Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: cipMpSNvzA6/8AG4GwZR5PGkHXQZ/zA0EO5QKjBEwo8=
Subject key identifier: 68:6E:99:D2:89:CF:A8:14:4E:50:49:D4:39:B2:CA:CC:05:26:F3:93
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 25DF6EEE74ED8012396BBCD5F962C9A6B95A40A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 03AE
Signing time: Sun 19 Apr 2026 03:09:54 +0000
Manifest this update: Sun 19 Apr 2026 03:04:54 +0000
Manifest next update: Mon 20 Apr 2026 06:08:54 +0000
Files and hashes: 1: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
2: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: 2Oo5VbQK7LEuxMGV6sQ15JdPduby3qgk8PwguONGLtk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:df:6e:ee:74:ed:80:12:39:6b:bc:d5:f9:62:c9:a6:b9:5a:40:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Apr 19 03:04:54 2026 GMT
Not After : Apr 20 06:08:54 2026 GMT
Subject: CN=686E99D289CFA8144E5049D439B2CACC0526F393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bd:81:45:03:cd:08:e7:61:ca:1f:5a:80:32:
ad:dd:a1:81:85:e7:e7:a4:38:27:82:47:92:0d:1d:
4b:1d:a7:ac:fd:eb:e7:ce:cb:59:41:1b:14:64:ad:
80:e3:c5:6c:93:c1:78:9e:4d:b5:2a:de:96:c5:0e:
3b:63:27:17:5b:6e:ba:fb:00:72:b3:6c:75:f8:b5:
dc:3f:44:e7:48:7b:b0:e3:83:cc:70:e1:1b:67:fd:
c7:37:6e:70:f9:bf:56:b4:88:02:19:5d:01:14:e8:
30:56:54:84:19:ce:15:94:40:18:f2:62:75:e8:0e:
a9:d6:de:88:de:dc:7f:29:d6:f0:c7:12:32:6a:fc:
32:90:55:f4:73:1f:e8:18:c1:48:ed:d0:54:9c:4b:
c2:0f:60:5e:f1:2c:13:5b:07:26:e2:df:1a:9c:a9:
af:21:c2:df:3d:cf:2f:45:22:48:e2:b6:ca:29:f8:
85:cf:6f:b3:0e:4d:e9:0b:5d:58:c6:ad:5a:23:2a:
0d:8a:44:09:5f:86:23:ed:ad:12:b8:35:7d:d1:0a:
d7:1b:3e:bd:a8:70:02:a8:a3:3a:92:20:1d:60:5f:
3d:4c:70:7a:ec:68:f9:63:90:40:81:5c:03:58:41:
e3:b8:2c:34:79:b8:c6:c3:9a:f4:c1:7a:9b:80:bc:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6E:99:D2:89:CF:A8:14:4E:50:49:D4:39:B2:CA:CC:05:26:F3:93
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c5:cf:b1:98:f6:71:6a:d9:2d:fb:7b:c6:e3:6e:be:21:84:
a1:01:a0:da:f4:19:40:0e:bf:23:08:bb:3e:70:e9:5c:93:97:
2a:0d:1f:a0:74:77:b0:10:d0:88:cf:c0:eb:92:40:8f:f6:e8:
dc:db:2c:6e:8d:cc:43:7e:77:be:3b:f2:ac:32:7c:32:a4:5a:
cb:46:04:7d:be:9f:8d:c8:3c:c5:4e:0e:e3:8f:88:d6:96:df:
d6:5c:93:a6:f4:5f:e4:be:cd:f4:e1:d1:28:2a:6d:9d:08:67:
a9:bf:0c:f9:51:77:6d:9b:17:63:1c:0e:6c:c9:fb:79:8a:98:
7b:de:d5:33:6e:57:eb:e8:9d:0b:3c:6e:ea:14:6f:e2:6c:98:
bf:72:c7:9f:05:00:d3:5f:42:df:ca:ab:5d:39:5b:55:ac:9d:
8c:05:bd:1b:f3:6b:f0:f8:c1:e1:a5:71:75:46:49:cf:c4:a9:
03:e9:bf:1f:e5:98:1e:55:9d:fe:23:98:12:fe:40:d0:40:eb:
2c:34:aa:e1:55:47:29:a8:ca:b8:f4:c8:9e:2d:e4:79:ee:43:
89:4d:ff:cf:ab:12:ca:18:15:2e:de:c3:c4:61:98:2e:6f:31:
b3:c9:a0:59:a4:30:70:4e:32:2f:95:05:97:03:1a:08:4c:83:
4b:68:f0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:15:50 2026 by rpki-client