Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: yUtfjBCoG/PjEtSMbJHAJM6D0Zfati1UNZa/nXgnFFs=
Subject key identifier: 8A:6A:55:45:E5:34:28:C3:9C:5E:44:C0:66:2F:BE:03:46:0E:A9:D1
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 341B57E20A93CD599EEC4218DB34DBCBD4F87B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 04E3
Signing time: Sat 18 Apr 2026 23:02:41 +0000
Manifest this update: Sat 18 Apr 2026 22:57:41 +0000
Manifest next update: Mon 20 Apr 2026 00:35:41 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: cf3yd1Fr/fH5dZgPDAg0kK7N0du9oLSVN6XsDUxSPwc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:1b:57:e2:0a:93:cd:59:9e:ec:42:18:db:34:db:cb:d4:f8:7b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Apr 18 22:57:41 2026 GMT
Not After : Apr 20 00:35:41 2026 GMT
Subject: CN=8A6A5545E53428C39C5E44C0662FBE03460EA9D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:a0:0b:9a:7b:6e:a3:58:c3:88:e5:59:cc:
e9:2e:ec:e4:98:9c:4a:cc:f9:e0:86:90:77:f1:28:
ff:7e:5d:75:79:ea:75:fa:42:26:b9:bb:78:2f:79:
cd:4a:5e:2e:ae:aa:37:fb:f5:c9:81:ab:8e:b6:30:
fc:b8:54:5f:46:c4:de:8e:35:4e:ec:96:18:6b:5e:
0d:2a:21:a4:58:10:6c:6d:22:d0:35:d8:bb:8a:70:
c6:80:0b:d6:fa:90:20:98:02:68:3f:f2:27:09:d5:
f9:24:a3:bf:ea:88:57:1c:78:de:ac:de:46:61:9c:
fc:f7:7f:9c:cd:9f:45:16:f5:77:28:66:5c:ff:88:
1d:95:ff:83:4c:32:81:a0:f6:50:b4:18:aa:48:a1:
3f:e3:3b:18:0f:29:ab:6b:2d:93:77:57:1a:20:b6:
e1:1c:0f:34:15:63:72:3b:fc:a6:ca:2a:24:dd:db:
11:76:73:db:53:31:81:91:b7:dd:c3:9c:e1:6e:e8:
76:f8:a4:c8:44:b2:20:16:8c:63:a6:42:0d:18:a1:
2b:3b:74:e3:4f:da:4f:ad:8e:93:1a:ad:8a:cc:0e:
fd:a9:4d:8b:b7:c7:e2:08:1f:8c:dd:9c:8d:1c:ab:
34:2c:42:ef:f5:b6:18:01:4e:d4:4d:22:02:86:ab:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6A:55:45:E5:34:28:C3:9C:5E:44:C0:66:2F:BE:03:46:0E:A9:D1
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:28:f0:cb:9b:a2:2d:95:86:83:5e:00:35:6e:29:30:b4:86:
b3:df:0a:0f:56:db:a0:4f:8a:08:e2:91:0f:e3:f2:dc:66:5b:
ef:95:f4:65:b8:f8:62:42:9e:90:25:bf:99:03:62:a1:20:b0:
d6:73:d6:b1:6e:07:58:24:14:d7:62:0c:83:59:24:ae:35:d0:
19:69:d9:5a:41:ed:34:0f:63:87:f6:e2:57:08:e2:d8:b8:d0:
41:06:e0:28:5b:a3:3f:5c:17:4b:f3:1b:60:90:cf:73:f5:10:
91:91:1b:36:43:e4:c6:ea:c8:d5:ca:88:44:9e:62:13:a9:61:
26:f0:06:a3:61:e3:bb:ec:f8:a1:be:02:64:dd:00:6d:fc:9c:
15:16:c2:1c:77:9b:13:4d:7c:54:7d:ef:4f:b4:47:78:20:53:
3b:d1:98:eb:40:56:0e:7f:d3:fa:23:40:4f:38:a7:63:94:37:
a2:d5:df:e5:78:fd:4b:5d:b1:3c:29:ad:c4:51:f7:2f:4f:f7:
26:1c:a0:19:10:a6:13:eb:4f:3c:fd:23:91:67:e9:80:88:49:
66:c4:d5:1f:43:e2:29:10:c3:84:3b:2b:43:ec:fc:1b:9e:31:
54:df:16:57:98:82:87:4c:0e:17:33:cc:b3:7a:ba:54:92:2c:
bd:e7:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:59 2026 by rpki-client