Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: tnxdXZ9aphyQx41tDgUYAV6HQDH4xmQmRZX8VoPYHdA=
Subject key identifier: B6:29:6A:89:1C:25:FC:65:7D:F5:3F:02:9F:97:97:60:37:8E:0B:B4
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 2910BEBE2E4EC8A13420C8EF2046E6B290334623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 03D9
Signing time: Fri 17 Apr 2026 03:42:16 +0000
Manifest this update: Fri 17 Apr 2026 03:37:16 +0000
Manifest next update: Sat 18 Apr 2026 04:12:16 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: ew/NtbhTZKemAFMzpyLIM46qmWSxba0CrQkUdemYtaE=)
2: AS215828.asa (hash: gn0zvNq0jqiLUYK3MJlHlnirErp0oB8cq8E7u3vxlhE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:10:be:be:2e:4e:c8:a1:34:20:c8:ef:20:46:e6:b2:90:33:46:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Apr 17 03:37:16 2026 GMT
Not After : Apr 18 04:12:16 2026 GMT
Subject: CN=B6296A891C25FC657DF53F029F979760378E0BB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:d9:6b:1c:47:be:5c:b2:d3:47:4e:5c:5a:
c2:f4:bb:16:92:18:ca:bb:d0:15:6c:bd:41:38:b8:
5d:a4:53:c0:58:d2:a7:0e:40:8e:1d:74:8f:17:d9:
d6:da:84:9f:b9:0c:4c:24:62:24:de:0d:7b:58:ea:
b8:59:c1:16:0b:fc:c8:e6:81:1a:8a:d9:3a:c4:23:
46:57:38:22:61:89:b5:5b:cd:60:15:3f:43:9c:55:
ce:68:a2:8e:21:2b:10:5b:f3:4c:c0:12:72:b1:db:
9b:90:bc:cc:27:e0:c1:b1:64:07:dc:8c:7c:3a:56:
37:2e:5b:26:84:9e:ff:9d:d7:f9:3c:5c:d0:1b:f2:
fc:2b:d4:33:e4:49:aa:e2:15:36:7c:10:cd:6a:46:
b5:b0:3d:ea:b7:9a:7d:c9:d2:57:22:e4:40:90:a4:
53:e9:52:96:12:89:6d:55:6a:d1:0d:3b:bc:df:6d:
f9:63:4f:60:ad:79:c0:fc:3b:5c:a8:1f:d7:fd:3e:
b9:76:a9:c7:f5:f6:3e:99:a0:35:2f:5b:a5:92:bf:
e4:d4:8a:6f:37:c8:7e:24:9e:10:d7:b8:28:66:ba:
2e:94:dc:93:08:11:36:c5:39:b0:02:bd:26:a2:29:
90:92:15:f0:f1:08:cf:26:c3:8a:ab:18:d4:8c:52:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:29:6A:89:1C:25:FC:65:7D:F5:3F:02:9F:97:97:60:37:8E:0B:B4
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ec:70:7f:d6:81:bf:54:3c:1f:0d:1e:7e:38:7c:95:84:0f:
7d:b4:8a:b4:4f:a0:b8:74:a5:37:85:32:e7:89:a1:75:c4:81:
05:4d:27:58:4b:0d:a6:2c:43:c8:77:be:02:4d:11:88:6d:f0:
4c:8d:11:9c:64:40:0c:be:b0:ae:2a:7e:8e:07:6b:74:d2:3c:
44:32:3b:a2:7c:41:86:ef:21:78:02:90:65:87:86:c2:1c:6b:
77:92:e6:d9:23:88:23:59:ca:4d:d5:94:a8:e1:26:3a:01:7d:
19:b4:8a:ad:f3:cc:10:36:59:50:d0:aa:6c:50:f0:2e:a5:4b:
42:9e:d6:29:2d:ee:d4:3c:23:88:f5:96:7f:13:c6:ab:5d:03:
25:82:11:5b:8f:bc:b8:49:b5:75:a4:53:22:c2:29:fc:9c:93:
2a:09:ee:4f:81:05:df:ec:0f:12:39:74:6d:9d:30:0f:cf:04:
16:9e:a4:07:e8:3e:65:f1:07:6c:87:68:cb:0e:9e:a5:c4:de:
3a:59:ad:a8:35:e7:a6:cd:88:d2:ce:24:74:72:44:ce:14:22:
77:e9:2b:33:d5:6f:5a:78:3e:1f:60:72:cf:d5:db:f0:7f:a7:
cb:45:39:9b:83:db:58:02:f1:bc:79:92:8c:33:1d:86:3f:1b:
f4:0f:95:af
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUKRC+vi5OyKE0IMjvIEbmspAzRiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDgyMTk2NDc0MTUwMThlNGZmZDNmMTFjMjdhODA3NTMw
ZDdiN2NmMTAeFw0yNjA0MTcwMzM3MTZaFw0yNjA0MTgwNDEyMTZaMDMxMTAvBgNV
BAMTKEI2Mjk2QTg5MUMyNUZDNjU3REY1M0YwMjlGOTc5NzYwMzc4RTBCQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfedlrHEe+XLLTR05cWsL0uxaS
GMq70BVsvUE4uF2kU8BY0qcOQI4ddI8X2dbahJ+5DEwkYiTeDXtY6rhZwRYL/Mjm
gRqK2TrEI0ZXOCJhibVbzWAVP0OcVc5ooo4hKxBb80zAEnKx25uQvMwn4MGxZAfc
jHw6VjcuWyaEnv+d1/k8XNAb8vwr1DPkSariFTZ8EM1qRrWwPeq3mn3J0lci5ECQ
pFPpUpYSiW1VatENO7zfbfljT2CtecD8O1yoH9f9Prl2qcf19j6ZoDUvW6WSv+TU
im83yH4knhDXuChmui6U3JMIETbFObACvSaiKZCSFfDxCM8mw4qrGNSMUp55AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUtilqiRwl/GV99T8Cn5eXYDeOC7QwHwYDVR0j
BBgwFoAU2CGWR0FQGOT/0/EcJ6gHUw17fPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll
OGJiLzAvRDgyMTk2NDc0MTUwMThFNEZGRDNGMTFDMjdBODA3NTMwRDdCN0NGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJDR1dSMEZRR09UXzBfRWNKNmdIVXcx
N2ZQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m
YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvMC9EODIxOTY0NzQxNTAxOEU0RkZE
M0YxMUMyN0E4MDc1MzBEN0I3Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuxwf9aBv1Q8Hw0efjh8
lYQPfbSKtE+guHSlN4Uy54mhdcSBBU0nWEsNpixDyHe+Ak0RiG3wTI0RnGRADL6w
rip+jgdrdNI8RDI7onxBhu8heAKQZYeGwhxrd5Lm2SOII1nKTdWUqOEmOgF9GbSK
rfPMEDZZUNCqbFDwLqVLQp7WKS3u1DwjiPWWfxPGq10DJYIRW4+8uEm1daRTIsIp
/JyTKgnuT4EF3+wPEjl0bZ0wD88EFp6kB+g+ZfEHbIdoyw6epcTeOlmtqDXnps2I
0s4kdHJEzhQid+krM9VvWng+H2Byz9Xb8H+ny0U5m4PbWALxvHmSjDMdhj8b9A+V
rw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:34 2026 by rpki-client