Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier: kjYUx442LP4fTTsPr9qNnNN0N3GiKfWBHUq1VVHeXJ4=
Subject key identifier: 29:71:3A:06:02:66:D3:F2:12:08:7E:B3:D3:BB:10:D8:41:82:DD:0C
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer: /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial: 5C462CBB985D2EF3B28C173BED3A44C90DDC2F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number: 020D
Signing time: Sat 18 Apr 2026 17:23:07 +0000
Manifest this update: Sat 18 Apr 2026 17:18:07 +0000
Manifest next update: Sun 19 Apr 2026 18:24:07 +0000
Files and hashes: 1: AS211695.asa (hash: ECDR80b7l9ugdGd0RMl+JN1o634bDwO+GoAm6/dGgxI=)
2: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: mMmcm0AKsRXflM99lQOGvLYnOTkLq0uv/tqid7lBrJA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 18:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:46:2c:bb:98:5d:2e:f3:b2:8c:17:3b:ed:3a:44:c9:0d:dc:2f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Validity
Not Before: Apr 18 17:18:07 2026 GMT
Not After : Apr 19 18:24:07 2026 GMT
Subject: CN=29713A060266D3F212087EB3D3BB10D84182DD0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9c:da:91:75:42:f0:d2:52:24:94:ae:94:c2:
f8:30:38:fc:f5:7c:5d:f4:01:6d:5d:20:3e:c0:48:
b1:4b:a1:41:03:95:77:e6:b2:a2:49:e0:6d:20:c9:
a2:75:b6:84:91:d3:c8:ed:3c:d5:d4:52:55:bc:4c:
7e:18:3a:df:6a:fc:36:81:1e:ff:67:37:38:1e:07:
c4:5c:ca:d7:6c:66:84:53:3c:ad:06:b9:0c:19:8e:
43:3c:13:3c:3f:a6:62:2d:2f:c3:5d:ca:80:08:98:
b5:12:34:fe:53:9f:b6:5f:ff:34:1d:ca:62:2c:9e:
a5:0d:79:49:23:64:51:30:ec:5e:dd:96:c4:4e:3c:
3e:a5:1f:0f:0d:cb:8e:9e:71:53:ac:6e:c5:77:7c:
b1:14:ae:7c:6e:e7:74:5e:d5:76:22:01:4c:8a:fc:
a8:90:41:4f:c9:2c:cf:1d:73:63:02:ee:36:49:d1:
84:40:b7:d1:1b:f3:57:4b:71:45:cd:1e:de:3e:a2:
90:d6:d6:f9:e6:56:fd:aa:b4:fd:ca:bc:4e:80:a2:
1e:91:91:26:d9:9d:0f:4f:68:1e:5a:ba:76:ab:f6:
8b:0a:be:86:97:5d:08:cf:39:41:7a:ca:ed:08:b5:
99:ba:ab:39:29:d7:9a:f3:cb:7d:63:8a:41:87:c3:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:71:3A:06:02:66:D3:F2:12:08:7E:B3:D3:BB:10:D8:41:82:DD:0C
X509v3 Authority Key Identifier:
keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ee:ae:2b:b6:42:8d:3c:87:09:c7:bf:2f:29:fe:fb:40:fc:
20:7b:25:80:28:18:bf:ac:4b:4a:f0:e1:b2:fa:d3:1b:43:1d:
43:fb:00:e7:24:b1:60:d4:f5:62:07:54:5d:7b:dd:b4:31:e1:
9c:ea:c7:56:8b:b5:b8:97:95:1b:b0:f0:80:25:22:a5:74:f4:
ab:dd:5f:f3:3c:f3:a5:71:af:4f:78:b3:33:59:e6:f2:f3:6d:
86:1d:ef:5b:ef:8b:5a:97:ae:de:b3:32:7e:72:68:73:99:e1:
1c:8c:df:58:ce:89:08:45:af:0a:88:7e:49:17:c8:cb:f8:bb:
a3:06:e2:69:b5:12:2d:1d:8c:b6:60:42:b9:ab:7c:85:5a:fb:
f6:2b:0b:57:b5:e1:b0:ac:c5:77:36:33:36:50:0c:fe:31:9e:
7c:69:8f:6a:3b:f7:be:f9:16:b1:e7:bb:0e:3c:46:ff:fd:3a:
e7:a4:66:15:7a:66:4a:fd:e1:6f:03:a4:50:54:90:f4:be:49:
b9:43:47:98:5c:ba:f8:70:7a:85:a6:f5:6a:5b:59:78:18:dc:
57:73:da:a5:aa:19:f2:40:79:40:38:c1:82:68:96:cd:fd:95:
a9:1b:f0:6d:74:6a:a1:de:e6:ac:c7:1c:d4:57:4c:4f:13:e7:
a2:e9:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:47:54 2026 by rpki-client