
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
File: A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft (raw, json)
Hash identifier: WedFi3EFEAoM9R73p2rS48ch6DGumY1Dw0jIQkCRbZA=
Subject key identifier: D8:1D:AC:33:98:21:4B:25:A0:C7:CD:A0:3F:61:14:7B:E8:36:C3:7D
Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
Certificate issuer: /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Certificate serial: 72F43C81F07D6E073ED024B9A1823A6E2C8FCD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
Manifest number: 011D
Signing time: Fri 17 Apr 2026 08:54:52 +0000
Manifest this update: Fri 17 Apr 2026 08:49:52 +0000
Manifest next update: Sat 18 Apr 2026 10:39:52 +0000
Files and hashes: 1: A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl (hash: m+QK4tYN9g53Y5GDUuEiMq4FcpVOvZ8KcHBnRvirqb8=)
2: AS214757.asa (hash: KJVkb/rZusffYD5r7h9TWmgVTQ05c1gZ3oofLZ7qbQY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f4:3c:81:f0:7d:6e:07:3e:d0:24:b9:a1:82:3a:6e:2c:8f:cd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2
Validity
Not Before: Apr 17 08:49:52 2026 GMT
Not After : Apr 18 10:39:52 2026 GMT
Subject: CN=D81DAC3398214B25A0C7CDA03F61147BE836C37D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a8:86:c6:f2:5b:09:b3:bb:ce:c6:d7:48:7c:
fa:74:9b:b4:f6:93:e7:ef:22:41:59:c2:87:99:a2:
50:75:9b:3c:44:c7:54:12:ea:9c:ad:8a:d4:0e:0e:
f5:5b:7e:4a:f6:41:92:d7:61:11:da:74:8b:95:7a:
fa:f5:1c:06:2d:4d:c3:0f:25:f2:20:5c:f9:71:07:
03:2a:54:24:9d:02:33:d6:6c:2f:75:be:1e:db:df:
66:e4:f7:ff:09:14:14:8d:e7:d1:2f:99:7c:35:fb:
92:08:da:77:24:eb:6b:d7:65:33:7b:f3:56:41:7d:
0d:38:00:50:73:6f:29:bf:79:26:96:3a:fa:83:91:
f1:b6:95:f7:dc:35:3e:82:70:de:4b:2f:a5:33:b6:
9f:31:85:e5:19:84:3f:da:60:d9:aa:e4:9a:98:71:
67:6e:ae:41:9d:98:c2:3d:13:21:6a:73:b0:cb:e3:
d6:dc:b9:83:e8:13:55:76:7f:c4:cf:cb:b2:b4:c2:
8e:93:26:28:4f:b9:b9:52:9e:4d:ee:ed:60:a5:35:
e2:02:24:f2:03:dc:d2:af:02:a0:18:a4:04:47:e6:
82:78:cc:ca:8d:2e:72:bb:8a:05:30:7c:15:9a:55:
50:c2:c4:28:81:50:cc:fe:88:39:33:83:c3:03:be:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1D:AC:33:98:21:4B:25:A0:C7:CD:A0:3F:61:14:7B:E8:36:C3:7D
X509v3 Authority Key Identifier:
keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:51:95:f8:62:e2:42:6c:47:fc:cd:63:de:fe:5f:66:b1:2f:
24:26:eb:af:47:73:71:5a:f6:aa:fa:65:ff:ea:d6:b0:53:15:
c9:a8:9f:bf:a5:51:0e:86:f3:ad:8f:14:73:24:68:e3:12:5b:
b8:a3:8b:2c:35:3d:bc:c8:cb:29:b5:24:50:b8:0a:56:d5:e7:
42:a6:48:34:06:06:95:39:8d:c4:ef:61:80:f8:3a:29:48:c1:
08:c2:b4:26:df:7a:47:a4:7c:c1:38:c6:8b:31:c4:26:1d:79:
12:66:3c:e1:fc:a0:5c:68:33:32:88:e3:f2:2f:a8:03:c7:b1:
a7:02:f0:93:aa:6d:8c:74:aa:29:95:0f:7c:88:3f:14:2f:6d:
06:67:64:c1:69:f1:33:e5:fb:50:36:8a:30:2c:cc:c8:99:4e:
29:14:f1:50:5a:cb:16:68:1c:66:1d:4d:75:4a:64:0f:00:5c:
64:bf:37:06:e2:db:ef:ce:13:2e:cf:55:c5:66:00:e1:cc:fc:
f2:e4:7e:17:59:87:7a:83:81:d8:a9:21:43:f7:3f:34:be:18:
78:b9:27:32:8e:ad:e0:b1:85:59:4f:e2:3e:6e:e9:d3:5f:17:
e5:dd:a9:ee:e1:d9:c7:bd:a2:a5:a5:93:86:1b:c2:85:c5:c3:
92:55:eb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:27:53 2026 by rpki-client