Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: dZvmcrnO5YY0SyhJKa/bWYTOo0hlyjUi3ghmTGaMVtw=
Subject key identifier: 62:94:2B:D6:96:6B:7D:83:81:28:E0:2B:E0:FE:56:10:78:A6:06:C1
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 2B85B21B71A7FF327C7B84F9289F4326DE7FE5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: 022D
Signing time: Mon 21 Sep 2026 21:57:41 +0000
Manifest this update: Mon 21 Sep 2026 21:52:41 +0000
Manifest next update: Wed 23 Sep 2026 01:26:41 +0000
Files and hashes: 1: CE964F98379F0320A7191E6D6788800535885928.crl (hash: 32n5Ab0vOE2pMshUMm6zwxXTc81Dnz6amOWFcFB4Y+8=)
2: AS214955.asa (hash: Q8xewUCi/NeJj+8SeKwplh2UruSS6EWahrF4De9gRYA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:85:b2:1b:71:a7:ff:32:7c:7b:84:f9:28:9f:43:26:de:7f:e5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: Sep 21 21:52:41 2026 GMT
Not After : Sep 23 01:26:41 2026 GMT
Subject: CN=62942BD6966B7D838128E02BE0FE561078A606C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:e2:a8:2d:68:18:d5:ca:c0:18:86:e3:32:
9c:10:72:c2:54:0b:31:e1:f3:da:e2:bd:8a:ac:cc:
ee:52:ff:70:2a:65:f6:01:82:b9:5d:65:7f:e4:93:
40:cf:f1:28:5d:ed:da:31:ee:12:34:2c:90:b1:0f:
19:cf:3a:bb:5b:17:7a:bf:89:5e:f6:2e:54:71:be:
18:c3:21:01:78:f7:cb:a8:9a:4f:1a:0b:1c:1b:21:
2a:63:42:ae:2b:c2:25:42:02:fe:a5:89:ec:de:95:
e9:11:d0:87:52:1e:56:a2:5c:40:6f:ce:51:20:c0:
48:3b:82:26:92:eb:a1:35:49:a8:40:8b:9f:b6:ae:
d6:8f:06:b5:58:52:9b:6f:5c:fc:c3:ce:0c:c2:63:
59:1e:f4:6c:36:76:90:d8:2a:37:4b:39:05:fc:32:
fb:4f:fe:40:b3:6b:45:a3:a7:ad:21:7d:02:b3:2f:
0b:e1:91:5c:11:90:a1:1c:45:92:c1:52:92:a0:25:
ec:f7:18:8d:1c:fc:f5:96:80:ff:10:7e:05:d2:1d:
a1:eb:24:5e:c6:9d:11:54:90:52:86:42:fd:4b:0d:
5f:f8:2b:ca:d1:1c:70:ef:1f:df:8b:84:b7:0f:ac:
96:08:42:b2:51:48:95:17:19:6c:e0:a7:25:db:b9:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:94:2B:D6:96:6B:7D:83:81:28:E0:2B:E0:FE:56:10:78:A6:06:C1
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:38:95:b0:6f:2f:17:4b:40:64:c3:08:40:83:7b:ac:7e:47:
6e:f4:90:e7:d1:e4:c0:1a:d6:49:e5:43:74:f7:a7:74:98:67:
56:04:e6:20:17:91:17:a8:69:53:55:0e:bd:6a:ff:38:16:08:
b3:39:4d:4d:11:25:2e:61:21:50:1f:25:39:eb:ac:cd:14:03:
68:89:ff:5b:2b:b0:9c:37:fe:e2:8d:b7:2f:c0:b7:cc:9e:d9:
b7:7f:ed:e9:06:c9:1e:8f:f0:69:09:d6:67:05:ba:82:26:8c:
a0:4d:ae:77:14:9a:2f:db:e1:25:59:0e:da:7b:5c:e9:79:1c:
c8:83:b4:3c:9e:2f:58:49:62:d0:52:93:90:10:e5:1a:d1:ca:
85:b4:8e:1a:6f:61:ad:0c:db:e7:a4:ff:f2:28:f4:b4:1f:17:
18:55:2e:76:3e:ea:a8:5a:3d:bb:62:0e:a9:29:81:1d:fb:f1:
35:31:0d:3d:4f:a6:50:86:e1:23:8a:5e:c3:c7:10:90:4f:cf:
ae:52:b3:82:ab:47:19:9b:1d:b3:aa:eb:a8:df:f2:f6:21:c8:
6a:8e:9e:74:30:44:38:6f:27:4a:e4:02:13:f6:53:d6:66:ab:
ba:8d:25:e1:ff:3c:bd:25:b3:12:a6:bd:aa:3b:58:fe:2f:2c:
e3:d8:db:26
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUK4WyG3Gn/zJ8e4T5KJ9DJt5/5b8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2U5NjRmOTgzNzlmMDMyMGE3MTkxZTZkNjc4ODgwMDUz
NTg4NTkyODAeFw0yNjA5MjEyMTUyNDFaFw0yNjA5MjMwMTI2NDFaMDMxMTAvBgNV
BAMTKDYyOTQyQkQ2OTY2QjdEODM4MTI4RTAyQkUwRkU1NjEwNzhBNjA2QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj6OKoLWgY1crAGIbjMpwQcsJU
CzHh89rivYqszO5S/3AqZfYBgrldZX/kk0DP8Shd7dox7hI0LJCxDxnPOrtbF3q/
iV72LlRxvhjDIQF498uomk8aCxwbISpjQq4rwiVCAv6liezelekR0IdSHlaiXEBv
zlEgwEg7giaS66E1SahAi5+2rtaPBrVYUptvXPzDzgzCY1ke9Gw2dpDYKjdLOQX8
MvtP/kCza0Wjp60hfQKzLwvhkVwRkKEcRZLBUpKgJez3GI0c/PWWgP8QfgXSHaHr
JF7GnRFUkFKGQv1LDV/4K8rRHHDvH9+LhLcPrJYIQrJRSJUXGWzgpyXbufZnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUYpQr1pZrfYOBKOAr4P5WEHimBsEwHwYDVR0j
BBgwFoAUzpZPmDefAyCnGR5tZ4iABTWIWSgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3
NzkyLzAvQ0U5NjRGOTgzNzlGMDMyMEE3MTkxRTZENjc4ODgwMDUzNTg4NTkyOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3pwWlBtRGVmQXlDbkdSNXRaNGlBQlRX
SVdTZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZjk5ZTY2ZC00
YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMC9DRTk2NEY5ODM3OUYwMzIwQTcx
OTFFNkQ2Nzg4ODAwNTM1ODg1OTI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABziVsG8vF0tAZMMIQIN7
rH5HbvSQ59HkwBrWSeVDdPendJhnVgTmIBeRF6hpU1UOvWr/OBYIszlNTRElLmEh
UB8lOeuszRQDaIn/WyuwnDf+4o23L8C3zJ7Zt3/t6QbJHo/waQnWZwW6giaMoE2u
dxSaL9vhJVkO2ntc6XkcyIO0PJ4vWEli0FKTkBDlGtHKhbSOGm9hrQzb56T/8ij0
tB8XGFUudj7qqFo9u2IOqSmBHfvxNTENPU+mUIbhI4pew8cQkE/PrlKzgqtHGZsd
s6rrqN/y9iHIao6edDBEOG8nSuQCE/ZT1maruo0l4f88vSWzEqa9qjtY/i8s49jb
Jg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:56:19 2026 by rpki-client