Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
File: CF277DDF4A74DE53E4483795713BFB135A1140DE.mft (raw, json)
Hash identifier: uR9BOOR1szYWDWFY2Jijs2bEp7WjS28fOrb7d4waI1A=
Subject key identifier: 95:74:84:E5:67:92:E0:03:33:A8:E6:30:81:81:60:3D:90:51:D0:D5
Authority key identifier: CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
Certificate issuer: /CN=cf277ddf4a74de53e4483795713bfb135a1140de
Certificate serial: 2AD1737BD354713D31FB9D04D46C299D0FF61323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
Manifest number: D5
Signing time: Sun 19 Apr 2026 03:04:23 +0000
Manifest this update: Sun 19 Apr 2026 02:59:23 +0000
Manifest next update: Mon 20 Apr 2026 04:36:23 +0000
Files and hashes: 1: CF277DDF4A74DE53E4483795713BFB135A1140DE.crl (hash: bwAk0hWXtfkv+rqHbRVIKDQLr+3H9ob8nQFzAYzLYfI=)
2: AS213413.asa (hash: KmC3G0h/gU81o2a9E+2oEm3i9GTBtg+stta2t0zEtZk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d1:73:7b:d3:54:71:3d:31:fb:9d:04:d4:6c:29:9d:0f:f6:13:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf277ddf4a74de53e4483795713bfb135a1140de
Validity
Not Before: Apr 19 02:59:23 2026 GMT
Not After : Apr 20 04:36:23 2026 GMT
Subject: CN=957484E56792E00333A8E6308181603D9051D0D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:20:69:ce:55:c3:6d:3a:cf:d6:78:b0:a0:
7a:09:2d:24:9f:1d:4c:1f:95:7e:c2:0b:db:ca:57:
ab:5b:f1:5c:e1:6b:79:c6:8e:0c:6a:c6:4f:47:56:
fe:e4:e4:bd:4b:4a:35:6d:99:76:52:56:5f:67:c2:
52:de:22:fd:ce:ac:86:a9:82:5d:7d:4b:2c:4e:bc:
b9:21:16:7d:15:d0:14:d6:f7:71:33:70:92:23:43:
a4:e9:cd:88:1e:b9:ee:13:6a:18:79:fb:63:4b:fd:
9a:54:57:50:b7:fd:88:7a:c5:3a:d3:ab:4f:6e:62:
99:4b:00:a7:ff:e0:13:e6:eb:1b:81:be:7f:24:90:
a6:7c:8c:83:08:a6:23:d0:fd:e7:d9:dc:5b:06:cd:
51:21:e4:83:79:8e:42:27:80:9a:39:46:53:53:0c:
1c:cb:22:24:03:1a:08:b1:99:b5:77:0c:a7:af:5c:
57:87:14:f0:da:ac:23:3f:c4:a1:5d:aa:97:12:bd:
7c:8d:1f:f9:14:80:fe:56:3b:57:bf:b6:ca:e1:dc:
31:36:29:22:7a:fb:91:f8:3b:12:10:e2:dc:2c:97:
d0:fe:f2:aa:e7:5d:56:c5:41:9b:33:a5:db:72:ad:
fb:20:f2:db:ff:54:90:ac:a6:3c:ef:13:cf:b9:29:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:74:84:E5:67:92:E0:03:33:A8:E6:30:81:81:60:3D:90:51:D0:D5
X509v3 Authority Key Identifier:
keyid:CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fa:9d:72:47:de:dc:11:a9:0e:8a:ce:e7:94:bb:92:3a:97:
3b:0c:19:7e:03:e8:57:e1:1a:25:5f:30:ed:1b:46:0a:0e:30:
58:f8:87:09:fb:55:64:84:18:f7:6e:ad:4a:d9:4c:df:c2:87:
a8:ec:c7:46:03:0f:fa:e0:bf:6a:0a:91:b9:c1:1c:c3:fc:3c:
07:a9:94:16:fc:c9:41:5c:fb:87:97:ee:80:35:d5:6d:40:e5:
cb:48:77:1d:e6:02:14:0c:88:57:73:91:97:f9:51:0d:7d:a3:
02:b9:c9:21:20:95:56:21:3e:97:53:82:e2:ce:73:7a:73:d8:
e5:76:0c:e6:4a:2a:f0:a5:01:17:d7:19:50:42:d5:40:b0:f4:
86:f0:ad:a4:b0:73:32:95:1f:c1:ae:e9:ff:c7:01:0e:2f:aa:
7c:a1:14:80:0e:e0:86:51:76:c7:05:a8:76:9b:a2:e6:02:27:
f1:44:3b:95:77:1a:99:c2:53:cb:42:a5:7a:8a:5d:67:04:0b:
1b:c6:5c:0c:31:c7:04:97:b7:4e:8c:7c:69:10:9c:9c:8e:5e:
2b:bc:4c:c4:6c:a8:cb:d5:47:c4:68:0b:96:d5:07:ed:19:ef:
e7:d6:b6:1c:69:77:e3:f8:26:60:3a:ba:82:19:55:68:73:13:
64:f4:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:24:35 2026 by rpki-client