Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier: RfViObYr3fTpYohOcCKUmMTuOvgt8ZZiQk+Rmii/7iw=
Subject key identifier: 57:A2:02:49:3A:D1:B7:B8:2B:08:D0:BA:5C:11:7C:4C:1F:38:5E:C8
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer: /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial: 4AF1143C1FA9F64BEF01B2E5580FFD34EFBCFD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number: 0452
Signing time: Mon 21 Sep 2026 10:25:46 +0000
Manifest this update: Mon 21 Sep 2026 10:20:46 +0000
Manifest next update: Tue 22 Sep 2026 13:02:46 +0000
Files and hashes: 1: AS214723.asa (hash: rkKLIM3Jzl++4c/N1MAbX2VnZd8jPZSTe5gZ4DgYJLI=)
2: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: 4iSiU9xSg1AIE9uqo9fzYizr1TsIthONekXeJvoeC4o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f1:14:3c:1f:a9:f6:4b:ef:01:b2:e5:58:0f:fd:34:ef:bc:fd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Validity
Not Before: Sep 21 10:20:46 2026 GMT
Not After : Sep 22 13:02:46 2026 GMT
Subject: CN=57A202493AD1B7B82B08D0BA5C117C4C1F385EC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:9c:fc:30:97:5b:85:80:33:ed:65:72:22:
af:fe:cb:4d:00:07:b8:cd:99:77:ad:23:a4:3e:cf:
80:64:f6:72:f1:1c:c1:83:b3:4c:9f:2a:70:59:d0:
2a:28:9b:c3:ec:39:c1:72:ff:1c:e2:78:96:42:02:
88:84:75:22:cb:d0:85:13:fd:a1:e0:77:69:6e:72:
19:74:47:9b:e6:32:e6:0a:50:8e:c8:9a:42:ef:66:
8b:09:03:fd:be:b5:e4:84:0b:e3:2d:04:fc:53:3c:
81:ed:39:bd:a6:3e:17:67:a7:5f:df:8d:d8:f9:fc:
be:66:45:d2:87:62:4f:04:17:96:ae:36:2f:11:91:
82:86:52:ea:1b:ce:12:9f:00:96:49:c7:05:b2:15:
be:ca:11:8c:a9:89:48:19:7e:2f:d6:eb:28:af:c5:
4a:1b:78:21:c3:9b:25:d6:61:e8:fa:c2:82:90:05:
4a:9c:5c:e7:03:92:fd:39:45:ec:b6:ff:f0:a8:c5:
21:2f:35:b4:ac:a9:d8:d9:d7:8c:4d:ca:df:fd:48:
99:45:f2:cc:72:b1:62:82:5a:e8:01:cb:84:13:6b:
38:de:7a:fe:c6:86:ef:54:33:60:e6:ac:b3:88:58:
59:11:d3:e0:52:35:43:bb:2b:35:d1:e7:1c:0d:0e:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A2:02:49:3A:D1:B7:B8:2B:08:D0:BA:5C:11:7C:4C:1F:38:5E:C8
X509v3 Authority Key Identifier:
keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:44:13:79:b1:db:89:17:65:80:f2:3e:65:bc:75:24:d7:6f:
20:ec:66:e6:af:70:77:7f:c6:c1:c9:39:17:c7:bf:2b:8d:1a:
34:f2:34:e6:e6:5f:fd:7d:72:2f:5b:4d:19:96:2d:d0:99:fd:
75:7c:28:15:c6:2a:fc:1c:b3:04:d4:13:16:54:2d:71:35:6d:
fc:27:fa:ff:23:c9:67:11:de:19:16:72:a8:8f:1b:74:c3:ce:
fb:51:07:cb:d5:e3:f8:d2:26:1b:ac:1b:62:1f:9c:18:6a:97:
64:77:af:b5:68:8e:1e:7c:f4:93:8b:d6:74:69:f9:64:70:8a:
08:7f:07:da:f8:a5:2a:ba:48:11:8e:00:f9:70:40:e0:a7:c9:
fe:b1:68:e7:e4:56:13:20:6d:04:1a:7f:3a:57:27:a8:9a:27:
eb:02:7a:27:b0:d6:21:de:ad:b3:d3:6f:2d:78:3a:d5:12:e2:
40:7b:b7:3f:f4:0f:70:2c:1c:85:4e:16:6a:2f:2d:29:d0:25:
73:c4:f7:98:10:aa:59:ba:d5:f5:99:4a:40:35:6a:56:23:7f:
c3:7c:6b:48:e5:83:4b:74:dc:db:2e:ac:f8:9c:32:0e:f6:4b:
95:89:92:98:18:e5:33:aa:74:8e:e5:5a:36:76:51:9a:2b:89:
f5:35:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:28 2026 by rpki-client