Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier: EAZ2Xg3sFtw23pLp+B32AOxLyU1sf7hIf6M+8SzwnN4=
Subject key identifier: D6:07:4C:40:33:02:4A:0D:79:8B:02:DD:98:B0:27:A1:8F:C1:F0:9E
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer: /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial: 20D1556A93AB75071C39C4AFED065F51D2603633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number: 01CC
Signing time: Sun 01 Mar 2026 06:50:46 +0000
Manifest this update: Sun 01 Mar 2026 06:45:46 +0000
Manifest next update: Mon 02 Mar 2026 09:54:46 +0000
Files and hashes: 1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: 5B5pWDNE0unbt9eOJC2BXxuHjd+sTevTHJNgpvT4Z64=)
2: AS211695.asa (hash: 28JSq2d0bdBBVofVa06NM+Q3rZAfBJOiM+L29FXOPWg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d1:55:6a:93:ab:75:07:1c:39:c4:af:ed:06:5f:51:d2:60:36:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Validity
Not Before: Mar 1 06:45:46 2026 GMT
Not After : Mar 2 09:54:46 2026 GMT
Subject: CN=D6074C4033024A0D798B02DD98B027A18FC1F09E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7a:13:96:af:cf:a8:6a:17:2b:34:2c:e7:11:
ee:28:a2:f7:1e:da:de:86:0f:8a:52:cd:4a:38:6d:
38:92:57:ca:3d:70:2b:66:5a:1d:c2:e8:2a:ae:d7:
b9:fa:1e:30:21:d0:ac:e5:c6:14:55:f8:c0:0f:15:
ab:7c:3b:64:e1:2c:81:dd:35:92:d0:d6:82:08:e0:
29:39:0e:20:93:2d:7d:4b:99:4c:ce:3a:b4:6a:8f:
55:3a:6a:c8:59:b1:5e:e9:f6:af:c9:d4:87:b3:d1:
d9:92:9b:6b:a3:04:0c:8f:50:7c:0e:74:dc:12:ac:
ab:4a:a9:da:df:94:d8:a9:fa:3b:5c:79:68:01:b9:
09:d3:1e:12:0b:68:f7:df:1d:a8:bd:79:b9:84:cb:
3d:c9:3a:c7:57:ff:e6:9e:14:bf:75:f5:8a:d6:0e:
13:c8:9f:61:64:2f:4b:32:11:5b:f4:89:61:c9:a2:
1f:41:fd:9b:b9:58:3c:b1:7a:53:de:68:8a:f6:83:
4c:d2:cf:7a:48:27:af:fe:64:a6:3a:9d:10:67:0b:
92:2a:b8:8c:72:43:8c:13:de:9f:15:7f:d1:fd:92:
83:69:37:c6:e0:e8:e6:6c:f4:fd:e3:73:15:dc:19:
39:46:d4:d5:3a:87:03:89:bc:98:d9:78:0a:c4:2a:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:07:4C:40:33:02:4A:0D:79:8B:02:DD:98:B0:27:A1:8F:C1:F0:9E
X509v3 Authority Key Identifier:
keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:95:ac:72:21:cb:67:9e:4d:1e:ec:f9:b6:a2:4e:4e:f1:8d:
b6:6a:ee:c6:64:97:25:08:91:ee:a2:c6:71:ba:f7:3b:77:89:
93:c1:57:fb:a8:93:7a:8c:1d:96:02:06:24:d5:32:9d:ac:70:
ad:28:dd:5b:c6:90:e7:dd:2c:35:35:67:84:91:b8:b6:8e:a4:
df:0e:1b:de:38:d3:42:5f:21:08:6d:81:c7:9f:7f:5a:7c:c3:
91:6f:54:3a:07:01:b1:07:de:40:65:46:4a:a0:71:ab:b6:9b:
4d:b2:4b:56:08:b6:bf:6e:a7:74:25:86:05:11:da:77:7f:9a:
35:9d:48:fd:12:8b:c6:d8:85:87:37:5d:2f:c7:7a:5d:9b:c0:
37:6a:71:85:02:b3:b5:5d:d8:84:d0:45:91:38:81:95:04:c0:
84:5c:4a:cd:9c:6d:bf:62:cb:04:b5:57:a9:05:3b:0d:61:64:
5a:ef:24:bb:d4:5b:6e:b8:28:19:8b:02:d6:a2:af:0d:cb:dd:
83:ea:a4:6c:6e:ba:9a:bf:b9:ac:50:64:c7:d9:41:f9:95:ea:
62:d3:77:26:f9:e0:18:0f:14:47:19:52:1e:19:aa:2b:c1:c9:
22:fa:91:92:de:f3:4a:a4:32:15:f6:3b:04:e8:ce:a2:9b:3e:
05:07:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:13 2026 by rpki-client