Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: gs4Kx74cs4H5P2JF+kL2wrGtxOW7J9ZJMcRPcEc4FBk=
Subject key identifier: 60:95:02:DF:E9:D4:9E:3B:C5:67:F9:2B:67:1E:1A:17:A0:D2:03:27
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 57BF07D63E7F23E3293E0E5C995166EC3F68C164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 04B4
Signing time: Sun 20 Sep 2026 20:08:45 +0000
Manifest this update: Sun 20 Sep 2026 20:03:45 +0000
Manifest next update: Mon 21 Sep 2026 21:56:45 +0000
Files and hashes: 1: AS215828.asa (hash: aLfEnni+8YGsFkiwicZpetRmsooIvHjNGHfRPX60CaA=)
2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: iaj4qrlfFdJOlJbaYkOYdCv9MZWcRXbSqSup+56Yq3o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bf:07:d6:3e:7f:23:e3:29:3e:0e:5c:99:51:66:ec:3f:68:c1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Sep 20 20:03:45 2026 GMT
Not After : Sep 21 21:56:45 2026 GMT
Subject: CN=609502DFE9D49E3BC567F92B671E1A17A0D20327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:bd:20:ea:de:8f:66:69:cc:09:41:79:f5:
0d:d3:39:cd:2f:54:3b:f5:b3:8e:c1:c0:2b:9c:07:
9e:d0:ad:d9:5d:a9:8a:2f:6e:62:9f:df:38:20:6f:
a8:0b:da:aa:da:d7:bc:28:45:d8:1e:86:89:30:3b:
10:89:7d:26:a3:ab:8c:23:6d:1d:09:0e:22:83:f8:
75:64:ec:b7:4f:2b:ef:a2:45:16:d5:1b:b7:84:90:
4f:2a:ab:66:77:9f:8e:5f:71:3c:06:9a:dd:df:64:
41:5f:70:9f:f1:8a:63:3a:85:71:df:41:2f:44:c0:
18:7a:5f:71:e7:89:cd:72:0f:5e:55:54:c9:c7:93:
fe:c4:98:59:11:d5:6f:36:3f:55:36:b0:1c:d3:1d:
65:34:d2:d0:b6:d7:68:67:38:5f:2c:ce:e1:89:e7:
38:b0:de:38:6f:cf:d6:ff:0d:86:71:66:53:80:a6:
9d:2a:d1:aa:45:32:07:5b:41:cd:b6:af:92:2b:c9:
dc:10:29:7f:24:ef:9e:3a:3c:c7:e1:e8:43:4e:4f:
cc:cb:bb:8c:ff:99:a3:84:01:b7:57:93:ee:23:6d:
40:db:10:3f:48:01:df:1f:89:11:34:91:98:ac:6e:
53:d7:e7:d5:3d:75:aa:eb:46:ca:0c:f5:7b:f4:3e:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:02:DF:E9:D4:9E:3B:C5:67:F9:2B:67:1E:1A:17:A0:D2:03:27
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f5:6a:ef:fd:61:c1:a6:c6:46:82:28:a6:dd:85:fa:a3:1d:
f5:54:e2:57:58:0e:3c:5e:94:b1:95:94:d7:2a:65:60:31:8a:
2f:4c:ee:fc:97:bf:26:0d:64:61:13:3a:51:e8:05:76:5e:4d:
0f:1c:ac:a1:f0:06:3e:85:a3:6b:63:ce:aa:c0:3c:38:39:ae:
88:ee:2f:0a:07:45:88:96:f9:93:b1:7b:c8:9b:c7:2c:eb:59:
8b:af:42:11:1f:82:c0:01:bf:41:96:ca:91:59:63:f3:90:8e:
37:80:48:26:8a:cf:5a:e2:db:17:ba:cc:a2:83:c5:fd:11:e2:
9f:4d:fb:a3:8f:51:23:40:e2:8c:54:e9:35:95:26:bd:64:6f:
48:67:b2:a7:a7:88:d5:fe:f6:26:31:f1:14:3e:51:2b:37:69:
4d:a0:53:d4:2b:69:b7:eb:91:14:b6:dc:7e:e0:9b:a1:a1:66:
f1:57:52:76:44:cb:82:c9:ba:24:a5:13:b1:35:5d:2b:c8:ce:
c9:ec:68:c7:e2:29:21:52:9d:81:58:66:0a:96:e2:1b:31:8c:
d5:47:2c:50:5b:33:2a:93:95:8b:21:d7:83:58:9e:45:65:8e:
93:ad:1f:be:f8:72:7e:82:e0:5d:52:58:bb:7a:b2:44:dc:9c:
14:75:81:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:09:23 2026 by rpki-client