Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: a2R5HfOZY5F8xoSsckA7JIHJ4UNjrNb84m12YRojOmk=
Subject key identifier: D1:88:D0:B9:31:33:8E:D7:2C:21:2E:9C:35:6C:42:11:DC:88:A4:E8
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 61116507BD94A1C978C0AA5C329CC0ADD955866B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: 0135
Signing time: Wed 25 Mar 2026 21:44:31 +0000
Manifest this update: Wed 25 Mar 2026 21:39:31 +0000
Manifest next update: Fri 27 Mar 2026 00:43:31 +0000
Files and hashes: 1: AS214955.asa (hash: Q8xewUCi/NeJj+8SeKwplh2UruSS6EWahrF4De9gRYA=)
2: CE964F98379F0320A7191E6D6788800535885928.crl (hash: O7WR7vAtf0BFwLbIIdNlHJBLL8e50D+6nzFWmbjsajw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:11:65:07:bd:94:a1:c9:78:c0:aa:5c:32:9c:c0:ad:d9:55:86:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: Mar 25 21:39:31 2026 GMT
Not After : Mar 27 00:43:31 2026 GMT
Subject: CN=D188D0B931338ED72C212E9C356C4211DC88A4E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d0:bc:5e:dd:d7:b7:f3:71:73:33:da:94:85:
f8:28:13:ab:14:eb:f4:51:d1:3e:a6:d3:23:07:26:
8f:25:e1:33:ad:e4:c2:68:3a:b3:17:af:de:2b:57:
1c:90:db:9d:31:e5:48:f7:bd:0a:45:70:4a:14:64:
1b:4f:99:78:ce:80:48:42:e7:d6:45:d8:6a:98:43:
eb:75:11:8e:87:cd:22:98:ea:af:18:54:4d:4b:c2:
28:3b:b5:b3:1a:1b:fa:66:a5:aa:a4:29:78:c2:c6:
0c:94:dc:8d:cd:2f:2e:d1:77:d1:ab:14:f6:18:19:
9d:22:73:21:82:a0:43:cc:a8:8b:b3:98:1e:8e:f1:
bd:b2:c7:36:f3:5d:4c:ec:32:da:7a:96:11:a9:c8:
70:4d:78:cc:e2:7a:54:ab:44:cc:a8:e9:3f:f6:f8:
04:f6:2d:73:28:0a:c4:67:3e:f2:45:5a:15:1a:1f:
20:cd:eb:3c:94:a8:45:92:c8:a4:28:db:37:2a:18:
81:c1:3f:2b:f5:cd:c9:24:a7:07:24:ea:12:4e:9a:
a8:6a:d3:17:00:81:8f:62:85:d0:d5:b1:c7:99:bf:
17:b3:9e:2f:62:90:9f:28:1c:66:48:39:34:ca:02:
40:17:08:33:9b:43:c4:f6:5a:2a:dd:2c:88:37:f5:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:88:D0:B9:31:33:8E:D7:2C:21:2E:9C:35:6C:42:11:DC:88:A4:E8
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9b:57:34:cd:6c:1a:47:ed:7b:93:09:1e:97:84:7c:9d:17:
dc:f4:a9:f5:1b:76:b2:51:26:6c:a4:2d:ce:8c:ee:fb:41:a8:
e7:be:cb:23:b8:88:37:d5:21:5c:ec:0b:8c:8e:29:bd:0f:d8:
ed:30:68:dd:b1:31:c7:23:dd:01:e3:2e:bc:a9:a2:ad:67:88:
9d:dd:1f:1a:87:98:e0:62:2a:17:b7:29:39:1c:c5:7e:c2:bd:
3d:98:c0:a7:2d:f3:3a:91:d4:51:b3:e4:1c:dd:cc:89:e3:80:
15:3b:15:2c:cd:1d:d5:4d:94:08:e0:cc:8c:77:38:cc:ef:5b:
93:f7:43:46:80:a7:1b:ec:9f:41:ea:d4:a0:b1:d8:31:62:06:
c8:71:bb:5c:df:97:22:f0:41:bd:42:05:36:18:9e:66:17:50:
92:da:87:8f:11:aa:dd:2a:03:74:b8:07:e6:79:82:7f:34:19:
88:71:ab:be:96:55:c7:a9:c0:5f:54:f4:cb:e5:df:c1:89:6a:
58:cd:6d:95:00:38:17:f7:d2:85:97:dc:eb:d1:20:94:7a:4f:
73:3b:63:73:9d:1c:ab:96:35:19:92:a1:6e:1b:f0:d3:27:38:
c8:3f:f8:f5:4c:e6:0c:87:35:94:57:95:7d:53:5c:e8:ae:f2:
f2:8e:3a:93
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYRFlB72Uocl4wKpcMpzArdlVhmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2U5NjRmOTgzNzlmMDMyMGE3MTkxZTZkNjc4ODgwMDUz
NTg4NTkyODAeFw0yNjAzMjUyMTM5MzFaFw0yNjAzMjcwMDQzMzFaMDMxMTAvBgNV
BAMTKEQxODhEMEI5MzEzMzhFRDcyQzIxMkU5QzM1NkM0MjExREM4OEE0RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD00Lxe3de383FzM9qUhfgoE6sU
6/RR0T6m0yMHJo8l4TOt5MJoOrMXr94rVxyQ250x5Uj3vQpFcEoUZBtPmXjOgEhC
59ZF2GqYQ+t1EY6HzSKY6q8YVE1Lwig7tbMaG/pmpaqkKXjCxgyU3I3NLy7Rd9Gr
FPYYGZ0icyGCoEPMqIuzmB6O8b2yxzbzXUzsMtp6lhGpyHBNeMzielSrRMyo6T/2
+AT2LXMoCsRnPvJFWhUaHyDN6zyUqEWSyKQo2zcqGIHBPyv1zckkpwck6hJOmqhq
0xcAgY9ihdDVsceZvxezni9ikJ8oHGZIOTTKAkAXCDObQ8T2WirdLIg39b2zAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU0YjQuTEzjtcsIS6cNWxCEdyIpOgwHwYDVR0j
BBgwFoAUzpZPmDefAyCnGR5tZ4iABTWIWSgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3
NzkyLzAvQ0U5NjRGOTgzNzlGMDMyMEE3MTkxRTZENjc4ODgwMDUzNTg4NTkyOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3pwWlBtRGVmQXlDbkdSNXRaNGlBQlRX
SVdTZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZjk5ZTY2ZC00
YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMC9DRTk2NEY5ODM3OUYwMzIwQTcx
OTFFNkQ2Nzg4ODAwNTM1ODg1OTI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZtXNM1sGkfte5MJHpeE
fJ0X3PSp9Rt2slEmbKQtzozu+0Go577LI7iIN9UhXOwLjI4pvQ/Y7TBo3bExxyPd
AeMuvKmirWeInd0fGoeY4GIqF7cpORzFfsK9PZjApy3zOpHUUbPkHN3MieOAFTsV
LM0d1U2UCODMjHc4zO9bk/dDRoCnG+yfQerUoLHYMWIGyHG7XN+XIvBBvUIFNhie
ZhdQktqHjxGq3SoDdLgH5nmCfzQZiHGrvpZVx6nAX1T0y+XfwYlqWM1tlQA4F/fS
hZfc69EglHpPcztjc50cq5Y1GZKhbhvw0yc4yD/49UzmDIc1lFeVfVNc6K7y8o46
kw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:38 2026 by rpki-client