Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/0/70989A3361BEC6D8A76E7CC2760D95F3201D9BF4.mft
File: 70989A3361BEC6D8A76E7CC2760D95F3201D9BF4.mft (raw, json)
Hash identifier: dW6h3djXx7Nuk1NbaDFenemvGr3um9MfHyOlPEvY0vU=
Subject key identifier: 2F:15:1B:A3:69:A5:FF:39:C6:7A:50:B1:AD:A0:66:EF:DF:94:93:5F
Authority key identifier: 70:98:9A:33:61:BE:C6:D8:A7:6E:7C:C2:76:0D:95:F3:20:1D:9B:F4
Certificate issuer: /CN=70989a3361bec6d8a76e7cc2760d95f3201d9bf4
Certificate serial: 75A97479AD203BAD28620975AD4CBBCF01593043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJiaM2G-xtinbnzCdg2V8yAdm_Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/0/70989A3361BEC6D8A76E7CC2760D95F3201D9BF4.mft
Manifest number: 03
Signing time: Wed 14 Oct 2026 14:19:14 +0000
Manifest this update: Wed 14 Oct 2026 14:14:14 +0000
Manifest next update: Thu 15 Oct 2026 17:29:14 +0000
Files and hashes: 1: 70989A3361BEC6D8A76E7CC2760D95F3201D9BF4.crl (hash: de4vwxoic2UqCT/o39BKo62RUAkpNktByg1XJSGe7vw=)
2: AS197324.asa (hash: YPi7UJW2e7A8on4QfSOy1dujT8vTLbDdy4+vzanJa2M=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/0/70989A3361BEC6D8A76E7CC2760D95F3201D9BF4.crl
rsync://rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/0/70989A3361BEC6D8A76E7CC2760D95F3201D9BF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJiaM2G-xtinbnzCdg2V8yAdm_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 17:29:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a9:74:79:ad:20:3b:ad:28:62:09:75:ad:4c:bb:cf:01:59:30:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70989a3361bec6d8a76e7cc2760d95f3201d9bf4
Validity
Not Before: Oct 14 14:14:14 2026 GMT
Not After : Oct 15 17:29:14 2026 GMT
Subject: CN=2F151BA369A5FF39C67A50B1ADA066EFDF94935F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:3b:c5:cd:ff:df:f7:91:92:ed:39:77:2e:
c0:7b:dd:aa:b8:48:7f:24:b6:05:f8:d5:63:1c:37:
1b:9e:e0:bc:ff:02:53:ad:3c:5b:30:e7:3a:a5:67:
b2:58:3c:47:48:67:ab:5a:4c:c1:d1:1f:a0:0a:d6:
57:65:34:99:f1:3d:61:ae:2f:0f:ee:a2:fb:19:cf:
22:97:fd:98:40:3d:ed:f4:7a:4f:6c:86:49:ce:55:
01:9d:8e:b4:5d:b2:2a:ef:b7:a2:bc:cd:94:86:fb:
a3:6c:7c:0d:c6:4c:22:7c:4e:ce:63:23:74:e3:49:
40:d2:a1:28:25:0f:a8:2a:e4:48:ac:a9:16:e0:48:
b1:a2:58:f8:37:1a:1e:f4:cc:cd:38:fb:ee:c1:1f:
52:8f:29:9e:78:51:ec:28:b8:85:e2:66:17:f3:ec:
79:13:ae:9c:85:62:e6:b6:4e:db:49:f4:23:31:b8:
d0:97:48:6c:8a:5d:00:96:73:89:19:ee:80:17:0f:
2d:12:01:6b:22:ec:ed:a1:4d:ac:fe:0e:5a:a8:e9:
72:f1:d6:24:ac:7d:c0:35:d3:db:df:11:5a:40:fc:
c9:4b:19:d5:ed:6a:d8:76:bb:cf:3d:7e:19:f9:f5:
de:08:4e:17:c3:d9:b8:f5:51:9b:9f:87:00:aa:63:
cd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:15:1B:A3:69:A5:FF:39:C6:7A:50:B1:AD:A0:66:EF:DF:94:93:5F
X509v3 Authority Key Identifier:
keyid:70:98:9A:33:61:BE:C6:D8:A7:6E:7C:C2:76:0D:95:F3:20:1D:9B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/0/70989A3361BEC6D8A76E7CC2760D95F3201D9BF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJiaM2G-xtinbnzCdg2V8yAdm_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a83d1ef2-4d97-4343-a77f-a332542bff56/0/70989A3361BEC6D8A76E7CC2760D95F3201D9BF4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:73:5c:79:ab:37:3a:52:11:10:3c:2c:bf:41:ef:ee:9c:50:
08:8d:66:11:30:0c:4f:ce:76:cc:66:2f:e1:4e:35:da:a3:59:
7a:9c:dc:1e:30:74:d9:57:90:e9:8c:e1:83:1d:a5:d1:d6:55:
4a:06:5b:70:39:c6:4a:97:5a:10:69:fd:2b:7f:f5:18:52:64:
a6:fc:87:7f:a6:bb:8e:6d:f0:c7:fb:a6:c4:da:e0:48:4b:af:
9a:7b:0c:5f:57:f7:34:31:21:2f:d3:33:ec:46:ef:45:5a:1a:
7b:8a:7b:56:ea:d6:f0:89:9f:1b:cf:7c:22:6f:83:c9:b7:3f:
fe:ee:aa:36:55:7d:ea:a6:fc:f0:b1:15:ca:39:c8:ec:6e:3d:
29:ec:7f:0b:1a:85:11:a1:cd:82:21:5f:54:4f:8d:18:fb:0e:
2e:0d:00:0c:33:6a:fb:7d:55:0f:d6:b1:28:8c:33:aa:37:c1:
d4:56:a4:b0:28:1d:d0:59:60:29:52:81:15:f5:28:79:58:6f:
27:44:42:1d:fc:25:aa:33:52:a0:4a:c5:1b:95:e4:46:49:95:
c5:52:a0:39:f0:2c:80:d2:a2:f5:1e:04:a3:c2:4f:c9:b7:b4:
ae:65:92:97:86:de:65:17:f8:e5:48:c1:95:53:a6:78:5b:fe:
a7:24:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:05:16 2026 by rpki-client