Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: 04oISG8qXLlAFjzDR6jWuLI+B/mCHPiTqeZQnF2Wgzg=
Subject key identifier: 4F:6A:06:96:59:D1:CD:44:6F:87:6D:A3:3A:D1:13:C3:6B:FE:C0:A3
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 2C95ECA63BDE7213DE1E65A90B3C88DE56AE03C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 02AE
Signing time: Sun 01 Mar 2026 02:53:30 +0000
Manifest this update: Sun 01 Mar 2026 02:48:30 +0000
Manifest next update: Mon 02 Mar 2026 02:56:30 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: RT5l8mOYBDNkvBiIIjVHUFHj9ECwHW1O+QYEjETgAJc=)
2: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 02:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:95:ec:a6:3b:de:72:13:de:1e:65:a9:0b:3c:88:de:56:ae:03:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Mar 1 02:48:30 2026 GMT
Not After : Mar 2 02:56:30 2026 GMT
Subject: CN=4F6A069659D1CD446F876DA33AD113C36BFEC0A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:30:a8:a1:3a:49:3e:22:a2:df:9f:f3:2b:
ab:08:aa:44:3f:1b:f4:6b:3f:07:09:53:a0:cc:6c:
c3:96:b6:62:22:df:f5:16:9e:94:80:93:04:9f:42:
80:94:04:19:0f:ae:1c:b7:d9:5d:66:b9:15:53:13:
8d:43:29:37:89:ab:38:4c:da:29:08:29:dd:f2:4d:
41:ad:45:41:5c:d0:0b:a5:05:89:49:7a:88:19:e7:
9c:98:c7:14:38:e3:ba:29:b2:2e:3e:aa:65:2e:56:
f3:22:7a:c8:49:7d:b1:cc:91:bf:01:0a:a9:30:1d:
02:6c:ee:1b:b6:55:f6:30:03:47:de:cb:65:97:7c:
86:28:0d:8d:b4:b6:58:9c:a7:0b:24:98:2c:c1:fc:
69:53:de:9a:57:82:33:70:68:3c:a9:29:a4:b5:80:
38:d9:5f:96:ac:bc:0a:f3:d4:d6:a2:9b:fb:03:0f:
c6:3b:6d:4e:80:6f:5d:0d:e6:59:38:02:e3:07:1f:
b5:10:85:56:f5:be:44:ab:72:de:10:77:4d:0b:dc:
de:04:8e:6f:5b:17:77:60:ff:d5:6c:e6:b1:fa:6a:
fc:c3:d7:f8:db:25:59:6e:b3:31:80:4d:9a:84:94:
d8:75:a9:ce:b4:d3:e0:84:2a:31:19:ee:87:c2:c0:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6A:06:96:59:D1:CD:44:6F:87:6D:A3:3A:D1:13:C3:6B:FE:C0:A3
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7a:fb:18:26:af:c3:f4:a9:83:e2:1e:21:b8:e0:3b:54:34:
8d:ed:96:1d:81:ef:34:25:ae:00:f1:39:fc:ca:45:42:dd:c1:
20:d8:f8:7f:01:c4:ff:52:e5:0b:9d:d4:4a:e6:37:81:49:96:
40:88:9a:99:68:1e:a5:34:ba:ea:2b:ab:39:f9:b4:ff:5f:a4:
9d:23:4e:fe:38:3e:79:1f:f2:93:00:5f:75:fe:07:fd:5c:bd:
a2:5c:f2:a8:51:24:3a:b8:f4:f0:aa:f3:b3:8e:be:25:6e:83:
cb:04:46:d4:28:6c:6b:63:5d:9b:a6:4f:d9:70:77:a0:18:bc:
c9:b4:df:3d:57:b8:4b:33:1a:12:14:4c:67:4e:c1:a9:53:3d:
70:f5:34:78:b3:2f:e0:30:fc:d6:25:d6:9e:37:44:92:3e:2a:
24:a9:a1:69:b3:bf:37:61:5d:a1:c2:d3:55:75:74:4c:2d:a5:
9f:e0:60:af:dc:84:6c:4a:f9:91:3c:60:09:fe:8d:0f:0a:81:
58:b9:f2:69:82:bc:bb:d6:4d:16:3b:97:9b:3a:5a:08:a1:9d:
56:e8:9f:02:78:e8:56:1f:01:de:3f:8b:dc:fb:44:6b:12:de:
32:41:2a:31:ac:c6:20:30:7c:2b:f8:31:bb:22:fb:d2:d2:a0:
65:a2:06:18
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULJXspjvechPeHmWpCzyI3lauA8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGNkYjMyZDYyNTNmYmFmZTA3Mzc4YTFhMzA5NDZhNzNh
ZWM3ZTNkNDAeFw0yNjAzMDEwMjQ4MzBaFw0yNjAzMDIwMjU2MzBaMDMxMTAvBgNV
BAMTKDRGNkEwNjk2NTlEMUNENDQ2Rjg3NkRBMzNBRDExM0MzNkJGRUMwQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ijCooTpJPiKi35/zK6sIqkQ/
G/RrPwcJU6DMbMOWtmIi3/UWnpSAkwSfQoCUBBkPrhy32V1muRVTE41DKTeJqzhM
2ikIKd3yTUGtRUFc0AulBYlJeogZ55yYxxQ447opsi4+qmUuVvMieshJfbHMkb8B
CqkwHQJs7hu2VfYwA0fey2WXfIYoDY20tlicpwskmCzB/GlT3ppXgjNwaDypKaS1
gDjZX5asvArz1Naim/sDD8Y7bU6Ab10N5lk4AuMHH7UQhVb1vkSrct4Qd00L3N4E
jm9bF3dg/9Vs5rH6avzD1/jbJVluszGATZqElNh1qc600+CEKjEZ7ofCwNhfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUT2oGllnRzURvh22jOtETw2v+wKMwHwYDVR0j
BBgwFoAUDNsy1iU/uv4HN4oaMJRqc67H49QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2
NDgwLzAvMENEQjMyRDYyNTNGQkFGRTA3Mzc4QTFBMzA5NDZBNzNBRUM3RTNENC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ROc3kxaVVfdXY0SE40b2FNSlJxYzY3
SDQ5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01
ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMC8wQ0RCMzJENjI1M0ZCQUZFMDcz
NzhBMUEzMDk0NkE3M0FFQzdFM0Q0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3r7GCavw/Spg+IeIbjg
O1Q0je2WHYHvNCWuAPE5/MpFQt3BINj4fwHE/1LlC53USuY3gUmWQIiamWgepTS6
6iurOfm0/1+knSNO/jg+eR/ykwBfdf4H/Vy9olzyqFEkOrj08Krzs46+JW6DywRG
1Chsa2Ndm6ZP2XB3oBi8ybTfPVe4SzMaEhRMZ07BqVM9cPU0eLMv4DD81iXWnjdE
kj4qJKmhabO/N2FdocLTVXV0TC2ln+Bgr9yEbEr5kTxgCf6NDwqBWLnyaYK8u9ZN
FjuXmzpaCKGdVuifAnjoVh8B3j+L3PtEaxLeMkEqMazGIDB8K/gxuyL70tKgZaIG
GA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:22:03 2026 by rpki-client