
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
File: 2615B626807D30988381C32656617AE6FD6638B6.mft (raw, json)
Hash identifier: dZ6VyOstEOi14I3mvXxnm1tV8YpWDAapecysbfYuhsE=
Subject key identifier: 98:DD:EB:4A:96:49:A1:1F:88:87:EE:AC:5F:9E:BC:FD:0E:64:E4:89
Authority key identifier: 26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
Certificate issuer: /CN=2615b626807d30988381c32656617ae6fd6638b6
Certificate serial: 10FE20B72E7438D439A627AB04A0D74F912E855A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
Manifest number: 0131
Signing time: Fri 17 Apr 2026 20:56:04 +0000
Manifest this update: Fri 17 Apr 2026 20:51:04 +0000
Manifest next update: Sat 18 Apr 2026 23:01:04 +0000
Files and hashes: 1: AS209710.asa (hash: JH9sNxE0aTE2l8MwdFYfIWTiqSKZx7d880LdaycnGE8=)
2: 2615B626807D30988381C32656617AE6FD6638B6.crl (hash: oagxk/aTQcWfZ5IA8keSZ+ZP1MZ/andimFTOGsAMEIk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:fe:20:b7:2e:74:38:d4:39:a6:27:ab:04:a0:d7:4f:91:2e:85:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2615b626807d30988381c32656617ae6fd6638b6
Validity
Not Before: Apr 17 20:51:04 2026 GMT
Not After : Apr 18 23:01:04 2026 GMT
Subject: CN=98DDEB4A9649A11F8887EEAC5F9EBCFD0E64E489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:3f:f2:a3:13:1a:45:33:25:97:ce:dc:aa:
82:bd:28:e5:b4:e2:7c:a7:22:12:11:06:a8:7a:92:
9d:fa:e7:89:56:5f:d5:16:90:1b:9e:ec:30:02:35:
14:ca:49:81:71:9f:4e:38:8f:52:c5:cf:13:cc:88:
a7:f9:42:d1:26:26:ec:13:74:d6:84:48:9f:48:2c:
ce:41:d4:63:30:28:59:8b:18:8b:df:c7:8f:a7:de:
c1:05:f6:69:cb:7d:39:e4:0e:bc:b4:ad:03:28:c7:
3c:83:39:ef:a7:c3:3d:42:ee:99:35:63:20:d9:ec:
4b:5b:e4:8d:60:e0:b6:12:bc:56:25:54:c3:8e:63:
88:15:ee:b6:7c:52:8c:64:58:7a:54:d8:bf:99:a7:
b2:02:90:96:72:5c:3b:c2:ec:a9:5b:e0:3f:ae:a3:
bf:ab:e7:cb:99:ab:4c:53:b3:60:a3:6b:aa:51:75:
c9:ba:6f:37:f8:a5:06:a6:28:55:2c:1f:06:01:9e:
99:0b:d5:5d:f7:f2:a6:65:bf:3c:d3:07:4d:6e:3c:
e0:88:5e:d5:c8:e7:2b:5e:01:fe:56:9b:30:f8:ef:
f0:ae:11:5f:06:5e:15:c1:99:4e:3b:50:d8:2f:50:
9b:77:e9:11:d2:dd:12:da:14:d3:8b:75:8f:da:8f:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DD:EB:4A:96:49:A1:1F:88:87:EE:AC:5F:9E:BC:FD:0E:64:E4:89
X509v3 Authority Key Identifier:
keyid:26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a7:bd:54:e9:d1:d0:5a:aa:a3:d7:74:91:e4:49:04:e5:67:
f3:4d:ca:68:60:97:28:60:92:5f:de:fe:57:d6:5c:10:24:ef:
cd:87:1f:81:8d:38:f3:62:44:85:84:53:d6:46:53:11:ed:d3:
75:b0:5b:8a:05:a3:3c:01:2e:b5:42:cd:75:42:13:28:9f:83:
7b:c8:d0:e0:2e:42:5f:f6:c2:00:89:b2:88:94:da:ca:29:98:
f2:d1:0a:c1:1a:da:a0:20:65:9b:79:02:27:c0:ee:9d:a4:11:
7e:e8:b5:76:43:19:7b:03:39:5d:51:86:0f:eb:7d:fb:02:f9:
2f:f1:b4:79:22:b3:37:2e:11:f7:44:09:25:37:1e:65:19:4f:
c6:8a:ee:d2:9c:f5:9c:e9:44:62:42:c7:a7:4c:77:2f:34:57:
cc:54:71:00:57:86:83:24:e4:e5:83:57:12:9f:2d:e8:34:76:
97:ce:e0:e5:30:eb:09:09:64:34:ba:66:10:a7:48:2b:f7:54:
f6:8d:e4:93:92:14:88:ce:b4:4e:77:a7:c9:3f:f2:37:78:d8:
cc:ff:34:d3:d3:6c:08:62:e7:9d:47:eb:09:84:32:24:54:cf:
f7:35:84:80:9b:54:50:72:5b:ea:15:88:79:01:f8:2d:50:97:
9f:80:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:09:01 2026 by rpki-client