Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: OozCf4EJKASeLQiiW46Sw3xxm2FdbZZ/jElwN4JPxZA=
Subject key identifier: 68:EC:C0:3D:9C:A9:F6:65:50:D5:4B:2B:7C:49:8E:CB:C6:9B:E1:24
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 722A2979073D4862A4AB206557007F2E13A03182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 04C3
Signing time: Wed 25 Mar 2026 23:55:06 +0000
Manifest this update: Wed 25 Mar 2026 23:50:06 +0000
Manifest next update: Fri 27 Mar 2026 00:13:06 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: QRMpSCy2B0ojiKPOSZ7AMHgzQkbpx5bLauDtquLIRk0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2a:29:79:07:3d:48:62:a4:ab:20:65:57:00:7f:2e:13:a0:31:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Mar 25 23:50:06 2026 GMT
Not After : Mar 27 00:13:06 2026 GMT
Subject: CN=68ECC03D9CA9F66550D54B2B7C498ECBC69BE124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:c5:92:0b:68:49:8d:c6:05:a8:64:86:b1:
c9:e1:56:70:67:40:7b:31:ec:8b:09:29:f2:10:22:
98:3f:dd:b1:75:b6:46:7e:66:6c:44:b9:87:ac:1d:
a9:76:f7:af:b9:28:90:c7:58:1c:b2:7a:b6:6a:19:
3f:96:ef:a3:8e:13:91:b5:0b:d1:d9:09:6c:a4:2a:
c8:65:be:39:f9:51:26:6f:0e:12:24:3f:4c:17:86:
14:c1:70:86:ca:47:02:24:4f:40:5d:19:06:26:f5:
cb:c8:dc:62:83:da:b6:59:d7:80:a0:ee:03:94:b8:
95:e7:ed:c1:2b:61:93:40:d0:39:d0:d7:2d:21:2a:
af:87:32:b0:52:e6:0b:4d:26:b9:a8:66:90:3b:f5:
47:56:90:8d:fd:d3:54:1a:05:29:01:34:7e:31:5e:
a9:5e:e2:e4:d3:e3:08:2e:fe:31:0d:d6:f3:3c:c0:
47:6d:f8:c0:fa:88:ae:c2:51:7b:ad:33:18:63:5b:
19:dd:31:c2:06:2d:bc:93:58:c5:06:01:c5:74:db:
15:75:a9:0d:47:a2:f8:d8:38:26:2e:b2:13:14:e5:
f9:99:4f:5d:19:70:aa:f3:df:b2:d3:26:5c:80:13:
92:fc:3c:83:4c:d4:29:d7:a4:53:2e:bc:2c:17:95:
28:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EC:C0:3D:9C:A9:F6:65:50:D5:4B:2B:7C:49:8E:CB:C6:9B:E1:24
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:de:c4:b3:68:2c:fd:74:fc:60:95:de:5e:a1:27:9f:4f:7a:
4a:87:03:d9:04:43:af:55:2d:7c:78:c3:7a:a0:c4:52:4f:38:
fb:4c:1f:ad:14:a6:d0:0e:aa:57:85:fc:d1:2c:cc:a2:27:d5:
74:bc:73:ff:32:8d:34:95:f4:b1:25:bc:0e:bb:05:73:01:30:
b1:63:bb:47:17:ec:68:49:73:ad:88:57:a6:95:06:29:70:81:
e0:9a:6d:14:6e:7c:5b:d5:49:b2:0f:ce:81:6a:df:7a:42:10:
52:36:66:04:ab:38:b5:a1:01:6d:31:92:42:1f:a0:75:32:47:
17:9f:5e:f4:a1:0f:fe:76:52:5b:a8:7d:02:c6:a4:6b:87:89:
12:a7:07:3d:28:35:ac:5b:63:16:df:a3:4b:82:fa:15:d8:7d:
1d:4f:c5:d1:93:42:81:7a:a6:87:dd:75:42:d1:f4:f1:a2:61:
2e:ef:90:5a:ec:f3:e7:46:64:cd:a8:a1:6c:47:61:f8:a3:0b:
87:35:ac:12:02:0c:90:8b:4e:65:48:5f:aa:68:1d:68:b2:48:
d8:7e:95:8e:37:e2:ec:52:5b:de:b9:83:bc:bf:86:c2:40:7b:
17:a9:75:cf:e0:04:fc:66:94:7d:de:c1:cc:79:d6:27:c7:ba:
be:5a:16:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:36 2026 by rpki-client