
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier: ZUqPJQSMSC3pOyJj5GZDI6LgOBWTrYEXAfFUKNWv4JU=
Subject key identifier: 0F:81:F0:94:ED:AB:8E:C7:41:40:82:33:8F:16:25:15:75:35:1A:BC
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial: 682EEC5D5E18DE08ACBFE61F71C66A6D3FF94752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number: 04B4
Signing time: Tue 28 Jul 2026 07:08:32 +0000
Manifest this update: Tue 28 Jul 2026 07:03:32 +0000
Manifest next update: Wed 29 Jul 2026 07:18:32 +0000
Files and hashes: 1: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: MA6NPPoujdiQWojyCVLJyxDFh4C42V7H1GeWERt+WOo=)
2: AS205329.asa (hash: VGL8fNaLY3qFu9mP5r7NvYdgKqN6s2IJxTCOZNeTahk=)
3: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: WkPD0GHz22Ar/7Lz7AzdfJzL9cWHwmlJEh3AWym6FDQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2e:ec:5d:5e:18:de:08:ac:bf:e6:1f:71:c6:6a:6d:3f:f9:47:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Validity
Not Before: Jul 28 07:03:32 2026 GMT
Not After : Jul 29 07:18:32 2026 GMT
Subject: CN=0F81F094EDAB8EC7414082338F16251575351ABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:bf:d4:f6:e2:94:d8:23:76:2a:a0:40:f4:
eb:9d:32:ee:f8:18:53:b4:fd:54:31:17:95:40:a5:
04:70:c4:53:9a:d7:0d:8a:14:e0:d4:76:01:12:d4:
19:9e:e9:ff:6c:5a:a3:d8:76:48:62:9a:6e:2c:b9:
3b:3b:f4:e9:25:b4:90:5c:3d:d0:90:90:86:b5:14:
4c:83:4b:c8:e6:04:30:d5:38:3e:c6:8f:b5:a1:92:
0b:2d:75:07:58:c8:05:a9:74:10:ec:4c:d8:a7:da:
b8:4d:39:25:ec:1d:26:7f:ac:18:8d:a4:9b:3e:98:
93:89:4c:42:89:fb:41:33:d6:93:1d:7c:8b:3e:6d:
7b:c7:48:86:ce:af:7e:6f:40:fd:f5:57:70:fe:60:
0e:82:09:7e:71:53:05:24:f5:66:54:8c:fb:bf:67:
15:fe:f8:1a:5d:39:ff:ff:15:c6:e5:e2:2a:fc:cf:
b1:c4:c3:b7:e6:79:e7:b7:cc:7c:71:a0:2a:52:6a:
f9:80:23:60:1c:30:45:5a:2b:2a:18:47:ba:b1:5c:
5c:60:06:14:14:5e:71:69:d9:37:fe:90:cc:59:46:
d8:19:b1:37:8a:a2:fe:70:b9:0c:11:73:b1:6a:00:
db:4b:61:7f:0a:5a:d3:df:72:30:46:3a:13:29:89:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:81:F0:94:ED:AB:8E:C7:41:40:82:33:8F:16:25:15:75:35:1A:BC
X509v3 Authority Key Identifier:
keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0e:3a:ad:a0:54:b7:c0:0c:7b:f8:88:b3:c3:f3:78:9d:b3:
64:3e:53:45:2a:ac:4d:79:f8:b0:38:1a:da:da:b3:24:46:be:
c5:1a:5c:e1:d9:43:a5:2e:83:fb:66:be:8e:65:82:3c:6b:bc:
31:c0:4c:16:bc:37:a5:70:dc:e6:17:16:51:58:bd:bf:f9:db:
02:41:26:92:a4:d3:47:df:dc:ea:6c:b9:56:8a:63:2e:26:ee:
71:2f:42:51:c9:50:6e:53:81:94:c6:91:53:f8:2a:40:8f:10:
ac:05:af:bf:65:41:92:8e:30:87:4c:2e:62:7b:68:cf:b5:8a:
6a:c7:5e:4b:94:aa:9b:c5:01:c0:1d:4b:ca:34:e2:82:b3:d3:
a4:80:31:a0:05:fc:d0:24:66:f8:25:7d:29:cd:b2:d9:3b:bd:
83:f6:56:55:5e:0b:00:11:4d:48:90:79:8b:f7:66:b2:ff:da:
54:60:fb:3c:37:70:d1:83:9b:d4:60:81:2f:3b:b8:4b:19:6e:
81:00:04:84:72:35:ac:6a:5a:74:50:75:fd:c9:c9:42:b9:96:
14:cc:7b:b7:fc:7e:7d:52:17:42:37:8d:21:f2:5e:6e:ea:c2:
e6:50:3d:7f:32:83:94:6a:f8:18:7d:1d:59:63:e3:f6:a0:e1:
02:2c:b5:b3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUaC7sXV4Y3gisv+YfccZqbT/5R1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmYwOGNlY2Q1ZTU3Y2JhMGU2OGJjYTdmNzQwMWJkNWVk
YjM4N2ZiODAeFw0yNjA3MjgwNzAzMzJaFw0yNjA3MjkwNzE4MzJaMDMxMTAvBgNV
BAMTKDBGODFGMDk0RURBQjhFQzc0MTQwODIzMzhGMTYyNTE1NzUzNTFBQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8u7/U9uKU2CN2KqBA9OudMu74
GFO0/VQxF5VApQRwxFOa1w2KFODUdgES1Bme6f9sWqPYdkhimm4suTs79OkltJBc
PdCQkIa1FEyDS8jmBDDVOD7Gj7WhkgstdQdYyAWpdBDsTNin2rhNOSXsHSZ/rBiN
pJs+mJOJTEKJ+0Ez1pMdfIs+bXvHSIbOr35vQP31V3D+YA6CCX5xUwUk9WZUjPu/
ZxX++BpdOf//Fcbl4ir8z7HEw7fmeee3zHxxoCpSavmAI2AcMEVaKyoYR7qxXFxg
BhQUXnFp2Tf+kMxZRtgZsTeKov5wuQwRc7FqANtLYX8KWtPfcjBGOhMpiSn3AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUD4HwlO2rjsdBQIIzjxYlFXU1GrwwHwYDVR0j
BBgwFoAULwjOzV5Xy6Dmi8p/dAG9Xts4f7gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2
OTgwLzIvMkYwOENFQ0Q1RTU3Q0JBMEU2OEJDQTdGNzQwMUJENUVEQjM4N0ZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0x3ak96VjVYeTZEbWk4cF9kQUc5WHRz
NGY3Zy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h
Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMi8yRjA4Q0VDRDVFNTdDQkEwRTY4
QkNBN0Y3NDAxQkQ1RURCMzg3RkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOA46raBUt8AMe/iIs8Pz
eJ2zZD5TRSqsTXn4sDga2tqzJEa+xRpc4dlDpS6D+2a+jmWCPGu8McBMFrw3pXDc
5hcWUVi9v/nbAkEmkqTTR9/c6my5VopjLibucS9CUclQblOBlMaRU/gqQI8QrAWv
v2VBko4wh0wuYntoz7WKasdeS5Sqm8UBwB1LyjTigrPTpIAxoAX80CRm+CV9Kc2y
2Tu9g/ZWVV4LABFNSJB5i/dmsv/aVGD7PDdw0YOb1GCBLzu4SxlugQAEhHI1rGpa
dFB1/cnJQrmWFMx7t/x+fVIXQjeNIfJeburC5lA9fzKDlGr4GH0dWWPj9qDhAiy1
sw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:01 2026 by rpki-client