Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
File: CF277DDF4A74DE53E4483795713BFB135A1140DE.mft (raw, json)
Hash identifier: ebAhKoRemiBQd1no5nj1/lNFX2/JEY9pJmFKsKqfQgg=
Subject key identifier: C6:1D:56:8E:1E:0C:51:A3:C0:BB:35:9D:E0:95:55:26:31:1B:47:D8
Authority key identifier: CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
Certificate issuer: /CN=cf277ddf4a74de53e4483795713bfb135a1140de
Certificate serial: 4818A0D066E78901038C61630BCCD38205440769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
Manifest number: F7
Signing time: Tue 12 May 2026 23:42:39 +0000
Manifest this update: Tue 12 May 2026 23:37:39 +0000
Manifest next update: Thu 14 May 2026 03:05:39 +0000
Files and hashes: 1: CF277DDF4A74DE53E4483795713BFB135A1140DE.crl (hash: IXhBu8kWJIPZRwefUAyxvun7FFLqHU0apjBgWsvSv/0=)
2: AS213413.asa (hash: ijn+TOAS1cY9+9JFyv4vPp9+k2gOEooZ5b3w0sz5SsA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:18:a0:d0:66:e7:89:01:03:8c:61:63:0b:cc:d3:82:05:44:07:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf277ddf4a74de53e4483795713bfb135a1140de
Validity
Not Before: May 12 23:37:39 2026 GMT
Not After : May 14 03:05:39 2026 GMT
Subject: CN=C61D568E1E0C51A3C0BB359DE0955526311B47D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:2a:37:a3:f4:7e:00:b8:2d:e0:0a:a3:e3:
98:ce:f8:ba:0e:d5:23:54:b2:7e:f0:c2:ba:b4:11:
b7:25:1c:d9:28:8f:a8:a2:bc:1f:01:42:ae:72:73:
f5:44:19:c9:57:10:4e:fe:59:a0:e3:a7:94:8b:3a:
48:67:e1:06:c1:f7:a1:f1:20:da:ac:cc:ea:15:ba:
50:9b:34:55:d6:9a:3a:2b:88:f6:05:75:7c:da:12:
fa:0f:2c:15:7f:59:e4:93:ff:08:2c:6b:b8:e9:a0:
9a:3d:e0:59:31:01:c7:32:79:2c:c7:12:c9:43:82:
86:6c:16:41:61:b6:fa:73:fe:90:4c:97:fe:30:1d:
a4:22:69:0f:78:cf:6c:f0:9b:4d:8b:f1:94:23:0f:
2d:b5:53:c4:75:6c:af:0f:f9:0a:46:70:9b:1c:3d:
32:4b:8e:ab:03:7c:31:fb:db:7f:d7:ad:a3:f1:db:
17:92:06:0e:fb:34:2f:1a:97:92:94:af:90:c8:6b:
af:9b:ab:d7:4f:09:ca:ab:bb:4f:df:e6:a6:da:ec:
90:fe:94:61:9a:33:86:d9:e8:3a:dc:a3:8a:51:b2:
71:e9:d4:a8:c4:81:ce:e5:fe:85:04:5c:c6:1f:a8:
e1:15:9c:d1:35:1d:b0:19:51:84:28:1b:b4:4e:d1:
91:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1D:56:8E:1E:0C:51:A3:C0:BB:35:9D:E0:95:55:26:31:1B:47:D8
X509v3 Authority Key Identifier:
keyid:CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ed:8d:64:b0:80:44:53:76:21:2b:5a:0f:a6:22:05:bd:d0:
e7:4b:38:e2:b1:4b:5a:03:d6:f6:59:f9:28:40:d2:54:ca:d9:
17:c8:4a:4d:73:21:26:30:9d:03:29:69:91:3f:64:61:03:bb:
62:2d:62:e9:19:c3:b8:dc:3f:15:ec:8c:1d:a6:c7:b2:22:2d:
db:23:f9:97:18:78:c7:ba:93:61:23:fd:83:1d:53:2d:7e:cb:
97:c8:2a:39:73:a6:ba:9d:d8:a3:61:93:40:c3:ce:39:cd:22:
71:cf:fa:5a:ba:7b:e5:53:b5:44:fc:fe:37:a1:97:59:87:a8:
a2:90:b7:4a:b2:d7:f2:81:5a:05:ac:f9:1f:2c:04:c9:2a:2e:
95:e5:3d:95:ef:7f:48:b0:cb:bf:7d:51:94:c6:3f:ad:e2:9c:
cf:d8:67:e5:52:6b:da:03:bb:59:ef:96:1a:5d:3c:91:70:d2:
8f:6a:2f:81:4f:3a:85:73:7f:15:ca:f2:a8:12:81:3d:ac:f4:
71:4c:2f:a0:2c:47:61:40:9f:95:3b:8d:26:ce:2d:63:f9:56:
1f:73:86:13:46:80:2d:ef:a1:67:ae:c8:9e:c7:03:ce:f0:61:
3c:37:a8:f4:79:fb:b3:32:f7:30:59:ec:f5:e8:2a:cd:04:65:
0d:a4:fc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:18:57 2026 by rpki-client