Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: C0gUGkFDzcnXdB31ncLPCX48rg0kxzsEV72quW4WrTY=
Subject key identifier: CC:F5:73:46:F5:E4:12:C9:E7:2B:CF:9C:14:C8:72:30:5E:79:57:46
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 3470C4709A6961ACE1D9C13F34E17BBBF76C967E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 046A
Signing time: Tue 28 Jul 2026 12:15:09 +0000
Manifest this update: Tue 28 Jul 2026 12:10:09 +0000
Manifest next update: Wed 29 Jul 2026 13:47:09 +0000
Files and hashes: 1: AS215828.asa (hash: aLfEnni+8YGsFkiwicZpetRmsooIvHjNGHfRPX60CaA=)
2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: 83PK7gHAzB7oQrgaSo62Q7rYujiSoJs24TLHzsI1SCo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:70:c4:70:9a:69:61:ac:e1:d9:c1:3f:34:e1:7b:bb:f7:6c:96:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Jul 28 12:10:09 2026 GMT
Not After : Jul 29 13:47:09 2026 GMT
Subject: CN=CCF57346F5E412C9E72BCF9C14C872305E795746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:c3:c0:02:07:ae:dd:f8:92:90:9c:bb:6a:
82:42:68:06:8c:ce:43:fd:65:e0:f1:86:f2:56:a3:
47:46:f2:f8:92:f7:a1:a5:4a:6b:c4:5b:a1:dc:1f:
ce:57:a2:36:d6:63:62:6c:b9:89:52:7e:65:2e:a9:
eb:c6:18:df:41:98:bf:bf:91:e1:b5:83:04:ba:e0:
a6:2c:ab:69:fa:9b:cc:22:46:80:68:ec:f4:10:c1:
7c:0b:c2:7c:b0:a3:90:7e:02:69:6b:1d:d3:45:0d:
c5:d8:86:6e:a1:20:a8:4f:f9:2e:78:91:7c:2c:c9:
32:85:51:30:6e:da:c9:76:a3:a9:3e:4e:1d:ef:d1:
f6:a5:6b:fd:ef:29:83:00:7c:36:f0:c3:69:d1:56:
48:80:8a:e6:8f:d6:c2:04:e0:f6:d0:05:6b:6d:c9:
57:2e:58:f0:04:88:ec:9a:93:17:bf:47:58:e7:bd:
09:0e:62:03:fe:85:7d:ba:e8:39:34:ac:be:08:44:
72:cc:0f:fe:25:2c:a1:48:d7:e4:bd:96:5a:da:25:
71:4b:b1:17:8d:ed:60:f5:eb:a4:f7:0d:f9:e3:5d:
87:68:6a:cc:69:f2:7f:6e:c6:32:f0:35:d8:2b:9d:
e5:fe:a5:5d:c9:54:b5:bf:b5:69:a1:a8:5a:eb:8f:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F5:73:46:F5:E4:12:C9:E7:2B:CF:9C:14:C8:72:30:5E:79:57:46
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d2:09:e6:cf:f5:6b:22:0d:2f:1e:b0:35:ec:ee:06:5f:14:
01:2f:e9:f2:f2:96:fe:9b:37:2e:d0:22:51:4c:d2:c0:75:cc:
bd:e8:f5:bb:60:98:9d:ae:30:f3:c9:75:32:09:df:aa:24:b5:
a4:c1:d6:9d:02:8c:ac:11:69:e4:0c:e6:f2:64:8f:60:8f:98:
bd:29:8f:7b:9e:9c:5a:69:d6:59:cf:27:bd:b3:82:74:6d:80:
71:20:88:1e:fc:7e:6f:29:96:18:37:c7:a6:86:f0:46:96:a1:
6a:45:11:37:4e:d7:1b:14:0b:a1:02:aa:90:5d:0b:6a:55:5c:
0f:c3:05:b1:3d:cc:73:22:48:b3:dd:c8:ce:e8:ea:f5:ab:4d:
05:ba:bf:53:e6:3e:c1:6f:d9:02:07:1b:69:31:e2:5e:4d:84:
fc:01:f3:cc:3f:8f:23:4a:00:cd:49:48:31:74:72:03:f8:37:
e8:cc:3d:44:65:6e:c1:4e:25:82:e5:e8:c4:4b:f6:86:ba:6c:
55:02:51:f7:cb:6a:12:fd:6b:55:c7:67:20:97:a5:bc:11:69:
c9:3b:d5:ba:c0:f0:7c:cc:bd:58:d8:66:90:d4:1d:b1:73:de:
de:5e:ab:78:55:4d:82:65:f5:2d:21:aa:b7:ff:b4:70:6f:f5:
33:ef:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:02:49 2026 by rpki-client