Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
File: 6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft (raw, json)
Hash identifier: c4jHSSKrTlyzTiGB6kso+M0jowGFUb1tbfot3am7/ss=
Subject key identifier: 3B:94:E6:20:1D:A8:B9:B8:AD:6A:62:BE:FB:38:7A:0A:5F:F6:81:4C
Authority key identifier: 64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8
Certificate issuer: /CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
Certificate serial: 4053BEEE15A0914BA43779D7EBBFE6A5252B847C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
Manifest number: BE
Signing time: Sun 15 Nov 2026 05:45:13 +0000
Manifest this update: Sun 15 Nov 2026 05:40:13 +0000
Manifest next update: Mon 16 Nov 2026 08:55:13 +0000
Files and hashes: 1: 6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl (hash: WZEn46UAH7n7aRQWfifDkNBDeVvCAzx0qDKLRBB3/7U=)
2: AS219458.asa (hash: GU61pR45wu8HIE8dLfaSZA9t9gnGAcZbJ0fm1zAhAoE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl
rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:53:be:ee:15:a0:91:4b:a4:37:79:d7:eb:bf:e6:a5:25:2b:84:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
Validity
Not Before: Nov 15 05:40:13 2026 GMT
Not After : Nov 16 08:55:13 2026 GMT
Subject: CN=3B94E6201DA8B9B8AD6A62BEFB387A0A5FF6814C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:9c:68:79:46:79:93:4d:00:b4:b3:4f:79:
f9:38:0f:ef:d2:f4:09:76:da:88:c4:64:2e:ce:d5:
9b:09:e6:ce:92:07:b7:d0:23:c8:7f:d2:80:6e:8d:
02:2d:c6:1d:56:15:4c:76:ce:2d:6f:3c:18:b7:de:
d0:53:1b:3a:53:cb:fa:06:98:b2:b4:95:cf:64:63:
6f:8e:c0:d4:fd:68:d0:98:b2:23:7e:de:c5:ac:cc:
49:27:4d:c6:a5:2c:cc:29:fa:00:57:31:71:b3:58:
cc:d4:5e:ef:6e:65:4e:0f:ba:7f:9d:63:1b:13:29:
ea:1b:38:4a:8d:eb:ac:7f:74:c0:36:41:94:46:e8:
e2:8a:0f:44:8a:9e:f1:3d:38:95:a9:83:bd:bf:b7:
d8:21:91:d6:74:35:68:4f:25:a2:f0:4e:c3:e5:f4:
ff:9a:ba:29:f2:34:bb:44:c8:92:2d:ae:f4:5d:88:
3c:74:b1:86:89:9e:07:7a:52:b9:ca:0e:3a:9d:02:
73:6c:07:45:61:eb:8d:c0:56:14:8e:c1:a8:c1:50:
97:b9:f9:ba:67:04:5e:73:4c:56:d4:54:69:8b:b7:
d3:da:38:1d:fd:2d:f9:e5:9b:e9:17:2b:6d:e5:2e:
21:e7:c9:75:41:77:bf:69:d8:c3:c3:39:fa:de:2f:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:94:E6:20:1D:A8:B9:B8:AD:6A:62:BE:FB:38:7A:0A:5F:F6:81:4C
X509v3 Authority Key Identifier:
keyid:64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2d:db:c3:ad:ec:13:d1:c3:1d:62:82:27:93:10:58:3c:2c:
1b:97:bc:1b:c9:6f:06:e2:d4:78:91:1c:b1:23:0d:6f:22:0d:
a4:9b:1a:be:42:42:a7:65:11:d1:0c:e9:b0:6d:b7:dd:01:f1:
e4:39:d9:a8:8b:cd:d8:ae:c6:be:89:d9:5c:0c:16:cf:92:18:
10:e4:8f:11:1b:a7:25:71:55:4d:19:b4:65:25:ac:a0:23:aa:
13:7c:5c:cb:8c:e4:bb:b0:ad:a8:a5:88:d3:15:0b:b9:6a:28:
89:23:0b:a7:95:d5:fe:ac:8b:cf:82:24:f8:df:7f:ac:2d:38:
39:eb:76:33:5b:5e:cd:3d:e7:f8:fe:94:c2:e4:26:6f:4d:9c:
fe:1c:0a:a4:69:49:76:b2:6d:3d:1f:26:71:6f:ac:5a:de:14:
df:45:0b:3b:82:6b:0f:1e:b4:6c:16:3d:8b:96:2b:31:4e:a9:
15:0d:43:89:f9:49:7f:fc:ea:c1:ad:52:cd:19:bb:ab:32:47:
21:47:d2:fb:51:a5:c0:1e:8c:55:c8:4c:62:bf:c5:94:82:56:
fd:62:ed:96:d7:04:a3:71:fa:7d:71:bd:57:3a:16:91:dd:57:
dc:2c:f6:26:b6:7b:ab:de:01:f3:6a:39:47:b6:42:72:ab:d9:
5c:50:04:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:24 2026 by rpki-client