Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: jEFfpQqGG5kTp+BHRHMcDiQ+7GCyTfet4euBcsYY0sg=
Subject key identifier: BF:44:63:80:55:83:91:34:B7:BC:25:05:2E:56:CD:E3:67:D3:44:19
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 37115BCDAECA69D2C37CB7C6E34AEACEA1B897D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: 01D4
Signing time: Thu 23 Jul 2026 09:17:58 +0000
Manifest this update: Thu 23 Jul 2026 09:12:58 +0000
Manifest next update: Fri 24 Jul 2026 10:04:58 +0000
Files and hashes: 1: CE964F98379F0320A7191E6D6788800535885928.crl (hash: 6tY3pvqycfumg1LOwSLrpZHKgz9N8CJSHHwnwiP2RHg=)
2: AS214955.asa (hash: Q8xewUCi/NeJj+8SeKwplh2UruSS6EWahrF4De9gRYA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:11:5b:cd:ae:ca:69:d2:c3:7c:b7:c6:e3:4a:ea:ce:a1:b8:97:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: Jul 23 09:12:58 2026 GMT
Not After : Jul 24 10:04:58 2026 GMT
Subject: CN=BF44638055839134B7BC25052E56CDE367D34419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:4b:9a:14:ce:25:d2:ea:73:e5:b6:98:bc:
a9:7c:c9:c8:bf:55:2a:86:0f:88:1f:11:03:05:84:
6b:36:d8:45:7b:84:5a:28:65:90:72:0e:cd:00:f6:
ed:68:50:37:84:2e:4d:cd:33:f5:b4:5d:9d:ac:d0:
44:31:59:82:e1:76:cd:c8:a7:ef:1a:38:96:08:48:
36:ba:e0:48:3d:d2:3b:d1:39:7c:5a:1f:7e:5e:33:
d3:a7:3e:18:8a:5b:18:63:a9:3a:e1:bc:9c:b0:79:
c8:d1:07:0e:5b:90:39:94:ef:a0:d2:01:64:39:74:
f1:e6:2a:aa:dd:88:fe:d8:4c:c1:81:29:c5:ed:1a:
0a:2d:72:42:22:88:a7:98:93:9c:98:0a:42:48:9b:
7d:9f:a4:a3:6c:71:c5:7a:20:a2:34:ee:e4:50:a5:
f9:17:ad:57:17:89:4e:43:f7:b1:11:a4:38:0e:4f:
12:d1:89:9a:2b:91:1e:ec:4e:50:f5:52:bf:ab:7e:
8c:4c:83:d5:75:17:f5:9f:d4:e7:7c:8b:ed:87:3f:
87:ed:ad:71:8c:31:27:3c:ba:c0:78:f6:71:4e:c6:
6d:9b:49:e0:ea:bf:c1:4f:8e:50:9a:2e:8a:fd:e2:
b4:ff:8e:81:54:ba:54:91:35:ab:76:85:2c:07:da:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:44:63:80:55:83:91:34:B7:BC:25:05:2E:56:CD:E3:67:D3:44:19
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7e:c0:37:72:96:b1:a7:ca:87:11:25:50:6f:05:b7:d8:dd:
fd:3c:05:39:15:46:4d:c8:23:69:18:b4:c9:ff:c3:8f:70:52:
c2:14:aa:bb:43:2b:ad:82:1a:72:2e:5e:3a:e4:1b:47:c8:d6:
53:5c:dc:79:0c:ed:42:6f:75:8a:11:3c:60:9c:01:e2:41:e4:
5d:3f:33:f2:d8:9f:fc:0d:9a:52:98:93:e9:57:63:9c:0e:c2:
f6:40:b9:80:a3:73:0c:47:da:f2:3f:c6:71:8d:9d:ce:28:17:
ec:ef:46:db:78:c4:76:9d:92:4f:f0:aa:50:ff:79:00:4d:92:
b5:3e:ad:95:36:8f:aa:f7:b8:78:39:e3:a1:cb:63:fa:95:71:
66:28:79:67:92:8e:3e:a6:a3:15:3b:2f:48:97:58:7c:17:b7:
13:6f:9d:a2:ad:96:a2:c4:d8:37:3c:e7:e9:e4:60:37:8f:a4:
44:4f:ba:da:77:56:51:77:a9:0e:49:5e:5e:d6:37:ad:7e:35:
60:0c:98:44:cd:eb:b9:f1:1e:78:9c:ee:3f:c9:f8:23:71:64:
f0:74:c7:29:55:21:8a:62:c2:89:ca:03:00:c5:dd:d2:a2:33:
78:0f:64:65:52:6d:56:7e:1f:06:6e:a1:35:7f:04:90:e8:44:
b9:71:73:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:50 2026 by rpki-client