
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
File: CF277DDF4A74DE53E4483795713BFB135A1140DE.mft (raw, json)
Hash identifier: DFZK3AQ9jrDSssvMArx3E35bPa8zk+8wgAWLFhIK4S0=
Subject key identifier: 0A:D0:AC:1F:EB:A0:1E:CD:34:92:CA:54:BA:2B:CC:23:D7:9C:22:F5
Authority key identifier: CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
Certificate issuer: /CN=cf277ddf4a74de53e4483795713bfb135a1140de
Certificate serial: 7EF1B2147B4AF9FB3E9D2272929FE9D63CE1BC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
Manifest number: 012B
Signing time: Sat 13 Jun 2026 11:28:40 +0000
Manifest this update: Sat 13 Jun 2026 11:23:40 +0000
Manifest next update: Sun 14 Jun 2026 12:23:40 +0000
Files and hashes: 1: AS213413.asa (hash: ijn+TOAS1cY9+9JFyv4vPp9+k2gOEooZ5b3w0sz5SsA=)
2: CF277DDF4A74DE53E4483795713BFB135A1140DE.crl (hash: kSsq/dPrIjQLxSwC2J53VreR++XtBaDbHTWxEI/nMSg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f1:b2:14:7b:4a:f9:fb:3e:9d:22:72:92:9f:e9:d6:3c:e1:bc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf277ddf4a74de53e4483795713bfb135a1140de
Validity
Not Before: Jun 13 11:23:40 2026 GMT
Not After : Jun 14 12:23:40 2026 GMT
Subject: CN=0AD0AC1FEBA01ECD3492CA54BA2BCC23D79C22F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:c6:71:af:85:0e:20:ba:27:38:2e:77:3b:
a6:54:2a:c0:95:57:bc:f3:35:c6:f5:53:85:1f:fc:
66:e3:cd:a1:0a:7e:1b:54:c6:1d:e9:4a:0b:1e:b8:
9f:53:31:a6:4c:ba:70:ff:f0:e1:44:10:ea:35:4d:
0f:7b:22:3e:68:c7:db:a5:1a:61:6f:11:00:00:9a:
0d:30:21:ce:15:3a:61:d9:7e:47:14:83:dc:6d:88:
b6:72:ba:fa:b2:e0:27:37:09:e5:d3:8b:1d:c4:c3:
bb:a6:aa:f9:93:b6:7a:96:12:c0:39:80:90:1a:96:
cf:11:a9:70:e3:e6:fa:64:8b:19:64:42:b5:23:d9:
a7:4d:d9:ae:3e:52:3d:97:c5:1b:88:55:d7:e6:13:
05:99:77:32:67:f4:1d:fb:05:59:06:66:5b:56:ae:
d0:81:6d:82:36:e6:6b:7b:10:13:0a:44:de:6a:3c:
9e:01:be:91:77:e6:7a:a9:c1:4e:99:1d:f5:35:e2:
79:51:df:af:fe:d6:bd:01:7b:22:d4:36:f4:46:d5:
60:a0:a2:e2:66:b4:9d:15:ed:f1:94:04:cf:21:05:
92:12:b7:71:1b:42:ef:bf:a0:11:88:08:29:26:49:
d6:f0:92:5b:95:0d:34:a4:1b:21:00:2b:3b:32:ea:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D0:AC:1F:EB:A0:1E:CD:34:92:CA:54:BA:2B:CC:23:D7:9C:22:F5
X509v3 Authority Key Identifier:
keyid:CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:12:55:45:09:e6:e4:92:7a:a8:ce:4b:da:0c:8c:32:28:a3:
6e:34:6a:df:8d:b7:1c:c4:4f:24:fd:34:b0:1d:b8:cf:36:17:
8f:cf:cd:5c:2a:19:14:a5:d4:91:72:af:9a:da:11:f2:a6:8e:
da:9b:62:37:8c:58:7a:9b:aa:a2:61:3f:43:e5:68:df:61:8d:
a4:f0:ec:b4:d4:65:db:1d:97:57:a7:cc:82:f9:a0:4a:33:df:
09:2b:14:b9:94:d4:09:89:7c:92:2c:64:48:a7:2a:fa:6b:b6:
56:60:ca:84:24:7b:da:d3:de:21:27:ef:a7:a4:34:32:55:d9:
23:5f:60:60:fa:69:8b:d0:77:0e:c0:79:37:82:a1:ab:26:64:
ae:bf:b9:3c:28:f5:35:b7:c2:77:1e:54:6b:df:5a:ba:c4:35:
df:ee:f0:29:ba:6b:a5:bb:15:7f:f0:87:d7:96:2f:91:b0:d3:
1e:99:c8:de:4a:d7:68:0e:31:c6:52:df:2b:e6:aa:37:75:2b:
98:2e:12:36:9f:6a:2b:de:5b:d0:2e:f5:92:97:12:88:ea:58:
10:44:c4:55:0b:b3:a9:52:19:75:4e:15:40:87:92:4a:e9:98:
23:b2:49:ec:37:85:4a:d0:b4:43:ea:c3:14:68:55:37:9c:a5:
52:fd:33:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:38:38 2026 by rpki-client