
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier: QCE/7UNoIcGUBFs+wDCNA8EJ/jIOPh/cYorsM1jkd2c=
Subject key identifier: 30:51:D6:B9:2F:B8:77:71:33:80:02:87:DF:BB:25:0F:B4:D9:DC:BA
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer: /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial: 53AC4306D150C0D9FEC0518AE99E43BD99F2492C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number: 0246
Signing time: Mon 21 Sep 2026 11:21:38 +0000
Manifest this update: Mon 21 Sep 2026 11:16:38 +0000
Manifest next update: Tue 22 Sep 2026 11:48:38 +0000
Files and hashes: 1: AS211695.asa (hash: o//07UHBzOBS1SPe9Mwe9zZ7Di/K3uBLmU6SISwIQJo=)
2: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: tMWJFCHJyM4adxINM+Rt1gNuXaZdpGX6WZaALmYB7Qg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ac:43:06:d1:50:c0:d9:fe:c0:51:8a:e9:9e:43:bd:99:f2:49:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Validity
Not Before: Sep 21 11:16:38 2026 GMT
Not After : Sep 22 11:48:38 2026 GMT
Subject: CN=3051D6B92FB8777133800287DFBB250FB4D9DCBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:b2:79:97:b8:31:6e:09:f5:cf:81:8f:44:
05:4d:53:48:db:46:02:e5:ff:ec:ca:ec:54:5f:37:
93:40:7d:ea:53:74:9d:aa:b4:91:45:74:71:17:1e:
49:7b:c7:b3:ff:bd:73:3c:1c:43:84:69:2b:14:3a:
e1:53:4c:9b:e9:e9:b3:60:82:d6:ef:64:b3:7d:cf:
33:42:96:33:3f:f6:77:88:24:4e:16:45:da:2f:a9:
04:a4:f6:30:bf:33:2e:68:ec:1c:cd:2c:e8:15:81:
56:6d:17:28:56:fb:44:cc:c7:b6:bc:9c:21:3f:75:
0e:e2:ec:b2:dc:71:71:85:22:2f:4f:80:e6:6e:d2:
ca:e9:42:d1:23:a7:56:e8:10:b6:1f:9b:78:e6:a9:
f0:ef:03:87:03:01:59:cf:9d:4b:e7:13:81:31:77:
5f:f0:b3:84:a3:45:5e:e3:10:e2:58:a3:bc:42:f2:
cc:f4:ca:e1:a0:8c:74:de:25:f2:69:4e:ab:80:50:
70:7c:d8:ed:b1:23:66:3b:bf:b3:4e:b0:41:16:b8:
7c:a1:32:16:76:8c:04:5b:74:fd:c0:db:57:66:a3:
dc:0e:1a:d7:0f:ff:b3:ba:7b:98:b1:7e:bd:4e:86:
35:91:b4:33:23:94:8d:6a:76:e6:93:6d:75:6d:72:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:51:D6:B9:2F:B8:77:71:33:80:02:87:DF:BB:25:0F:B4:D9:DC:BA
X509v3 Authority Key Identifier:
keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:11:4c:32:33:db:15:86:aa:02:92:3c:2b:6f:59:22:20:98:
c6:43:e8:61:51:f7:1e:9a:4d:69:b7:ff:aa:65:f5:78:c2:57:
4d:a3:99:f5:36:78:b4:9c:9f:68:49:00:86:d3:51:78:df:d3:
ac:82:5c:a0:aa:78:c9:dd:f1:78:41:de:fb:6b:77:a7:cd:a9:
cc:f0:44:02:b4:83:ff:96:a0:f4:b9:2e:06:68:5e:c3:36:8e:
52:7c:d7:4e:b8:24:64:e5:d8:34:da:92:25:44:93:05:2a:03:
7a:8e:af:f0:68:f5:ee:90:dc:f5:a6:2f:31:69:6c:55:84:92:
f8:78:40:95:fc:06:2b:79:22:c4:cc:75:e6:6a:dc:b9:d7:42:
64:3d:4b:9e:db:c0:3d:87:71:ba:29:19:a0:0c:19:2b:aa:f2:
d5:7d:ed:15:b8:c2:5e:1b:1a:e4:0e:99:f3:e7:82:ff:b2:30:
2f:e6:83:d1:7a:b8:a3:cf:f3:c7:22:4f:0a:96:ac:53:5b:da:
ef:40:d4:28:33:7f:20:83:21:86:ac:2f:3e:d6:27:50:7c:35:
cb:35:74:ff:f7:af:18:40:dc:05:c9:d8:db:30:64:4a:0d:0d:
4c:26:e6:78:18:f2:36:76:06:f6:14:98:41:00:c0:fd:98:11:
4c:5a:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:35 2026 by rpki-client