Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
File: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json)
Hash identifier: /YXKgZLOifmUeaoeOAD4Ru5GGOeAf5NVV74Ps7fCFxY=
Subject key identifier: 83:6A:8D:F5:80:6D:FC:68:29:0D:23:4B:A5:74:6C:86:F9:34:23:87
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Certificate issuer: /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial: 29C9F7609DD2383AFE03F7AB0560A85505355D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
Manifest number: 011C
Signing time: Sun 19 Apr 2026 05:09:25 +0000
Manifest this update: Sun 19 Apr 2026 05:04:25 +0000
Manifest next update: Mon 20 Apr 2026 08:15:25 +0000
Files and hashes: 1: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: uyYjChcbtoqpmbyClpsjQNdeatkGTwKWsHAQYyjt6U0=)
2: AS204211.asa (hash: zDMfjVq63BZ3sFkTQH4iOgUAjk821RfCMKCVR/gIYCg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c9:f7:60:9d:d2:38:3a:fe:03:f7:ab:05:60:a8:55:05:35:5d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Validity
Not Before: Apr 19 05:04:25 2026 GMT
Not After : Apr 20 08:15:25 2026 GMT
Subject: CN=836A8DF5806DFC68290D234BA5746C86F9342387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:2e:6e:c8:b3:f1:86:26:00:b7:0e:7c:eb:
57:59:7c:50:c2:e9:13:05:03:eb:3c:8d:b5:d8:79:
a0:1c:7c:66:f0:c7:16:03:0d:87:30:8c:0e:2e:ef:
a3:ef:b3:c7:5e:a6:cd:e8:8d:4d:c6:4d:8b:1e:ef:
e9:87:da:1e:04:8e:de:76:25:79:bd:dd:f5:71:70:
00:19:2a:11:f2:5e:b4:77:d5:82:75:55:ef:3d:6f:
04:a9:56:d4:a1:95:e7:fc:82:7f:f9:f7:a6:f4:68:
9b:d3:e6:94:a7:62:da:51:9e:48:54:c2:73:a9:15:
27:42:87:36:0e:c7:f5:7d:27:ad:c8:bd:ea:0a:b9:
cf:6f:05:5a:ce:b7:7e:1d:28:26:4c:bf:a8:e5:d5:
aa:8c:3b:50:7a:8c:fc:a1:15:41:a1:e4:8e:0a:a8:
be:8f:93:10:bd:01:ee:05:ca:4a:06:b0:52:ab:8a:
25:b8:50:c9:29:1c:37:45:f6:35:fe:35:f4:94:2a:
17:d5:a6:0f:70:3f:97:f2:74:17:50:43:25:3f:48:
a2:96:f4:16:14:f4:a2:82:44:ca:39:58:49:17:c3:
ac:6e:82:4e:ea:b5:65:c6:49:b0:96:20:e1:3a:6d:
2e:3a:87:ed:df:84:ec:f5:36:95:40:3f:e8:bb:8c:
de:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6A:8D:F5:80:6D:FC:68:29:0D:23:4B:A5:74:6C:86:F9:34:23:87
X509v3 Authority Key Identifier:
keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:35:8d:da:01:73:0c:9c:bc:6a:81:08:5d:d5:df:10:87:02:
8b:33:58:10:bc:c4:6e:4c:82:50:80:7f:c1:58:bc:16:78:ab:
c1:d5:b8:01:2c:b3:be:8a:9a:f7:98:14:09:b4:65:8d:45:92:
cf:a1:97:d9:a2:22:96:be:80:db:ea:da:51:22:6e:0d:64:1c:
66:ef:72:9d:6a:e7:71:b2:88:2d:81:f3:84:c5:a9:08:4f:6b:
86:f3:07:ba:41:63:01:3e:f4:f9:fb:35:8e:41:f1:44:9d:0c:
7a:40:1c:fc:c0:86:84:f7:31:24:2c:4b:1c:0a:7c:2e:d7:a3:
69:23:7b:e8:7c:3c:0b:dc:38:47:dc:2d:ef:c3:58:40:b9:90:
f4:4f:50:84:4e:7c:9e:e5:a5:36:5a:16:b7:c1:4f:90:fc:e8:
ec:df:d3:b1:4e:27:f2:db:40:e4:d8:b0:95:a5:59:32:78:9e:
c8:ef:7e:41:97:4c:83:8a:86:21:cc:15:c8:eb:bd:f9:95:11:
f0:9c:37:24:02:ad:f1:cb:7e:91:b8:de:55:0c:b7:00:bb:a7:
58:d0:69:76:d6:2a:15:9a:86:97:a8:93:6c:ba:1a:b8:ae:0f:
7d:9e:97:33:e3:64:c7:0a:36:d1:36:2e:8d:48:44:0b:c1:21:
0e:f9:ff:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:17:50 2026 by rpki-client