Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
File: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json)
Hash identifier: 9lPTCfFxWGTGe1i1cExjXXYeucjvDSCsQPUaCWJ+bjA=
Subject key identifier: D4:D9:FA:62:13:FD:E0:BA:01:11:90:16:80:C9:42:96:D9:47:2D:A1
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Certificate issuer: /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial: 393501B6309FA7C9E51F3B416FFC9B9D35FED62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
Manifest number: 01F8
Signing time: Tue 28 Jul 2026 23:48:56 +0000
Manifest this update: Tue 28 Jul 2026 23:43:56 +0000
Manifest next update: Thu 30 Jul 2026 02:19:56 +0000
Files and hashes: 1: AS204211.asa (hash: kRr//+r7x6/vuSkVDlS04TJuHGHLTrf1+OU03EGvOcM=)
2: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: EZwk4W4/gmJyE6xHOuBiQ868EXjAura75vI/A3LpHyU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:35:01:b6:30:9f:a7:c9:e5:1f:3b:41:6f:fc:9b:9d:35:fe:d6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Validity
Not Before: Jul 28 23:43:56 2026 GMT
Not After : Jul 30 02:19:56 2026 GMT
Subject: CN=D4D9FA6213FDE0BA0111901680C94296D9472DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:55:5e:32:f2:39:52:01:3d:f8:69:e0:cb:71:
09:9e:8c:55:55:fd:0c:6f:9f:47:67:f6:7f:ef:08:
53:4c:b1:ad:c2:81:0a:ae:14:06:1f:a2:42:47:0b:
79:12:b2:cc:7c:b6:d0:f4:49:6c:c0:60:c0:45:63:
1d:e9:b7:26:c7:3c:89:28:51:97:2e:8d:fd:30:a6:
10:56:8b:cf:28:35:96:52:4a:49:b9:f4:36:56:cc:
78:a2:61:70:d5:81:24:e6:38:53:62:b2:73:d6:3d:
1f:c3:91:75:04:17:19:11:54:79:58:c9:e9:3b:4f:
8c:e7:7e:c1:5c:05:ff:7e:fa:69:18:5c:be:ec:1e:
fd:37:b9:e6:16:b8:c9:6d:bc:a8:66:65:77:c0:de:
3b:91:8d:d0:54:b8:df:66:31:2b:19:bd:f8:7d:e4:
9f:55:6d:7a:bc:ea:4f:d9:bf:70:87:19:76:9d:e4:
76:7e:86:0c:6c:fc:04:a9:3c:56:a1:f4:6e:31:15:
e8:f4:ef:58:d2:c7:7a:9b:9a:af:fd:3a:6d:23:a3:
7d:d4:56:63:c2:44:71:51:be:64:51:97:e1:fa:87:
b2:e8:8e:4f:2c:37:1c:db:44:0d:d9:83:4f:78:9e:
a9:db:75:29:b8:db:11:8b:57:ed:9b:24:ec:e0:dd:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D9:FA:62:13:FD:E0:BA:01:11:90:16:80:C9:42:96:D9:47:2D:A1
X509v3 Authority Key Identifier:
keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6b:9c:78:17:9c:47:93:d1:b2:23:8a:6c:cf:0d:cc:31:20:
1f:53:d4:49:27:b7:b2:0a:ed:bd:98:47:32:04:bc:13:fe:42:
e5:ff:83:a1:c2:4d:f3:a6:d1:e4:dc:42:67:91:e2:d2:a0:22:
67:07:dd:87:66:3a:05:bf:ad:af:be:69:c2:af:76:d8:29:2c:
0a:e1:f0:a5:22:6c:af:2a:44:c1:81:51:78:12:93:00:a4:87:
7f:96:3c:44:d3:bf:71:58:a1:cf:ff:0b:e2:58:b3:ae:1b:89:
c8:61:28:99:fd:40:fe:ac:37:2e:db:51:99:f3:cb:fb:07:29:
f5:b4:1b:fb:0a:cf:d1:96:e3:e0:ad:b0:03:73:28:7a:06:b4:
2a:ac:63:ac:f3:c2:70:cc:c2:6c:40:b1:a8:83:74:05:92:c5:
d3:b7:d2:87:30:41:e0:a7:8e:4b:e1:39:a7:fe:7f:70:5a:37:
d9:5c:02:19:df:b4:f6:d8:bd:56:32:a0:86:b8:ee:7c:16:de:
e5:46:f4:44:04:78:b6:f7:8f:dc:8f:ca:c9:6e:97:33:fd:68:
77:a0:49:14:88:92:3b:8f:cb:c6:67:33:ba:bc:5d:3f:5f:e1:
0b:aa:a1:ad:75:47:40:c5:a5:81:97:8a:d2:f1:1a:d0:b8:6a:
b7:3d:4a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:26:28 2026 by rpki-client