Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
File: CF277DDF4A74DE53E4483795713BFB135A1140DE.mft (raw, json)
Hash identifier: m7fbMIFHivaP3RltOCDB2dUoXpnGLVvox+YTwCd5fLs=
Subject key identifier: CE:B5:AA:F0:0B:73:7D:A7:66:AC:DC:4C:58:87:4D:47:66:0F:A9:36
Authority key identifier: CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
Certificate issuer: /CN=cf277ddf4a74de53e4483795713bfb135a1140de
Certificate serial: 1EFE35763F89BF42E679996B5F3B8FE28684E3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
Manifest number: B2
Signing time: Thu 26 Mar 2026 07:03:15 +0000
Manifest this update: Thu 26 Mar 2026 06:58:15 +0000
Manifest next update: Fri 27 Mar 2026 08:16:15 +0000
Files and hashes: 1: CF277DDF4A74DE53E4483795713BFB135A1140DE.crl (hash: vIv1fLHf+CEhCMZnuNkwPR6qJdAUf+enjcgLikEVhuI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:fe:35:76:3f:89:bf:42:e6:79:99:6b:5f:3b:8f:e2:86:84:e3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf277ddf4a74de53e4483795713bfb135a1140de
Validity
Not Before: Mar 26 06:58:15 2026 GMT
Not After : Mar 27 08:16:15 2026 GMT
Subject: CN=CEB5AAF00B737DA766ACDC4C58874D47660FA936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:e7:1b:9c:59:8b:86:5a:ed:fd:a8:d1:6a:
c9:25:74:54:e5:a4:70:48:e5:cb:33:09:4e:48:30:
ca:e2:ee:b9:e3:a7:7c:8f:3b:00:55:19:69:fe:2b:
f4:b3:83:cc:71:69:94:06:1c:d8:e8:d6:00:5b:1d:
6a:f2:fe:c1:ac:6c:af:44:0f:01:74:85:60:31:9e:
02:b9:2f:28:38:8b:b5:d6:b4:d8:1c:50:4f:f5:69:
88:51:d5:cc:b0:19:b6:27:c3:e8:2c:8a:2e:06:9f:
3c:3f:37:57:c8:95:51:a4:cb:65:86:45:19:db:f3:
30:01:8a:b0:d4:bf:2a:8d:1a:9c:69:95:a3:ee:21:
15:41:b9:80:69:c7:2b:71:54:74:60:70:86:10:fd:
60:a3:4b:12:b2:5b:33:8b:e4:ca:13:fc:71:85:b7:
39:ff:f7:01:1e:c1:b8:f9:f9:3a:97:2d:ec:53:70:
0d:73:08:20:b6:18:7b:59:21:bf:cd:29:bf:5f:af:
24:11:65:cc:05:04:6c:5d:24:2f:86:61:12:e1:ef:
7f:ff:b9:dc:bf:1c:d4:75:a8:88:f6:59:14:fd:7e:
94:d0:e1:bb:43:44:f0:51:52:f0:10:b9:ed:fe:f8:
fd:a1:e2:ac:2f:ef:30:ae:f2:c5:c3:4d:0c:53:42:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B5:AA:F0:0B:73:7D:A7:66:AC:DC:4C:58:87:4D:47:66:0F:A9:36
X509v3 Authority Key Identifier:
keyid:CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b2:aa:11:0b:2f:01:23:4a:1f:f6:a5:e8:f8:45:7e:15:94:
f2:99:66:bf:19:c6:4e:dc:c9:46:ef:88:7e:a0:ef:c8:11:92:
6d:1f:15:c8:ee:ea:4b:5e:56:0a:ce:0a:3e:fa:5c:ba:08:34:
19:57:de:a1:e4:44:48:6e:88:c6:db:e6:bc:7c:51:2a:bb:ab:
09:f8:96:ef:f0:6b:9f:d6:9c:19:7e:30:4c:87:82:b4:36:26:
ac:f8:e8:6d:dc:0b:fa:d2:44:6c:5d:7b:0d:03:be:fa:96:02:
e7:6c:68:79:ef:e8:27:ff:51:86:3b:bf:92:54:0d:2b:8c:67:
b5:16:d3:c9:a8:55:08:5e:3f:61:8c:c5:10:03:38:a3:4e:51:
f7:e9:34:fc:0e:a9:c9:61:39:f8:7f:a4:af:90:c7:b1:35:be:
88:eb:f8:dd:a7:30:a0:17:03:45:d8:37:99:d3:16:5f:b4:0e:
e6:3a:0d:3a:b3:e0:b8:26:dc:00:d1:f9:e8:ca:43:17:49:87:
8e:54:79:84:eb:90:f5:2f:2f:38:b2:33:40:ee:46:2d:5f:28:
0b:be:3e:06:55:df:dd:c6:75:a2:21:86:6a:6d:9c:e2:29:e0:
aa:0e:51:fb:37:c9:67:93:ea:e1:69:bb:2c:49:ac:00:8a:3a:
cb:b6:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:36:47 2026 by rpki-client