Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
File: 2615B626807D30988381C32656617AE6FD6638B6.mft (raw, json)
Hash identifier: /NgQMrllaHAKW+vBu3STp22q61uGBaoSd/mz0hkq+Xs=
Subject key identifier: 9E:05:E5:5F:AE:44:ED:C5:43:6A:86:FD:78:EA:7E:C2:70:4F:D7:82
Authority key identifier: 26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
Certificate issuer: /CN=2615b626807d30988381c32656617ae6fd6638b6
Certificate serial: 6FACEBCC67B561B5FF33044D48EF9F636DDB403B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
Manifest number: 020F
Signing time: Mon 21 Sep 2026 15:09:54 +0000
Manifest this update: Mon 21 Sep 2026 15:04:54 +0000
Manifest next update: Tue 22 Sep 2026 18:35:54 +0000
Files and hashes: 1: AS209710.asa (hash: uOB5Z3Fmg18HMKsvzyzZbGRRD3+2nlkihW02xag7eqw=)
2: 2615B626807D30988381C32656617AE6FD6638B6.crl (hash: oaLnc/siv4yHcHdMKn+YebvnVbrrYQrvJqmCROl77gI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ac:eb:cc:67:b5:61:b5:ff:33:04:4d:48:ef:9f:63:6d:db:40:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2615b626807d30988381c32656617ae6fd6638b6
Validity
Not Before: Sep 21 15:04:54 2026 GMT
Not After : Sep 22 18:35:54 2026 GMT
Subject: CN=9E05E55FAE44EDC5436A86FD78EA7EC2704FD782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:a9:8d:87:55:73:0f:97:55:37:fc:38:cd:
fc:c3:3e:7a:15:64:0d:f2:e6:4b:c5:c6:31:6d:7a:
a2:e9:44:c2:52:35:03:82:38:36:39:58:35:1f:0f:
1b:13:e7:d9:58:62:da:3c:01:19:9b:fd:0f:61:29:
87:b2:1e:88:1c:8b:ba:78:ca:15:62:03:ee:8a:23:
28:d0:b2:ff:14:b7:f9:ab:3b:15:c9:c2:13:df:83:
83:64:7a:bf:37:29:b5:31:50:12:fb:01:1c:8e:bc:
40:e1:00:ad:40:84:30:ea:f4:c0:12:04:6f:49:d8:
3a:5a:44:c2:d6:2a:67:47:08:6a:8b:c5:9a:18:c8:
7e:f5:2a:0d:53:54:9b:e3:03:9e:85:26:b2:db:2d:
51:cc:77:7f:60:8f:ad:11:1d:0f:74:c1:f7:35:bf:
bf:90:d6:08:c7:3f:49:f1:f8:94:ba:51:a4:59:76:
4f:77:c0:9c:57:19:a1:a1:a6:6b:45:3e:86:16:77:
5b:8f:e7:66:50:05:bb:16:f1:b9:85:88:34:14:cd:
af:79:df:af:75:ab:86:09:8d:13:44:0a:4b:3b:55:
78:c7:7b:55:a6:83:b7:2a:da:71:55:67:0e:55:e9:
c0:fe:20:0d:4e:1e:62:c8:12:89:47:bd:30:33:cd:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:05:E5:5F:AE:44:ED:C5:43:6A:86:FD:78:EA:7E:C2:70:4F:D7:82
X509v3 Authority Key Identifier:
keyid:26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:30:11:48:54:90:e9:0c:60:fd:7d:6b:bc:fd:ea:af:cd:c6:
27:0d:62:aa:a5:4e:26:d2:31:8c:7d:ae:2d:44:9e:ce:b1:59:
aa:65:53:38:16:c8:99:d0:4e:0f:10:3f:3d:d2:e0:9a:02:5b:
3b:71:1e:95:89:df:cc:69:64:9a:67:77:06:20:20:9b:65:a2:
f9:15:c0:d0:c4:c1:45:38:7e:2b:7f:e0:08:15:5f:17:cf:59:
d2:70:83:d7:e1:c9:69:68:86:84:1d:a4:1d:2e:e0:a2:99:fa:
fe:d2:39:d0:8f:e0:a5:34:66:78:f0:1f:13:99:81:87:bf:d1:
9c:49:00:35:7a:b9:73:f7:b0:b1:54:8f:3f:5d:8f:0d:20:ff:
9f:1e:7c:4b:ae:62:6f:b7:55:41:90:91:92:dd:72:f9:44:05:
84:74:98:7f:90:a1:a6:4b:90:6d:ef:d2:1c:1e:11:9d:9f:8e:
fb:9d:00:6b:7d:dd:f2:dc:70:75:0e:4c:4d:de:0a:01:f7:2d:
14:62:89:77:05:e7:6e:32:f1:ec:cc:bc:09:6b:9a:57:f7:ea:
a3:46:bf:22:34:87:02:df:5c:12:40:31:b4:7b:8f:fb:80:d9:
44:5d:4d:7b:de:e0:0c:19:18:a6:ca:83:e0:f5:1e:5a:69:7d:
70:b6:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:56:09 2026 by rpki-client