Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier: hhofQVOgyWO3bbeHZopYGJaKQaLMOPqll6HG1RHbssU=
Subject key identifier: 7B:E0:1E:99:55:36:FA:1F:D1:16:7F:FC:81:81:19:33:CD:99:E8:91
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer: /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial: 70FB7836E1A0A59DF87623AC7A482D0AD0563B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number: 0303
Signing time: Mon 21 Sep 2026 16:26:24 +0000
Manifest this update: Mon 21 Sep 2026 16:21:24 +0000
Manifest next update: Tue 22 Sep 2026 20:12:24 +0000
Files and hashes: 1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: Yr+uPkrzSxSd1Vs8c9KpR+bdwmyV0TtODBa93vWrNG8=)
2: AS215288.asa (hash: +M2OelxzWMdvs7C8TWLEAVCzoJw+PehI60QsibMmUe0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fb:78:36:e1:a0:a5:9d:f8:76:23:ac:7a:48:2d:0a:d0:56:3b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Validity
Not Before: Sep 21 16:21:24 2026 GMT
Not After : Sep 22 20:12:24 2026 GMT
Subject: CN=7BE01E995536FA1FD1167FFC81811933CD99E891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d4:18:1c:54:00:89:41:0f:15:91:aa:19:92:
64:c6:12:66:59:cc:4d:76:38:00:bd:9b:e3:87:80:
5f:4e:e5:6f:73:2b:0d:1e:32:d4:c4:e2:ae:57:b4:
7d:46:f1:82:4a:cc:77:9d:98:0a:4b:de:4d:3e:ea:
92:14:38:b2:a3:7c:64:0d:90:b4:d3:dd:b7:48:e0:
c2:dc:1f:83:1c:a8:ba:10:e8:29:3f:78:62:e2:76:
ec:7c:e5:20:41:1b:bf:a4:f0:af:10:26:63:6b:94:
4e:f7:7e:bb:03:97:55:95:d8:c3:9d:5f:41:94:fa:
1e:bf:99:63:cf:cf:17:dd:60:1d:b2:a9:87:de:89:
d2:30:13:a9:47:c0:9d:55:59:de:13:4e:df:5a:02:
10:b7:b4:8e:9b:09:1a:c5:e8:b4:a2:c3:96:9f:92:
34:12:8b:39:3e:9c:a3:ef:80:e3:bf:c5:18:a9:7b:
40:6b:92:7e:22:3a:ed:29:ed:c5:ce:f8:34:6d:2b:
a7:38:68:d4:d3:b0:82:32:5f:82:65:e3:f9:80:5c:
de:36:a5:41:61:59:b1:1e:3d:cc:ab:77:38:76:1e:
64:95:b4:73:2d:87:fb:be:6d:46:4b:1f:5e:b8:95:
96:e7:47:b8:4b:49:81:1b:4a:be:af:12:42:64:66:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E0:1E:99:55:36:FA:1F:D1:16:7F:FC:81:81:19:33:CD:99:E8:91
X509v3 Authority Key Identifier:
keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:54:b3:e8:c4:a5:b2:79:b1:5d:69:b4:98:f5:c8:bb:cd:4b:
ce:c4:4d:1c:be:4e:1a:34:fc:ae:69:6b:8c:6c:fe:92:c2:32:
cb:1a:de:a1:bf:e8:16:4b:11:25:86:f9:f7:e2:d3:97:42:41:
98:17:af:c3:12:0f:af:80:fa:0a:15:c0:fe:13:2d:3c:7a:1d:
c0:a4:61:62:ba:7c:db:76:b8:53:10:08:e3:2e:51:2c:e6:31:
ad:7d:0b:f4:c0:18:ea:57:ce:cd:0f:f8:4f:f1:36:f7:a3:7a:
1b:17:ba:40:55:b1:ae:b2:cc:e7:af:0a:77:1d:ec:2e:78:e5:
b3:c7:2e:0d:70:00:63:85:66:41:e1:1a:49:18:53:af:16:dc:
cd:18:2f:18:71:8d:4f:62:7e:5e:aa:db:1d:3a:87:6c:8b:51:
68:bb:82:e8:96:14:c9:3b:89:c8:95:dd:96:9e:85:2c:f0:c1:
9a:8c:3b:b0:ea:9d:51:8d:27:15:94:0e:56:57:7a:82:c5:04:
b5:90:3d:48:86:9b:bf:a8:e0:91:1c:b3:b2:17:c5:67:be:7f:
cc:a9:48:e6:0e:13:73:32:3a:19:18:62:e5:ba:79:38:0b:48:
31:59:f3:90:0a:c4:aa:6b:58:58:4e:a9:d2:71:2e:cb:7e:f7:
1b:ca:13:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:23:32 2026 by rpki-client