Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: QaHqxXBM2KYVqgUt4YJ/zUjP2ZLDYFmUKoM8RMomZaI=
Subject key identifier: 6E:EA:78:0F:82:90:78:52:7F:03:9A:D3:0B:7A:DC:28:5B:38:D3:68
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 18129E8EEA0FE4AE9EDA3BF25A7FFACC81DFF0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: 0175
Signing time: Tue 12 May 2026 15:47:27 +0000
Manifest this update: Tue 12 May 2026 15:42:27 +0000
Manifest next update: Wed 13 May 2026 17:32:27 +0000
Files and hashes: 1: AS214955.asa (hash: Q8xewUCi/NeJj+8SeKwplh2UruSS6EWahrF4De9gRYA=)
2: CE964F98379F0320A7191E6D6788800535885928.crl (hash: 4CDMbwMzBnkSzoR6iLk/H1m7kqppmTuT68z5XzgeWxk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:12:9e:8e:ea:0f:e4:ae:9e:da:3b:f2:5a:7f:fa:cc:81:df:f0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: May 12 15:42:27 2026 GMT
Not After : May 13 17:32:27 2026 GMT
Subject: CN=6EEA780F829078527F039AD30B7ADC285B38D368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:e5:24:ff:16:c1:01:91:00:f5:24:42:69:
68:2c:9c:a4:be:77:8e:81:cd:96:11:96:c8:ec:b2:
7f:61:02:f5:1b:70:ab:a3:f0:a0:3f:97:61:95:06:
b4:87:eb:30:5d:cd:5d:47:58:e7:5d:48:a0:00:bc:
53:39:65:03:4a:17:6e:df:36:85:27:d4:0d:a2:3d:
07:98:6d:f3:71:b1:c7:d4:d0:f9:36:ad:e6:f7:da:
e8:a3:17:63:d8:b3:00:07:66:95:29:87:af:c7:05:
81:cc:da:c8:61:15:ef:7c:17:dd:e7:c2:20:1d:31:
7a:8e:75:a8:11:d8:9e:62:de:f2:04:62:56:99:48:
47:79:36:34:1f:67:2d:73:cf:ec:a4:02:df:f7:0f:
7a:18:8e:52:63:e2:3b:7f:e2:74:c6:c0:39:80:7b:
21:3a:d8:6a:2a:50:79:9f:74:7c:8f:0a:f0:aa:b9:
87:e8:7b:ed:8b:5d:ff:85:86:16:1d:5f:86:85:ac:
3c:dc:bd:74:43:24:0b:56:84:ef:25:1e:d2:35:bb:
ac:59:db:bf:59:71:b7:a0:8e:c1:83:58:b5:c7:1e:
52:89:cf:9d:b0:d7:1f:b5:31:c0:9e:75:cf:ca:f0:
02:9f:f5:b7:7e:5b:c3:36:68:e7:e8:b2:23:c1:0f:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EA:78:0F:82:90:78:52:7F:03:9A:D3:0B:7A:DC:28:5B:38:D3:68
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:2c:d6:6f:34:4d:ce:45:52:42:19:47:c3:74:2e:e7:5a:77:
f0:0f:ea:81:c4:c3:cf:f7:5c:6e:8b:28:a4:04:6e:bf:47:d4:
71:5a:65:6a:a6:5e:42:a5:68:29:f3:f2:4f:65:b1:ab:6d:56:
11:0b:f3:89:d7:f0:39:b9:ec:63:60:b4:6e:3e:bc:be:9f:2f:
de:c3:0b:21:d7:94:7e:75:84:b5:59:3a:47:b8:22:75:be:d6:
8d:3a:e3:3c:fd:0b:09:70:74:e5:9d:ae:a5:a2:8e:c2:7a:25:
4d:74:fd:3d:40:bf:0e:16:60:11:77:d1:5e:65:a3:71:89:e9:
fa:7d:4a:00:eb:e2:1b:7c:13:e3:9f:81:2d:b2:56:2e:0d:24:
6c:9b:34:a2:27:38:4e:30:dc:cf:df:11:58:2f:0f:98:9c:c5:
6a:3f:44:0c:8a:12:0b:eb:64:2f:d4:30:bc:50:d7:24:e8:d6:
44:44:ea:a7:68:a4:4d:7f:3b:87:a7:ab:20:e9:f5:43:e8:fc:
3f:ce:32:c4:d5:44:0b:b5:1d:bd:3f:d4:33:73:54:9b:cd:53:
17:05:02:1c:a1:d4:75:dc:a2:51:4b:fe:02:99:f8:c0:5f:3e:
8b:27:95:df:47:35:11:bd:45:23:d1:df:59:12:df:70:02:ed:
f1:3f:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:38 2026 by rpki-client