b:11:de:15:37:1b:57:e3:a9:f9:06:
ce:9a:74:33:52:89:be:b6:38:24:d8:63:79:af:97:
71:fd:1a:b7:32:60:03:f7:da:d1:65:57:9f:9a:b9:
57:a1:a8:32:52:6a:a4:77:05:78:ab:70:c1:e9:6e:
75:39:a2:1c:04:d1:7f:0d:6d:6d:b6:4c:4c:f7:00:
67:ea:cc:a6:fb:c3:d9:d8:ea:92:15:be:6f:13:b7:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:85:A7:17:91:04:A0:D3:31:1C:22:5A:BF:33:64:86:07:4F:D5:3F
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:27:3e:d4:ee:20:17:15:ea:7d:36:87:f8:58:ac:60:89:f5:
f5:1c:ee:5c:d8:11:7e:db:f5:89:8c:4f:3e:74:51:9f:93:54:
96:9e:3b:bf:fd:f5:e1:e3:f9:36:02:3e:44:7a:e6:8b:57:70:
38:1a:73:15:06:ca:89:10:c2:98:5f:fb:6c:bf:d4:0a:ce:00:
4a:95:4a:43:79:c3:a2:39:db:5c:1c:91:1f:7c:a3:2e:81:c5:
4d:3a:73:c8:05:9e:13:a7:fa:eb:29:e7:07:f0:e2:31:9f:6d:
f0:9e:32:e3:41:03:69:83:0c:33:95:7b:9a:28:54:da:de:2a:
ba:24:4d:2e:f0:48:a7:0a:c1:33:54:ba:dd:9d:40:0d:df:d9:
df:38:a8:84:73:4c:82:0a:7a:80:80:93:3d:b1:40:d1:7b:3a:
99:7d:64:69:7f:45:00:32:c2:62:60:0f:a3:97:51:20:e6:68:
e3:50:97:9f:59:76:36:dc:78:1d:5f:0e:3b:48:99:af:fc:ce:
3e:a0:e2:f3:e4:77:aa:91:d9:3a:6d:7b:31:da:69:6e:b0:9c:
7d:85:a5:d3:64:d5:23:a5:14:62:ce:86:e3:81:4e:c4:11:50:
48:73:90:ae:e9:b0:46:fd:0e:5c:2e:66:59:27:37:c9:b6:62:
4a:a8:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:03:03 2026 by rpki-client