Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
File: 6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft (raw, json)
Hash identifier: XqN8TilvijEnV48HoosYIGAsHAZ3qxJXCeTRGWzdBtU=
Subject key identifier: 75:57:77:9A:5A:B0:12:50:5D:37:A4:C1:0B:00:77:BD:A2:B6:8B:57
Authority key identifier: 64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8
Certificate issuer: /CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
Certificate serial: 7BF29C96363DE9A04877987B16E1D7863B5F843C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
Manifest number: 2A
Signing time: Mon 27 Jul 2026 23:58:15 +0000
Manifest this update: Mon 27 Jul 2026 23:53:15 +0000
Manifest next update: Wed 29 Jul 2026 02:12:15 +0000
Files and hashes: 1: AS219458.asa (hash: 4EDn/tW4OFUzDAzcEHCdkk68aVCpxOd51JItFT1I5cg=)
2: 6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl (hash: 3nqD9zQCcqAPoNv7EGVerqFUCcd3jIXu42zowfqzGwk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl
rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 02:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f2:9c:96:36:3d:e9:a0:48:77:98:7b:16:e1:d7:86:3b:5f:84:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6441dd2da21477ec8bf277d33be9072ce85f92a8
Validity
Not Before: Jul 27 23:53:15 2026 GMT
Not After : Jul 29 02:12:15 2026 GMT
Subject: CN=7557779A5AB012505D37A4C10B0077BDA2B68B57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c1:81:48:99:10:49:9d:a4:25:46:cd:14:ac:
7c:db:44:61:bb:ad:18:21:0d:c1:c9:2d:b2:47:16:
e9:ec:89:93:3b:fb:0c:c6:f1:e0:55:ce:7a:69:c9:
f4:ac:98:1c:a0:5e:cb:9e:16:c0:81:37:b7:05:2a:
fc:56:d8:60:77:a2:72:f4:ff:93:20:3f:bf:1d:f5:
d9:c2:9e:0c:ec:01:4c:c2:f2:53:e3:41:26:fd:f2:
4a:df:8f:7f:f6:f4:38:c5:9d:87:6e:25:13:91:7f:
93:af:25:10:47:a7:75:c9:45:cd:72:0a:8f:86:21:
57:7a:b1:fd:7a:01:32:47:e2:55:42:da:7b:f3:c0:
3b:1e:16:45:b4:8a:d4:24:ed:84:a6:dd:c7:43:e7:
dc:95:56:49:1b:d0:36:20:c9:f3:ad:1f:6f:73:6a:
83:c6:37:51:be:b7:53:c7:ea:04:05:87:56:47:53:
d4:94:a5:44:14:8d:7d:c1:a9:45:b5:35:cf:56:94:
1a:c5:52:ed:f0:10:c1:a0:22:2c:f5:ae:da:a0:6a:
f2:b2:b8:fe:91:2f:72:c4:9b:5e:13:2a:95:42:7b:
90:80:fe:7a:11:c4:bc:55:82:c3:22:b2:e8:73:93:
fb:1f:48:3f:8f:dc:08:6f:a9:ac:e1:57:e2:4c:67:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:57:77:9A:5A:B0:12:50:5D:37:A4:C1:0B:00:77:BD:A2:B6:8B:57
X509v3 Authority Key Identifier:
keyid:64:41:DD:2D:A2:14:77:EC:8B:F2:77:D3:3B:E9:07:2C:E8:5F:92:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEHdLaIUd-yL8nfTO-kHLOhfkqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af1b41cb-a37f-4d93-8856-4092afb22b17/0/6441DD2DA21477EC8BF277D33BE9072CE85F92A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b8:19:3e:0b:cc:78:d0:d1:f6:56:3d:64:13:2b:a2:1f:b1:
d6:62:52:90:8c:71:77:7c:2c:7f:12:3d:21:7e:f7:c1:dd:f2:
e5:74:12:04:c2:7a:b6:fb:fb:ba:82:ed:4a:c7:84:47:a0:e2:
d0:09:b4:c2:27:08:17:5b:b7:1a:fa:c4:9d:46:bd:bf:94:cd:
4b:da:12:72:8f:66:33:ce:5b:12:28:2f:68:05:3c:80:e6:40:
00:eb:67:6b:c8:9a:eb:b4:15:12:da:ba:7c:7e:27:d7:b4:b4:
c7:a4:c8:24:55:72:8f:da:ae:ea:e1:e8:4e:26:f8:06:ef:1c:
e3:06:88:d8:fc:03:34:9d:be:8a:76:e1:45:39:4f:91:03:6a:
c0:29:7b:a6:ba:57:13:fa:1d:64:ae:bf:03:f8:72:93:f3:94:
22:a4:78:b6:9f:96:ef:1e:dd:f1:1f:52:56:b3:92:72:bf:b6:
6e:54:bd:e7:8a:00:70:2c:da:84:79:4c:27:bf:1e:f1:2c:fe:
22:cc:3a:dc:cf:0a:93:de:ea:f5:bc:c5:79:18:60:3d:e1:9a:
fb:14:bf:54:32:10:ab:28:03:72:e4:62:f5:96:9d:36:7b:b0:
e9:0f:b0:0f:4c:a8:29:56:53:44:35:d0:a2:60:a3:3d:1e:e7:
67:47:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:36:37 2026 by rpki-client