Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
File: CF277DDF4A74DE53E4483795713BFB135A1140DE.mft (raw, json)
Hash identifier: kKzOVvcchoYdcLIMNFQvlAQY4ud9uauVonpv++XNpIQ=
Subject key identifier: BE:43:12:AA:B7:49:F1:DC:AC:A5:E0:E5:27:CE:39:72:AF:92:6A:E4
Authority key identifier: CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
Certificate issuer: /CN=cf277ddf4a74de53e4483795713bfb135a1140de
Certificate serial: 33D22B73D5437E9FD993EF308968D82FC0DDA503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
Manifest number: 0164
Signing time: Fri 24 Jul 2026 02:04:39 +0000
Manifest this update: Fri 24 Jul 2026 01:59:39 +0000
Manifest next update: Sat 25 Jul 2026 04:38:39 +0000
Files and hashes: 1: AS213413.asa (hash: ijn+TOAS1cY9+9JFyv4vPp9+k2gOEooZ5b3w0sz5SsA=)
2: CF277DDF4A74DE53E4483795713BFB135A1140DE.crl (hash: tQypU40YwhkaEgfDxgtWAOiCOJYPsXQLvmwC6uNfai8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d2:2b:73:d5:43:7e:9f:d9:93:ef:30:89:68:d8:2f:c0:dd:a5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf277ddf4a74de53e4483795713bfb135a1140de
Validity
Not Before: Jul 24 01:59:39 2026 GMT
Not After : Jul 25 04:38:39 2026 GMT
Subject: CN=BE4312AAB749F1DCACA5E0E527CE3972AF926AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:45:f7:0d:fa:39:54:b8:2a:d1:16:32:da:
55:2e:1c:7d:7b:88:f9:c9:31:f9:33:a3:75:b3:66:
f7:30:6f:ca:29:91:83:0f:cb:a5:42:98:1e:b3:1a:
da:b6:5b:9d:af:b8:fc:8b:42:c8:93:c7:90:7d:ef:
7e:1d:5a:d4:d4:6e:d6:02:d3:b9:c5:d3:89:6b:69:
98:31:6b:8c:fc:61:c6:3a:0e:1d:0d:5c:90:21:8f:
54:cd:d6:01:ff:86:94:70:aa:d7:a1:86:58:a9:01:
a9:43:46:9a:3f:e6:02:57:d5:c7:c9:24:27:c7:11:
10:d1:1c:65:76:f2:3e:9a:0d:d6:cd:72:a2:d0:a1:
99:61:8e:bf:ae:f1:4e:6e:85:79:1c:5f:5b:e8:87:
c5:91:78:1f:15:1e:9c:dc:68:d8:e6:01:8e:6d:21:
5c:b8:7a:b6:6e:f5:0a:8a:d0:ee:2d:b0:cc:b3:24:
e0:56:d4:9c:3f:98:11:92:1c:82:86:39:17:2c:60:
f2:39:c8:bb:9b:04:27:69:ea:16:bc:3e:a1:dc:b8:
7e:6b:c8:6e:1d:f6:69:65:ac:13:58:dc:6c:eb:19:
77:61:a0:82:32:50:16:5a:2e:23:76:12:63:85:e6:
ea:ff:71:d8:2c:0b:38:75:4f:bd:c7:ad:7e:d6:f8:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:43:12:AA:B7:49:F1:DC:AC:A5:E0:E5:27:CE:39:72:AF:92:6A:E4
X509v3 Authority Key Identifier:
keyid:CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:cc:8c:12:4b:9d:74:52:a8:c1:4a:69:28:3c:d9:71:79:60:
e1:9e:7a:f6:9c:50:70:fb:66:25:d1:58:ae:8b:91:c6:3f:87:
b5:58:e9:ca:7b:9a:2a:45:e7:f9:09:44:82:38:d4:be:de:50:
bd:f6:ca:cb:22:38:c2:d7:53:54:69:51:e4:e6:ae:95:fb:7d:
25:45:ca:57:cf:43:21:7b:30:44:4d:d1:60:cb:41:5e:0d:01:
07:84:7b:db:17:4b:d1:09:7b:1a:4e:7c:a3:6f:70:f2:a1:99:
44:23:07:30:65:ee:b4:bd:61:dd:bf:68:05:3e:d6:09:4d:60:
ae:d3:cf:d9:94:af:96:9c:2f:e2:9b:1d:71:a6:5a:5d:25:e1:
42:ca:4e:9b:9a:08:27:07:89:e3:ad:68:7f:be:85:0e:3d:da:
90:fe:cc:14:40:62:59:98:52:e1:03:2e:12:a1:e9:41:c8:a7:
2e:a9:95:38:69:10:be:1d:aa:2b:e2:95:1e:27:2c:1e:b4:2d:
7d:3d:f0:b2:fe:01:c3:18:9a:71:4c:f9:fc:bc:ac:ac:78:ac:
c0:c5:4d:e5:12:c2:e4:c7:2e:7a:66:ad:06:e0:fc:6f:8c:0f:
b7:e1:d6:9d:42:7f:ab:2a:7c:e6:11:28:8b:a1:54:9a:6d:08:
f7:12:ed:b8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUM9Irc9VDfp/Zk+8wiWjYL8DdpQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2YyNzdkZGY0YTc0ZGU1M2U0NDgzNzk1NzEzYmZiMTM1
YTExNDBkZTAeFw0yNjA3MjQwMTU5MzlaFw0yNjA3MjUwNDM4MzlaMDMxMTAvBgNV
BAMTKEJFNDMxMkFBQjc0OUYxRENBQ0E1RTBFNTI3Q0UzOTcyQUY5MjZBRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjMkX3Dfo5VLgq0RYy2lUuHH17
iPnJMfkzo3WzZvcwb8opkYMPy6VCmB6zGtq2W52vuPyLQsiTx5B9734dWtTUbtYC
07nF04lraZgxa4z8YcY6Dh0NXJAhj1TN1gH/hpRwqtehhlipAalDRpo/5gJX1cfJ
JCfHERDRHGV28j6aDdbNcqLQoZlhjr+u8U5uhXkcX1voh8WReB8VHpzcaNjmAY5t
IVy4erZu9QqK0O4tsMyzJOBW1Jw/mBGSHIKGORcsYPI5yLubBCdp6ha8PqHcuH5r
yG4d9mllrBNY3GzrGXdhoIIyUBZaLiN2EmOF5ur/cdgsCzh1T73HrX7W+BQlAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUvkMSqrdJ8dyspeDlJ845cq+SauQwHwYDVR0j
BBgwFoAUzyd930p03lPkSDeVcTv7E1oRQN4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2
OTQyLzAvQ0YyNzdEREY0QTc0REU1M0U0NDgzNzk1NzEzQkZCMTM1QTExNDBERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p5ZDkzMHAwM2xQa1NEZVZjVHY3RTFv
UlFONC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83OGU2MTYxMS0z
YjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMC9DRjI3N0RERjRBNzRERTUzRTQ0
ODM3OTU3MTNCRkIxMzVBMTE0MERFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscyMEkuddFKowUppKDzZ
cXlg4Z569pxQcPtmJdFYrouRxj+HtVjpynuaKkXn+QlEgjjUvt5QvfbKyyI4wtdT
VGlR5Oaulft9JUXKV89DIXswRE3RYMtBXg0BB4R72xdL0Ql7Gk58o29w8qGZRCMH
MGXutL1h3b9oBT7WCU1grtPP2ZSvlpwv4psdcaZaXSXhQspOm5oIJweJ461of76F
Dj3akP7MFEBiWZhS4QMuEqHpQcinLqmVOGkQvh2qK+KVHicsHrQtfT3wsv4Bwxia
cUz5/LysrHiswMVN5RLC5McuematBuD8b4wPt+HWnUJ/qyp85hEoi6FUmm0I9xLt
uA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:19 2026 by rpki-client