Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
File: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json)
Hash identifier: nYspEYMQzmtHXKt2Xwi9VipBNEZQzj5F1T6TOioCTNc=
Subject key identifier: 6D:64:29:6A:7A:35:9A:5A:49:B0:AC:5B:7D:02:4E:A1:66:5B:86:4A
Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
Certificate issuer: /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Certificate serial: 52C080E38C9A5B33C19C99F3F08F4BC1E5FA5504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
Manifest number: CC
Signing time: Sun 01 Mar 2026 07:34:14 +0000
Manifest this update: Sun 01 Mar 2026 07:29:14 +0000
Manifest next update: Mon 02 Mar 2026 10:49:14 +0000
Files and hashes: 1: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: klxBvg9zmtcJhssyDIDwAc09dTEWAJesCbwtmWAzlMc=)
2: AS204211.asa (hash: +gyAf3vkIK9aMjQtBtelOvvifSVkf7jZJi8PwPQNix8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c0:80:e3:8c:9a:5b:33:c1:9c:99:f3:f0:8f:4b:c1:e5:fa:55:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab
Validity
Not Before: Mar 1 07:29:14 2026 GMT
Not After : Mar 2 10:49:14 2026 GMT
Subject: CN=6D64296A7A359A5A49B0AC5B7D024EA1665B864A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:e9:38:54:1e:16:3e:4d:09:f8:7b:2d:8d:
b3:47:e0:6d:bb:df:79:fc:b5:c8:28:27:bb:5d:b4:
97:48:82:4c:aa:02:2c:de:51:c8:c2:62:21:d6:6d:
a2:3d:e8:78:1f:29:be:21:fe:53:a9:74:64:17:2b:
cb:3a:ed:ae:63:fe:db:7c:06:52:9e:8b:96:dd:37:
dd:5b:4a:52:cc:0f:dc:3d:e5:65:f2:a4:a0:c2:b9:
d6:26:8b:ac:be:97:87:b8:96:a8:0b:2a:3d:85:e1:
3b:1e:4e:a2:52:f4:4a:47:65:d8:03:29:05:ae:38:
e2:8a:f6:f2:b6:0c:ca:e9:75:1f:9f:d7:a0:4c:7d:
7c:9f:51:e0:67:1f:0e:ba:a8:bc:86:91:b4:c2:2e:
e2:a2:4e:d8:16:88:44:38:9a:24:ae:93:e0:44:b3:
52:98:04:86:c1:dc:45:ab:95:73:60:72:55:05:1e:
9f:4f:50:e5:7c:2c:77:c6:22:50:b9:30:12:2a:e7:
de:4a:8e:71:bc:e1:98:31:7d:ca:1a:ed:bd:81:ad:
86:67:30:3e:77:55:c3:88:43:f5:24:a3:7b:d0:fd:
fb:17:60:9f:28:80:0a:27:62:db:27:98:20:3d:15:
ad:87:03:a6:cf:92:6b:39:a5:0e:5e:36:76:48:ed:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:64:29:6A:7A:35:9A:5A:49:B0:AC:5B:7D:02:4E:A1:66:5B:86:4A
X509v3 Authority Key Identifier:
keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:34:29:c1:47:45:08:9e:3c:35:92:cb:3a:6e:40:ee:24:a0:
d7:4a:b4:69:8e:b4:2f:b7:0b:38:39:12:14:2d:7e:ca:1a:51:
30:48:b4:c5:43:1d:fb:10:8b:81:16:60:4b:92:c0:7d:f2:a7:
1c:96:27:1a:76:03:a0:d6:0e:7b:d6:37:df:6f:df:65:66:7b:
0c:81:11:b3:88:d6:5e:58:fa:35:f6:40:eb:9f:19:84:a4:2b:
bc:fd:0a:95:b6:6a:28:eb:7b:07:f5:1f:7f:70:89:a3:c3:ad:
7d:bc:b6:2d:42:4a:88:09:35:06:3e:2d:49:6e:ee:33:e3:8b:
c1:4f:37:ed:97:99:e8:ea:d2:0a:9f:4c:f7:af:97:8f:04:76:
67:19:fb:e7:80:b3:71:38:e8:3f:01:ad:d7:7a:05:97:46:a8:
3c:30:ac:34:a5:61:0b:31:9a:1f:8d:a8:77:69:cc:7c:ba:b0:
24:1d:c9:72:67:ef:8a:00:7f:a2:bc:d8:c7:bc:38:02:40:c4:
3c:f9:88:5c:2a:ca:de:92:11:91:6e:ca:22:06:c0:d8:b5:c4:
7c:47:9d:3a:dd:3c:65:09:da:a1:4d:35:ad:4c:1a:41:12:92:
94:61:bb:2e:0e:00:c4:a2:84:9b:72:aa:34:f0:34:7f:32:80:
6b:ef:cc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:24 2026 by rpki-client