Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json)
Hash identifier: wooO3wCdt5lRA8/wXhLbiSvbkqubA8v7MvQRuw4JNcE=
Subject key identifier: FF:5C:B2:CA:EC:33:D8:5D:86:B3:D4:74:3D:0B:C1:72:6C:00:7B:08
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial: 3625AD9D288DAB5B8907C0FC18749B5F62C7285D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
Manifest number: 0399
Signing time: Sat 28 Feb 2026 23:44:50 +0000
Manifest this update: Sat 28 Feb 2026 23:39:50 +0000
Manifest next update: Mon 02 Mar 2026 03:31:50 +0000
Files and hashes: 1: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: gXFGO64pQ4RqTj7SWALP3vmQSn0u50VgVw+Cd8I6nmY=)
2: AS215828.asa (hash: gn0zvNq0jqiLUYK3MJlHlnirErp0oB8cq8E7u3vxlhE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 03:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:25:ad:9d:28:8d:ab:5b:89:07:c0:fc:18:74:9b:5f:62:c7:28:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Validity
Not Before: Feb 28 23:39:50 2026 GMT
Not After : Mar 2 03:31:50 2026 GMT
Subject: CN=FF5CB2CAEC33D85D86B3D4743D0BC1726C007B08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:7d:d0:42:4b:cc:1d:24:02:0f:49:2e:e8:
b4:b5:bf:37:76:57:ed:5e:5b:5c:d7:68:8b:a5:d8:
da:c4:ed:db:16:42:63:bc:c3:b8:2b:f9:4e:fe:fa:
75:e8:d7:01:0b:be:b4:cb:f5:3d:bd:1d:26:68:89:
78:53:8e:0c:cd:36:a8:33:af:2c:e0:56:69:67:d6:
08:8c:c5:8b:62:78:de:79:a1:24:8d:4b:8f:01:df:
59:25:99:0b:b6:21:a5:13:b0:6e:ca:eb:38:35:87:
1d:23:d0:95:73:51:4c:10:bf:ab:78:15:ef:c7:40:
81:63:94:27:8d:2c:b3:f9:d9:86:35:9d:df:75:9b:
f3:c4:b0:d0:80:4a:95:68:01:6d:bd:8c:d4:f6:59:
49:8a:3a:44:4c:0e:ae:c2:d3:ad:14:69:aa:4d:57:
83:1c:1d:e8:6a:e4:84:ad:9e:3f:6c:2b:52:9d:61:
2c:44:11:67:e9:f4:c9:60:9c:a2:a9:b1:a3:0d:57:
f5:ea:f1:13:a0:23:93:cf:9f:46:a0:3d:20:93:c5:
04:96:20:fc:12:78:0a:30:5d:df:dd:9e:29:f8:88:
44:0f:30:82:2e:e1:d2:63:2d:9b:9f:7c:07:8c:20:
83:84:b9:a6:a6:ac:6e:e1:78:ca:60:9e:06:22:ba:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5C:B2:CA:EC:33:D8:5D:86:B3:D4:74:3D:0B:C1:72:6C:00:7B:08
X509v3 Authority Key Identifier:
keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:12:9e:a4:b7:bb:d2:ef:cb:cc:3b:15:ae:2a:23:8e:b1:08:
91:8a:24:60:07:df:4d:89:c2:ab:5b:ec:10:19:ec:dd:5a:06:
48:3d:26:ca:30:71:76:5c:7f:04:6d:83:41:19:a8:cc:30:c2:
dd:b0:03:d8:87:f1:c5:c8:1c:e8:de:71:22:c5:ba:00:10:97:
bf:67:e2:cc:cf:01:98:30:b8:53:f3:97:b8:b7:57:f9:fd:31:
d9:e1:a4:4a:2e:0a:fe:95:89:73:01:ca:eb:4e:cd:64:e5:2b:
f2:2a:54:6a:40:a6:7f:d0:96:f8:6f:27:9b:48:2d:ea:1b:ee:
53:46:c6:35:c1:6b:e1:a4:d7:19:a4:d9:08:25:eb:a7:04:26:
ce:be:57:d5:95:39:e0:10:6a:bc:f8:80:13:66:3a:48:29:93:
fb:47:fe:6e:cd:34:eb:0f:00:4e:48:ff:2e:33:25:3f:ed:ea:
ae:c1:46:c8:70:c4:ad:16:e2:d5:2c:54:ef:72:99:cd:15:d9:
d8:f3:64:11:8e:6d:e1:b6:0d:86:1f:72:93:3b:a4:16:5d:f6:
6c:50:e9:11:57:a9:d1:c2:71:4c:4d:21:7e:df:4a:19:5e:44:
13:74:53:de:0e:9d:46:d7:62:6d:9d:45:4f:9c:94:a0:ef:68:
e3:65:0b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:05 2026 by rpki-client