Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft
File: DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft (raw, json)
Hash identifier: vcooKBBRrw5lMLxN+hFECsVgwuKdTx3t0TPi8Bzi3qc=
Subject key identifier: 91:AE:B4:72:10:20:8E:72:F9:FD:CD:5D:54:FA:98:9A:70:F8:8E:5F
Authority key identifier: DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F
Certificate issuer: /CN=df083fc9c36ab37158ad80e5c84e76be97adc09f
Certificate serial: 0E63EA81766C5A1F22F28C7E3C768260CE6BD395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft
Manifest number: 80
Signing time: Mon 02 Mar 2026 05:13:44 +0000
Manifest this update: Mon 02 Mar 2026 05:08:44 +0000
Manifest next update: Tue 03 Mar 2026 08:59:44 +0000
Files and hashes: 1: DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl (hash: AEr4cK8xuj5GpIoQcfuRmy8xNS4nGim0660eQMEx+XE=)
2: 323030313a3637383a313134633a3a2f34382d3438203d3e20323034353335.roa (hash: 9p7lN4fPyJsdHWKsoNbq0ArF1KunMN6fkvMq7UIoE20=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl
rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:63:ea:81:76:6c:5a:1f:22:f2:8c:7e:3c:76:82:60:ce:6b:d3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df083fc9c36ab37158ad80e5c84e76be97adc09f
Validity
Not Before: Mar 2 05:08:44 2026 GMT
Not After : Mar 3 08:59:44 2026 GMT
Subject: CN=91AEB47210208E72F9FDCD5D54FA989A70F88E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:a7:6a:0d:25:1d:32:f1:be:14:a8:e5:b4:
96:c0:65:b7:05:6d:02:c3:0e:64:e7:de:89:d4:ca:
19:04:42:00:da:8c:b4:b5:f9:f4:66:68:d1:c5:04:
07:8d:20:fd:79:be:25:76:0c:c5:89:59:b5:f0:ac:
28:74:75:52:b2:98:3f:11:ad:51:56:0c:a2:57:b7:
05:01:de:38:27:0b:f4:e9:1f:f5:37:f6:ac:10:db:
0d:1d:43:97:51:0f:bc:37:5c:45:f0:58:f9:44:b5:
71:97:f3:3c:ab:8b:1c:d4:d9:5b:57:04:97:71:55:
15:06:5f:11:ff:f3:26:6a:23:fe:e6:8d:01:81:3c:
47:fb:3f:23:5e:5b:a3:4f:65:b5:fb:10:1f:bd:cc:
5d:26:ad:3f:f6:75:fd:ad:76:b7:3f:fe:93:64:27:
46:79:55:1e:42:a5:d9:79:9a:36:06:04:3a:42:7a:
62:9e:c6:c1:1c:92:0e:3e:6e:88:af:ce:4c:f7:6c:
ad:67:ad:de:b3:2d:c9:61:c2:7c:7a:85:d9:49:d2:
1b:a0:8e:ae:a7:c3:a6:0f:39:b1:5f:58:fb:a9:48:
a5:73:fa:14:1a:26:74:90:55:7f:e9:57:01:91:e5:
1b:4b:60:0b:17:4f:cc:66:25:56:e2:1c:47:6f:fe:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AE:B4:72:10:20:8E:72:F9:FD:CD:5D:54:FA:98:9A:70:F8:8E:5F
X509v3 Authority Key Identifier:
keyid:DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:83:fb:63:52:38:d2:d8:5a:99:04:28:5d:8d:d9:2a:81:5c:
84:62:c1:32:ce:f3:bb:d4:39:74:85:3b:09:2f:11:d5:73:da:
a1:be:e1:ef:b0:b6:4d:b8:2b:9e:dd:46:27:dd:38:c5:a9:55:
cf:39:76:a2:8b:d7:6f:eb:d6:59:1b:f5:70:5b:17:2c:64:b7:
34:f9:99:3f:9f:fd:4c:16:0a:03:c8:c1:10:f8:78:81:0b:bc:
1a:f4:6a:90:05:e8:65:fc:d1:eb:7d:58:ba:b8:2f:5c:8e:61:
e5:a4:e0:5c:fa:29:e4:63:7e:a3:f6:12:3a:8f:11:bb:9f:cb:
51:66:b9:d2:ab:7e:15:7c:72:28:e1:36:af:58:a9:79:50:0f:
ba:aa:cb:81:7a:95:d9:39:8c:47:a7:1f:d3:24:00:1a:d6:5e:
96:fa:6f:57:b6:99:5f:89:c6:96:c3:75:a6:e9:47:7c:7f:dd:
b6:e7:63:d1:20:01:48:5a:05:f4:f3:37:a9:03:4f:a4:2f:34:
da:13:b7:12:54:24:0f:42:0f:e2:63:04:97:11:64:a5:a9:3f:
3d:ce:8a:c7:7c:85:e5:af:e2:62:04:a5:ae:4d:fc:f3:9c:4e:
38:ef:2b:ad:df:99:04:8f:bd:ff:a7:21:8f:2a:fb:92:ef:4e:
a9:7e:6b:45
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUDmPqgXZsWh8i8ox+PHaCYM5r05UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGYwODNmYzljMzZhYjM3MTU4YWQ4MGU1Yzg0ZTc2YmU5
N2FkYzA5ZjAeFw0yNjAzMDIwNTA4NDRaFw0yNjAzMDMwODU5NDRaMDMxMTAvBgNV
BAMTKDkxQUVCNDcyMTAyMDhFNzJGOUZEQ0Q1RDU0RkE5ODlBNzBGODhFNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTqdqDSUdMvG+FKjltJbAZbcF
bQLDDmTn3onUyhkEQgDajLS1+fRmaNHFBAeNIP15viV2DMWJWbXwrCh0dVKymD8R
rVFWDKJXtwUB3jgnC/TpH/U39qwQ2w0dQ5dRD7w3XEXwWPlEtXGX8zyrixzU2VtX
BJdxVRUGXxH/8yZqI/7mjQGBPEf7PyNeW6NPZbX7EB+9zF0mrT/2df2tdrc//pNk
J0Z5VR5Cpdl5mjYGBDpCemKexsEckg4+boivzkz3bK1nrd6zLclhwnx6hdlJ0hug
jq6nw6YPObFfWPupSKVz+hQaJnSQVX/pVwGR5RtLYAsXT8xmJVbiHEdv/gwrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUka60chAgjnL5/c1dVPqYmnD4jl8wHwYDVR0j
BBgwFoAU3wg/ycNqs3FYrYDlyE52vpetwJ8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWJiNzdjOGEtMmQ2OS00MzI1LWI0ZmEtNjAzMzg4Yzk2
YmIzLzAvREYwODNGQzlDMzZBQjM3MTU4QUQ4MEU1Qzg0RTc2QkU5N0FEQzA5Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzN3Z195Y05xczNGWXJZRGx5RTUydnBl
dHdKOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YmI3N2M4YS0y
ZDY5LTQzMjUtYjRmYS02MDMzODhjOTZiYjMvMC9ERjA4M0ZDOUMzNkFCMzcxNThB
RDgwRTVDODRFNzZCRTk3QURDMDlGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4P7Y1I40thamQQoXY3Z
KoFchGLBMs7zu9Q5dIU7CS8R1XPaob7h77C2Tbgrnt1GJ904xalVzzl2oovXb+vW
WRv1cFsXLGS3NPmZP5/9TBYKA8jBEPh4gQu8GvRqkAXoZfzR631YurgvXI5h5aTg
XPop5GN+o/YSOo8Ru5/LUWa50qt+FXxyKOE2r1ipeVAPuqrLgXqV2TmMR6cf0yQA
GtZelvpvV7aZX4nGlsN1pulHfH/dtudj0SABSFoF9PM3qQNPpC802hO3ElQkD0IP
4mMElxFkpak/Pc6Kx3yF5a/iYgSlrk3885xOOO8rrd+ZBI+9/6chjyr7ku9OqX5r
RQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:47 2026 by rpki-client