Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: ex69zUL3MOavzFAyFg7MTSCOyTxI9c5xKuGeQnmz7vI=
Subject key identifier: AA:76:E8:5A:75:AB:2F:03:EA:02:78:FD:CA:70:E9:7B:EF:F0:CB:56
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 79E5A974A16D2D809F19287A82FA4CA15BAA0A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 036F
Signing time: Mon 02 Mar 2026 04:38:19 +0000
Manifest this update: Mon 02 Mar 2026 04:33:19 +0000
Manifest next update: Tue 03 Mar 2026 06:38:19 +0000
Files and hashes: 1: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
2: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: xbj0DLq/nK0ctb5I3AQqMrNyNGCdVZnpY0acjGJmoVI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:e5:a9:74:a1:6d:2d:80:9f:19:28:7a:82:fa:4c:a1:5b:aa:0a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Mar 2 04:33:19 2026 GMT
Not After : Mar 3 06:38:19 2026 GMT
Subject: CN=AA76E85A75AB2F03EA0278FDCA70E97BEFF0CB56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:3e:5c:81:4b:a6:4e:57:05:02:7a:de:9e:
c3:df:c0:6c:f8:5b:87:34:b1:12:19:54:d6:f9:3a:
4d:e6:48:e8:00:db:30:3f:96:b9:47:aa:c7:5a:5e:
00:49:d7:21:7e:c7:8a:12:09:75:7c:54:a2:ca:07:
74:29:33:f9:ef:b7:46:7d:dd:ed:e4:35:34:cb:09:
76:35:40:12:fa:ae:bf:69:8c:15:73:2d:19:30:a5:
33:28:06:dd:b9:f8:ae:2c:e4:50:8b:f4:08:28:3f:
75:fe:10:b3:9e:6c:cc:2d:75:6b:7b:c9:ae:26:3c:
fb:b3:45:61:f7:e0:4e:af:a9:df:b1:a2:ec:22:f4:
47:8e:4e:1f:c6:6c:c3:fb:71:e8:ef:13:e4:ac:1b:
91:4c:90:d9:9e:9c:57:b7:52:1b:43:5c:37:62:48:
ae:f0:cf:7f:ca:d5:e5:64:72:7c:56:b5:5e:79:36:
16:4f:3a:27:d4:22:2a:55:02:a2:e9:5d:25:c5:79:
c2:aa:20:4e:7e:74:40:bb:40:d8:10:74:0d:28:72:
4c:bc:0a:a4:34:d9:00:2c:47:a0:02:f7:e7:56:cd:
47:00:f9:3b:6a:b4:5d:c4:30:30:39:82:14:ad:fe:
39:86:4a:c8:6d:3e:2f:54:ab:6e:35:5f:9f:87:c2:
0d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:76:E8:5A:75:AB:2F:03:EA:02:78:FD:CA:70:E9:7B:EF:F0:CB:56
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3a:d9:aa:7d:9d:fd:46:fe:23:ba:00:f0:6c:74:0c:8c:16:
32:7f:f4:ef:b5:85:4c:71:f7:4c:de:8e:35:69:e3:69:e0:05:
71:99:b9:56:0b:52:9a:b0:67:88:d2:27:c9:05:40:f1:b9:6f:
15:06:f6:af:7f:4a:df:d0:a5:a1:0b:f6:d7:49:8d:df:9e:90:
82:0d:75:d4:1e:3e:3a:ce:a6:6e:16:b4:73:d0:f3:01:35:38:
82:01:a7:71:d6:09:25:4d:55:9d:7a:7f:44:ac:d6:49:74:93:
a2:b0:07:d3:1c:00:14:ac:24:ca:62:7b:11:ea:36:d0:32:75:
1d:7e:70:9d:c3:bf:e8:48:94:b7:4e:38:cf:a4:8e:88:69:48:
26:78:1a:d3:34:5b:af:a6:53:22:37:c3:8f:5b:18:77:99:fa:
16:b5:dd:8c:e2:ce:13:c3:6d:b9:84:ce:4e:ac:a0:ec:7b:98:
ff:21:c4:e1:f8:11:01:75:c3:9f:60:34:e3:08:df:68:0c:1c:
3b:b5:8c:16:1f:9c:5e:93:d9:37:06:66:af:3b:e9:61:b7:11:
c6:ed:dc:48:21:79:54:55:d7:fc:c6:43:a2:d0:21:78:9f:80:
ac:90:58:79:65:34:e1:1c:b0:3a:50:36:13:5f:23:8f:d7:e8:
fd:10:43:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:20 2026 by rpki-client