Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: q7DUQ0YBvF+CYeb0LkaldI9VgSHDY+Fn2lZVZOGPSuM=
Subject key identifier: A7:46:14:59:BD:DF:53:B6:7B:73:19:BB:5C:94:D9:83:6B:07:33:80
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 673907AFC9C76F440744FC576C75CD1E9B564F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 033B
Signing time: Fri 12 Jun 2026 13:54:10 +0000
Manifest this update: Fri 12 Jun 2026 13:49:10 +0000
Manifest next update: Sat 13 Jun 2026 14:29:10 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: DniB3WODYvqc+m06gZ58x9OJSjGTKKdzvV/V4idC96A=)
2: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 14:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:39:07:af:c9:c7:6f:44:07:44:fc:57:6c:75:cd:1e:9b:56:4f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Jun 12 13:49:10 2026 GMT
Not After : Jun 13 14:29:10 2026 GMT
Subject: CN=A7461459BDDF53B67B7319BB5C94D9836B073380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f4:81:5f:13:a0:19:32:76:f4:70:b6:18:b9:
3c:dd:d6:e2:36:50:74:4f:43:9a:42:6c:1f:6b:4c:
94:2c:8a:a3:57:dc:8a:71:a3:4b:2d:32:01:1b:bf:
b7:ae:1b:15:a7:1a:09:5f:68:92:d9:06:c7:a7:21:
ce:78:a8:89:0c:41:89:7c:7b:a4:a7:83:3f:b9:70:
d2:90:88:9d:5d:dc:e5:a0:3c:8c:cd:b8:82:a2:ed:
ca:72:8d:0c:6b:33:95:53:89:0c:05:ef:57:61:a4:
a8:b9:fd:52:ae:4d:98:1c:1d:a3:ed:3e:0a:b4:bf:
50:e5:38:8a:d2:65:b4:da:c0:2c:fe:f6:1d:8c:ba:
35:66:60:c8:ba:ee:88:fe:0b:9d:b5:fc:ef:1a:37:
75:ec:b2:0a:6c:cb:3c:0f:8c:28:bd:6a:70:dc:bf:
e2:d3:5c:29:df:45:85:e2:f4:22:30:46:51:e9:fb:
28:07:9f:9e:f8:ce:d3:5a:77:de:d2:45:f8:c6:43:
8b:ff:e4:53:dc:fe:1c:8b:43:9a:8c:d5:b9:24:26:
15:39:18:7b:22:6a:f9:38:f5:ef:23:5d:bd:26:f5:
f6:0a:36:53:ac:f1:fe:ea:65:28:67:9d:fd:9f:b5:
3e:cd:df:1c:ee:8a:26:f5:a1:f4:99:70:37:be:b4:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:46:14:59:BD:DF:53:B6:7B:73:19:BB:5C:94:D9:83:6B:07:33:80
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:32:09:94:57:7f:00:47:81:f4:d7:2b:c9:cc:4e:c4:bd:69:
52:e0:9e:3d:15:98:6a:29:71:13:ed:46:b8:a7:34:ef:87:50:
3b:54:20:ad:a1:91:e6:2e:c1:21:75:d4:5e:cb:53:ad:f5:27:
07:22:47:41:bb:84:90:5a:a6:32:e4:20:e0:44:a0:2f:e4:e4:
a6:89:6a:05:27:04:fd:d5:89:17:e9:0c:c7:bd:fb:80:1a:2e:
f8:28:66:96:d3:38:c3:c8:b7:52:58:fa:5f:ba:c7:8c:50:32:
d4:a1:06:8b:7f:cb:1f:f5:63:21:17:e6:09:2a:16:40:7b:02:
5f:5e:36:d6:19:1e:3c:6c:5e:60:25:cb:36:48:d5:e6:9b:3f:
05:21:a1:a0:9c:cf:8d:a4:81:6f:c1:53:cd:7d:b9:91:3f:33:
a2:7d:93:69:43:b9:ec:ec:72:2d:dc:13:45:54:41:ab:f1:73:
5a:a9:3a:64:fc:64:dd:43:f1:10:41:21:d5:7d:92:1e:bd:3b:
ad:57:cd:96:16:36:4a:0e:98:52:34:10:a3:13:9d:a1:23:59:
b0:fb:21:19:d8:08:7b:67:51:a5:c2:65:be:82:00:15:fa:dc:
bb:7f:56:47:41:c5:29:51:4f:69:5f:10:d1:a5:20:90:81:f7:
5e:06:3d:f3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUZzkHr8nHb0QHRPxXbHXNHptWTygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGNkYjMyZDYyNTNmYmFmZTA3Mzc4YTFhMzA5NDZhNzNh
ZWM3ZTNkNDAeFw0yNjA2MTIxMzQ5MTBaFw0yNjA2MTMxNDI5MTBaMDMxMTAvBgNV
BAMTKEE3NDYxNDU5QkRERjUzQjY3QjczMTlCQjVDOTREOTgzNkIwNzMzODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx9IFfE6AZMnb0cLYYuTzd1uI2
UHRPQ5pCbB9rTJQsiqNX3Ipxo0stMgEbv7euGxWnGglfaJLZBsenIc54qIkMQYl8
e6Sngz+5cNKQiJ1d3OWgPIzNuIKi7cpyjQxrM5VTiQwF71dhpKi5/VKuTZgcHaPt
Pgq0v1DlOIrSZbTawCz+9h2MujVmYMi67oj+C521/O8aN3XssgpsyzwPjCi9anDc
v+LTXCnfRYXi9CIwRlHp+ygHn574ztNad97SRfjGQ4v/5FPc/hyLQ5qM1bkkJhU5
GHsiavk49e8jXb0m9fYKNlOs8f7qZShnnf2ftT7N3xzuiib1ofSZcDe+tGDvAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUp0YUWb3fU7Z7cxm7XJTZg2sHM4AwHwYDVR0j
BBgwFoAUDNsy1iU/uv4HN4oaMJRqc67H49QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2
NDgwLzAvMENEQjMyRDYyNTNGQkFGRTA3Mzc4QTFBMzA5NDZBNzNBRUM3RTNENC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ROc3kxaVVfdXY0SE40b2FNSlJxYzY3
SDQ5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01
ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMC8wQ0RCMzJENjI1M0ZCQUZFMDcz
NzhBMUEzMDk0NkE3M0FFQzdFM0Q0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzIJlFd/AEeB9NcrycxO
xL1pUuCePRWYailxE+1GuKc074dQO1QgraGR5i7BIXXUXstTrfUnByJHQbuEkFqm
MuQg4ESgL+TkpolqBScE/dWJF+kMx737gBou+ChmltM4w8i3Ulj6X7rHjFAy1KEG
i3/LH/VjIRfmCSoWQHsCX1421hkePGxeYCXLNkjV5ps/BSGhoJzPjaSBb8FTzX25
kT8zon2TaUO57OxyLdwTRVRBq/FzWqk6ZPxk3UPxEEEh1X2SHr07rVfNlhY2Sg6Y
UjQQoxOdoSNZsPshGdgIe2dRpcJlvoIAFfrcu39WR0HFKVFPaV8Q0aUgkIH3XgY9
8w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:24 2026 by rpki-client