Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: J8cJ9hJcq3wpxzh+3+zAYoXkotLcnchK0xXGo4EqO78=
Subject key identifier: 1D:CA:F5:B0:6B:68:9D:FB:D3:39:BF:B2:EA:51:3E:3E:99:C1:08:28
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 3E5A4D3E4C1131A1C85A2C3210E6F14D819492E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: 022F
Signing time: Wed 23 Sep 2026 09:47:49 +0000
Manifest this update: Wed 23 Sep 2026 09:42:49 +0000
Manifest next update: Thu 24 Sep 2026 13:19:49 +0000
Files and hashes: 1: CE964F98379F0320A7191E6D6788800535885928.crl (hash: W0Xy7P5qqPvtjQjC7PN6OjhIMuf80sPiItg+KoAGFUc=)
2: AS214955.asa (hash: Q8xewUCi/NeJj+8SeKwplh2UruSS6EWahrF4De9gRYA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:5a:4d:3e:4c:11:31:a1:c8:5a:2c:32:10:e6:f1:4d:81:94:92:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: Sep 23 09:42:49 2026 GMT
Not After : Sep 24 13:19:49 2026 GMT
Subject: CN=1DCAF5B06B689DFBD339BFB2EA513E3E99C10828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:1a:4d:6b:48:00:fc:cc:f0:8a:b6:c4:ef:
0c:92:0b:d6:e0:b1:1b:45:26:76:fc:73:63:d1:82:
09:c8:ae:5c:01:08:ee:cf:a0:a8:c2:29:ee:10:37:
bc:1c:0d:f7:ca:0f:3f:e7:09:36:1e:9e:d5:1a:55:
20:3b:57:3f:de:ad:c0:ce:e5:67:49:af:5a:99:07:
fe:52:cc:b2:5d:00:9f:a7:ff:03:e1:b4:49:db:61:
35:45:97:c7:a1:40:5c:68:30:36:76:1e:bc:8f:56:
75:86:77:2b:1f:66:2b:72:3f:aa:95:57:49:6a:88:
39:a4:71:1b:70:2a:6c:be:75:12:fa:98:69:61:16:
e6:99:75:1a:de:cd:29:a9:f2:77:04:c2:96:67:12:
62:8a:92:a6:6e:09:81:9e:b0:72:38:f8:8e:8a:78:
bf:d2:a8:7c:c1:7e:76:2a:fc:64:d4:fa:71:08:3e:
14:06:a9:10:b7:93:08:c3:bb:5a:29:c9:21:06:56:
92:b6:68:4c:6d:04:78:f5:0a:de:1f:68:51:cc:b3:
63:2d:04:b8:09:e3:54:43:6e:bf:df:cc:aa:57:9a:
22:3e:9d:7c:41:bc:a4:e0:7b:30:67:31:3a:96:ab:
cb:ee:6e:1e:3a:40:1e:6c:c9:81:99:68:0c:f0:81:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CA:F5:B0:6B:68:9D:FB:D3:39:BF:B2:EA:51:3E:3E:99:C1:08:28
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:71:dc:9e:5b:9b:82:e6:03:8c:49:3f:97:f3:61:62:f6:34:
64:8e:50:7f:39:bc:5f:c1:e4:55:cd:a3:0d:03:cd:d3:3e:ce:
8d:70:b6:d1:dc:ac:e9:77:f7:8c:c3:f2:16:6b:8e:94:c2:7a:
84:22:3c:8d:ae:b1:f8:16:fe:10:21:3a:34:bb:1c:f7:16:cc:
08:95:76:fc:41:65:87:89:74:38:dd:4d:9c:78:2e:04:74:9d:
90:d0:6c:b4:d0:d9:5f:ff:85:2b:cd:10:66:f0:8a:09:f6:3e:
f9:66:15:55:12:3d:44:52:03:f4:70:e6:53:3b:aa:cd:c9:74:
69:d1:d9:42:87:20:99:31:b4:3f:9a:58:16:ca:3b:e1:8a:f0:
31:78:14:23:a3:b1:14:41:b6:bc:74:e5:cb:2e:f8:d9:5b:5d:
62:7f:5b:aa:34:80:42:b8:72:3a:fb:0a:06:36:00:f2:a4:f0:
69:ad:16:90:21:0d:79:6a:5b:d4:c7:be:a9:75:60:a3:e6:5c:
2d:02:8e:62:00:e4:72:8c:2c:b5:13:56:46:40:84:d4:88:4c:
5f:08:d2:1f:c6:4d:a1:b8:a0:45:61:49:d1:f5:80:b3:49:83:
59:35:07:1b:ec:34:d9:02:6a:3a:f7:ba:18:c2:48:48:5e:e3:
39:2f:b0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:50:19 2026 by rpki-client