Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: 7ZjCZccy2nvTes5iwY6i6kqMdpoon3pFC34I0lqtOiM=
Subject key identifier: 4C:7A:F1:5A:99:38:B1:81:8E:19:CF:1B:36:3A:DA:82:0E:21:B6:4C
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 34E88D8AAF9094D3FCDAFA3E3F035F9082D34C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: 01D5
Signing time: Fri 24 Jul 2026 02:08:00 +0000
Manifest this update: Fri 24 Jul 2026 02:03:00 +0000
Manifest next update: Sat 25 Jul 2026 06:03:00 +0000
Files and hashes: 1: CE964F98379F0320A7191E6D6788800535885928.crl (hash: 5uXIi58oPFuF7kT1bIa5130s1H5UAcvwrihfxiMliyg=)
2: AS214955.asa (hash: Q8xewUCi/NeJj+8SeKwplh2UruSS6EWahrF4De9gRYA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:e8:8d:8a:af:90:94:d3:fc:da:fa:3e:3f:03:5f:90:82:d3:4c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: Jul 24 02:03:00 2026 GMT
Not After : Jul 25 06:03:00 2026 GMT
Subject: CN=4C7AF15A9938B1818E19CF1B363ADA820E21B64C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:b1:93:6f:d3:af:d0:cd:a4:ed:6d:6d:5e:
bb:78:00:4b:6b:eb:32:55:b4:88:a8:1d:e2:ed:72:
66:13:5e:65:2d:1c:6b:d5:b7:d0:30:2f:82:c4:4d:
d0:63:4c:12:f3:2d:e6:8c:81:50:a6:e2:e7:fd:45:
b4:f0:f9:af:f4:0f:f8:ca:fd:cb:32:76:15:4b:9a:
b2:6b:bc:35:d1:a2:4f:66:9f:91:91:8b:d2:1d:5d:
84:0b:b3:8c:5e:2d:8d:e4:3e:42:a5:0c:6a:09:61:
27:56:a5:15:33:3e:59:c1:2f:50:97:a8:44:7d:0f:
39:a5:91:e2:27:49:c5:e1:3d:8e:e2:d6:fa:c3:5a:
f7:1b:3e:06:4a:0b:44:d1:bc:1f:84:f2:eb:7b:75:
75:4c:da:c8:31:84:7e:22:60:e2:d6:c3:d9:d5:df:
f8:70:b8:ef:84:3f:58:2c:f2:ec:0d:24:55:90:52:
a3:62:59:24:e0:73:92:40:cd:3a:69:73:33:fc:7d:
56:87:89:ce:ef:41:fe:b9:2c:04:a2:1b:21:67:1e:
02:b6:31:56:0d:9d:77:a6:57:2b:44:f2:62:d5:cb:
89:ce:1a:be:5a:55:b9:21:d4:3e:f8:4a:9f:ff:d9:
39:2d:f7:61:29:eb:5d:20:20:3b:2a:d4:22:40:ce:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7A:F1:5A:99:38:B1:81:8E:19:CF:1B:36:3A:DA:82:0E:21:B6:4C
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:93:da:4d:e5:f9:d2:bb:a5:f1:75:04:c1:1f:ba:0d:2b:d1:
3d:67:77:4c:5c:72:2b:8e:c0:6c:be:f1:07:a2:7e:f9:c5:94:
d1:90:54:45:e9:a8:ec:7a:f5:f3:54:58:f6:df:50:cc:26:0c:
b9:38:1d:35:c3:77:32:3f:0f:d3:fe:5c:27:e1:f3:71:17:a8:
66:75:16:2c:df:57:91:8b:79:f3:c3:ce:1f:a1:f9:3d:00:52:
ac:3c:64:e7:ea:99:26:20:3a:63:fa:14:fc:e5:98:cc:e7:34:
d3:f0:f9:2b:58:c8:ae:bc:cc:49:55:e2:27:c4:1c:a5:72:f8:
6e:07:a3:d1:80:de:1f:66:9f:e5:92:87:b4:40:a8:5f:28:9b:
72:f9:65:cc:0c:35:d4:64:7d:3e:de:83:78:02:ce:41:0f:76:
b7:9a:5c:8d:a0:fc:17:b7:91:fe:5d:03:f8:2e:b1:e4:ff:25:
01:88:6c:ba:0b:30:b1:09:d7:da:11:69:ed:30:66:68:54:3c:
ed:bd:e5:10:23:b7:bb:09:48:ab:37:89:66:f5:40:d2:01:70:
b5:2a:b9:fc:a6:8c:a9:a2:c0:5a:16:6b:82:92:cd:f0:1b:45:
e5:63:22:02:76:60:3d:27:da:2d:6c:f3:03:4e:8a:a6:b7:92:
d2:f5:10:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:08 2026 by rpki-client