Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File: 0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier: 9ik9GYVoAoATVpFCMol/EeSfAGnUUeVhk58nMct9X3g=
Subject key identifier: 65:CD:70:3D:7C:04:7A:BA:94:76:F9:26:DD:E7:73:EC:90:39:DE:A8
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer: /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial: 251A42042C924809D8DEAE64898829938F7C5D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number: 047D
Signing time: Sun 20 Sep 2026 15:40:44 +0000
Manifest this update: Sun 20 Sep 2026 15:35:44 +0000
Manifest next update: Mon 21 Sep 2026 17:16:44 +0000
Files and hashes: 1: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: 7bLO5behIIxh8QOWdCdYKrNmYUJrIUwnhfkYG+jVAro=)
2: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: MaN4ZR5eMroCSZE2YYfLs5psL13vcsCmhSQAqzxSDfg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:1a:42:04:2c:92:48:09:d8:de:ae:64:89:88:29:93:8f:7c:5d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Validity
Not Before: Sep 20 15:35:44 2026 GMT
Not After : Sep 21 17:16:44 2026 GMT
Subject: CN=65CD703D7C047ABA9476F926DDE773EC9039DEA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:13:f5:fe:76:cc:9b:75:bc:fa:f5:3a:b5:
be:6c:32:3e:f1:15:b7:c9:14:cb:b3:73:0c:a0:52:
31:b5:8a:c0:5a:a8:91:f7:12:64:c4:d8:f7:04:93:
f0:25:39:76:84:47:a8:d0:89:2f:ac:e2:61:3d:85:
ff:40:75:d5:e4:fd:cd:9e:70:8a:f4:b8:72:3b:c2:
f8:67:32:33:3d:31:81:6f:ee:1d:56:46:ba:f3:50:
a4:4f:ca:32:fd:ab:b9:21:f8:1d:b6:49:5c:3b:e9:
29:95:f4:63:d5:c5:1a:e4:85:07:9e:d9:97:18:58:
49:45:ca:59:0a:01:72:f0:98:d1:b8:a7:fd:80:ac:
74:04:14:92:45:57:c8:fc:bf:5d:e1:96:55:f9:b4:
49:a2:8b:13:8d:9f:b5:e0:be:28:90:82:b2:32:26:
aa:aa:25:a0:f3:a2:02:70:4c:4f:ef:19:44:95:a7:
aa:c1:a4:58:16:45:74:4a:a5:0e:11:1e:2f:a3:3a:
9c:6a:36:98:fc:46:ff:7e:94:32:12:3c:3f:47:03:
7b:25:d3:2f:31:aa:a2:97:2c:2e:68:e1:8f:86:e4:
6d:06:08:ce:8c:67:4d:4e:5a:0f:ec:cd:d5:d6:59:
3c:be:f2:d5:50:63:df:0d:57:9d:94:f1:ab:45:a4:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CD:70:3D:7C:04:7A:BA:94:76:F9:26:DD:E7:73:EC:90:39:DE:A8
X509v3 Authority Key Identifier:
keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:69:d6:c8:a0:bd:8a:7a:47:75:c1:29:fc:7f:7f:21:82:fa:
c0:82:8c:fc:ba:64:f2:cc:56:c4:dd:b3:0d:f1:0a:fa:1f:86:
a5:d5:c7:de:56:04:b3:fc:cf:54:63:2f:d9:54:57:52:ce:91:
07:b3:2d:0b:fa:25:e7:e1:00:10:4e:b2:7b:35:9f:6b:5d:86:
b7:83:45:98:45:fe:80:03:0b:f6:69:c0:23:3b:66:3c:68:c2:
6a:eb:6e:41:ed:6a:cf:df:47:d2:2b:e7:74:0b:36:9f:14:d9:
42:8b:12:02:58:c2:29:68:27:26:01:44:5c:61:be:fe:f3:dc:
f9:1a:31:43:92:8b:de:c9:2b:24:e5:c3:e9:a5:68:90:b6:07:
e4:1a:16:c4:99:88:77:50:46:4b:a2:f8:cb:3e:42:eb:a9:e9:
08:f3:f1:27:19:94:3a:3e:77:fd:8c:7f:58:70:54:fd:e0:74:
e9:51:9e:c0:d5:b6:31:5c:0f:73:2d:2a:f6:d1:89:ba:ca:74:
84:17:1b:2c:9a:d7:3d:18:63:49:09:36:4d:6e:a0:43:b3:12:
40:bc:24:a9:ba:23:5f:c8:dd:9d:8c:f8:f8:58:5d:23:c0:1a:
53:3a:b1:9e:40:04:9b:f6:54:20:0c:c2:1f:e6:6d:f2:91:41:
18:72:4d:dd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJRpCBCySSAnY3q5kiYgpk498XWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk5MzI4OWIxNjhhMzdkNDQ5YmMwZDQ0YjFhZDM1ZTUz
MjAyNWNmMTAeFw0yNjA5MjAxNTM1NDRaFw0yNjA5MjExNzE2NDRaMDMxMTAvBgNV
BAMTKDY1Q0Q3MDNEN0MwNDdBQkE5NDc2RjkyNkRERTc3M0VDOTAzOURFQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJRP1/nbMm3W8+vU6tb5sMj7x
FbfJFMuzcwygUjG1isBaqJH3EmTE2PcEk/AlOXaER6jQiS+s4mE9hf9AddXk/c2e
cIr0uHI7wvhnMjM9MYFv7h1WRrrzUKRPyjL9q7kh+B22SVw76SmV9GPVxRrkhQee
2ZcYWElFylkKAXLwmNG4p/2ArHQEFJJFV8j8v13hllX5tEmiixONn7XgviiQgrIy
JqqqJaDzogJwTE/vGUSVp6rBpFgWRXRKpQ4RHi+jOpxqNpj8Rv9+lDISPD9HA3sl
0y8xqqKXLC5o4Y+G5G0GCM6MZ01OWg/szdXWWTy+8tVQY98NV52U8atFpF9hAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUZc1wPXwEerqUdvkm3edz7JA53qgwHwYDVR0j
BBgwFoAUCZMomxaKN9RJvA1Esa015TICXPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNiZDJkMmUtZjQwZS00NzJlLTlmOGYtODk4NGZlYWFh
NWM3LzAvMDk5MzI4OUIxNjhBMzdENDQ5QkMwRDQ0QjFBRDM1RTUzMjAyNUNGMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NaTW9teGFLTjlSSnZBMUVzYTAxNVRJ
Q1hQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lM2JkMmQyZS1m
NDBlLTQ3MmUtOWY4Zi04OTg0ZmVhYWE1YzcvMC8wOTkzMjg5QjE2OEEzN0Q0NDlC
QzBENDRCMUFEMzVFNTMyMDI1Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWnWyKC9inpHdcEp/H9/
IYL6wIKM/Lpk8sxWxN2zDfEK+h+GpdXH3lYEs/zPVGMv2VRXUs6RB7MtC/ol5+EA
EE6yezWfa12Gt4NFmEX+gAML9mnAIztmPGjCautuQe1qz99H0ivndAs2nxTZQosS
AljCKWgnJgFEXGG+/vPc+RoxQ5KL3skrJOXD6aVokLYH5BoWxJmId1BGS6L4yz5C
66npCPPxJxmUOj53/Yx/WHBU/eB06VGewNW2MVwPcy0q9tGJusp0hBcbLJrXPRhj
SQk2TW6gQ7MSQLwkqbojX8jdnYz4+FhdI8AaUzqxnkAEm/ZUIAzCH+Zt8pFBGHJN
3Q==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:55:37 2026 by rpki-client