Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: MMYCkI8J9GWVvjuyLJadPO0U+RVlLnt/vPjC8gzG9Ro=
Subject key identifier: 31:E8:7C:AB:42:3E:71:4F:44:0B:21:EC:31:66:B8:81:8E:7C:08:6C
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 6BF44FC961F4775C8100FF0C9A5957ECF1742A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: 01DB
Signing time: Tue 28 Jul 2026 15:33:24 +0000
Manifest this update: Tue 28 Jul 2026 15:28:24 +0000
Manifest next update: Wed 29 Jul 2026 19:18:24 +0000
Files and hashes: 1: CE964F98379F0320A7191E6D6788800535885928.crl (hash: lm/XycUaNk0OIYJ8gDpPUgfXAtRYs+3ssp0dyLabDiY=)
2: AS214955.asa (hash: Q8xewUCi/NeJj+8SeKwplh2UruSS6EWahrF4De9gRYA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f4:4f:c9:61:f4:77:5c:81:00:ff:0c:9a:59:57:ec:f1:74:2a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: Jul 28 15:28:24 2026 GMT
Not After : Jul 29 19:18:24 2026 GMT
Subject: CN=31E87CAB423E714F440B21EC3166B8818E7C086C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:25:c5:69:a8:02:2b:17:8f:37:c9:a5:d4:
a7:33:ea:57:91:e8:7a:96:71:53:2e:2d:09:9a:fb:
0f:6b:c3:25:f1:01:c8:e0:b6:71:30:5c:5c:a4:90:
4e:b3:6a:87:51:74:e1:2c:b6:4c:2e:2c:d4:32:f6:
48:13:31:05:74:48:4d:47:c8:46:95:16:ed:de:37:
ba:57:46:27:2b:55:8a:8b:b4:9e:94:1a:9f:e3:cf:
12:f6:72:3c:9f:e4:51:e6:a9:19:aa:70:b8:ad:40:
ac:49:d1:0c:5a:4c:35:bc:a5:eb:1d:d9:f5:5e:3b:
66:79:90:52:08:6e:72:58:a9:a4:32:0d:a3:a6:25:
22:26:d5:ef:6a:b0:ce:be:09:09:ad:51:3d:75:44:
e2:dd:7c:6c:76:08:cc:f5:98:08:8f:d1:b0:1d:b9:
de:25:bf:d6:be:a9:79:fb:8f:e6:1a:98:44:56:34:
80:5a:ca:19:18:6e:5a:69:c1:65:75:23:cd:82:4f:
34:c2:54:49:53:41:a8:ef:3f:9f:c8:96:bd:e9:9d:
5b:ae:4a:be:60:8c:57:56:01:ca:59:02:93:e1:14:
c5:e5:a4:fe:5f:b9:9c:5a:57:57:bf:93:72:1b:7b:
e2:43:1d:bb:aa:a1:ca:26:22:73:2b:aa:e3:8d:24:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E8:7C:AB:42:3E:71:4F:44:0B:21:EC:31:66:B8:81:8E:7C:08:6C
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:17:28:4d:a2:60:d6:4c:9f:9e:66:e2:0c:18:99:ed:0d:28:
a8:2f:a1:29:49:ba:68:87:82:12:dc:d1:7f:5b:e4:4d:43:18:
a4:ed:fd:6b:31:91:da:aa:3b:c7:07:39:6d:67:28:ec:4d:1e:
e3:e6:8a:9c:87:1e:c1:82:85:60:2b:6d:56:53:b2:40:cc:0f:
e4:d6:4b:ce:07:67:cc:04:02:b1:a1:c3:8a:ae:97:2f:35:94:
20:fc:d8:d1:df:bb:96:c1:e2:99:b2:45:19:65:fd:4e:67:c2:
ac:28:31:1a:62:56:b7:6b:2f:97:eb:8d:bf:4d:a5:61:c4:85:
c6:8b:2b:f5:10:ae:01:1f:ca:2d:fd:50:0d:69:bd:0f:f8:4c:
d8:d0:11:ed:c3:8c:99:e9:a8:1c:3b:2a:fd:63:82:a5:24:96:
f8:f0:45:c6:82:bd:bd:79:aa:6b:3c:e8:a1:ac:c5:3b:5c:ae:
25:48:c2:5b:5a:fd:5b:71:07:4d:67:4e:01:f5:f5:56:4c:3a:
fc:6d:f5:5d:3d:89:94:dc:43:93:9a:73:8a:50:4e:e9:56:7e:
a6:5e:19:60:d7:ae:52:06:50:57:0e:1c:ce:85:9a:37:30:df:
61:8a:9b:ca:99:69:76:6c:6f:bd:c5:04:e5:00:b8:68:71:b3:
15:d9:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:34 2026 by rpki-client