Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
File: A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft (raw, json)
Hash identifier: YgxvLsEAwPpZGgaICaZRUttp0WUjszy2PPMC+wRiPuY=
Subject key identifier: 4F:B6:9A:4D:CA:C9:78:55:32:B3:56:0E:60:48:CB:C7:99:C8:FC:20
Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
Certificate issuer: /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Certificate serial: 542510C62B68FA6C58FDB3BD0D4E4059EE96E1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
Manifest number: DF
Signing time: Sun 01 Mar 2026 10:29:47 +0000
Manifest this update: Sun 01 Mar 2026 10:24:47 +0000
Manifest next update: Mon 02 Mar 2026 12:08:47 +0000
Files and hashes: 1: AS214757.asa (hash: KJVkb/rZusffYD5r7h9TWmgVTQ05c1gZ3oofLZ7qbQY=)
2: A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl (hash: xvzR4hjX+bn6BMYSdLda05MDEehSjgJ/HJPao3txdmI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:25:10:c6:2b:68:fa:6c:58:fd:b3:bd:0d:4e:40:59:ee:96:e1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Validity
Not Before: Mar 1 10:24:47 2026 GMT
Not After : Mar 2 12:08:47 2026 GMT
Subject: CN=4FB69A4DCAC9785532B3560E6048CBC799C8FC20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:b9:be:9c:24:29:cc:b4:37:d6:06:3e:56:
f3:66:71:c6:db:45:15:1c:13:6e:43:83:ce:82:d9:
0f:d2:18:73:a8:c7:8a:a0:ad:1e:b5:8f:78:79:16:
0a:70:22:4a:5e:39:82:5b:07:f8:11:ed:09:2f:b5:
05:9c:e5:eb:9a:5a:59:81:53:a9:58:c4:fa:85:53:
82:45:bc:28:40:f6:d2:5b:61:21:4e:f6:6e:e3:07:
b7:88:c0:b7:c2:20:25:21:fd:b2:40:93:da:f2:fb:
a8:75:60:4b:61:61:94:59:e6:cf:87:db:3d:de:76:
fe:5e:4b:62:94:75:19:5b:02:57:02:76:07:49:40:
79:df:ad:a1:d4:ee:08:fe:e0:02:cf:10:0f:24:f0:
2c:3c:b1:f3:0a:03:5e:92:ec:8d:3d:68:62:9f:36:
43:b7:e5:75:cb:b9:0a:da:00:4d:30:e9:62:7b:08:
b1:e8:56:a3:8f:53:69:4c:a4:bc:77:5d:ec:c5:13:
ac:96:69:ba:b3:0b:9d:9c:34:2f:cf:95:92:99:87:
35:5a:21:aa:42:43:c6:3a:f3:9c:46:61:ec:59:17:
13:0b:d6:c9:1e:be:d6:51:df:f3:7e:21:fc:e5:8f:
22:50:a2:35:48:75:4d:ac:a6:ad:2e:e9:33:22:2d:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B6:9A:4D:CA:C9:78:55:32:B3:56:0E:60:48:CB:C7:99:C8:FC:20
X509v3 Authority Key Identifier:
keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f5:c8:5b:e4:18:c4:a3:e9:26:2d:d4:26:32:06:01:4a:84:
c1:72:17:e5:c7:59:0e:6e:b3:76:83:8a:d3:8e:e6:dc:f3:b9:
5f:e2:ee:6f:88:2d:9a:7b:3d:97:f6:7e:f5:c0:a0:78:75:63:
14:c4:f0:c8:0d:43:8e:55:0a:c9:9f:f1:96:ca:47:71:74:e1:
d1:f3:5a:30:08:5f:e8:a0:b9:e9:54:06:f0:ee:92:a1:13:07:
10:45:56:0e:f3:fc:89:47:0f:db:46:52:47:0a:58:87:4f:a7:
9c:dc:05:c6:4d:c5:06:90:7b:7c:24:92:e5:2c:a1:2d:09:b0:
f2:3c:54:d2:72:e8:d5:da:5d:a4:38:b8:b8:40:bb:2e:ad:5b:
64:17:d7:63:ce:6f:fc:46:6b:1a:b9:ce:82:be:93:95:42:1c:
1b:b2:b3:b4:0d:d2:ca:7c:46:2b:94:1a:02:c8:22:79:3d:f5:
0e:fe:19:b4:3a:b3:0f:0a:30:d0:8c:8e:05:97:ad:43:72:07:
08:bc:fd:e1:93:43:fc:47:af:f8:a9:a3:4f:71:cf:e1:b4:0a:
3c:01:e4:e9:06:28:8c:0c:44:72:3f:e1:b6:a6:b1:1d:c5:2a:
ee:fc:1e:2e:a2:49:82:ec:86:bc:5a:d1:0b:a0:76:fa:87:65:
da:dd:b7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:16 2026 by rpki-client