Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: 2mSwsUsVSRcihP9YlVkN+utpk/LHQx2NNHbxkd1dmoA=
Subject key identifier: D8:8F:2A:E8:5F:1A:AF:44:19:31:67:ED:D6:C1:F3:8F:B1:76:73:8C
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 3A01812668792D6D49FF9BBE2C98E77D292F4106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 0459
Signing time: Mon 03 Nov 2025 13:19:22 +0000
Manifest this update: Mon 03 Nov 2025 13:14:22 +0000
Manifest next update: Tue 04 Nov 2025 15:45:22 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: IdPbmQL1OCiqvq3EnFyZEtFaxr/r4bIJWvH9D6a0foQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 15:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:01:81:26:68:79:2d:6d:49:ff:9b:be:2c:98:e7:7d:29:2f:41:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Nov 3 13:14:22 2025 GMT
Not After : Nov 4 15:45:22 2025 GMT
Subject: CN=D88F2AE85F1AAF44193167EDD6C1F38FB176738C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:89:8e:5f:ac:70:a5:5f:38:d6:24:44:e5:7d:
eb:87:24:ee:ae:93:c1:1b:b1:78:fa:da:2f:59:3f:
96:48:a2:07:5e:fc:f4:ad:e6:82:26:e8:9c:55:1f:
09:48:a3:71:60:c3:a2:96:d4:61:18:3e:61:06:6d:
b9:6e:5d:95:55:dd:7f:23:79:74:db:14:50:cb:aa:
23:45:fb:46:b5:cf:7a:c7:9d:d4:84:5a:98:cd:63:
1e:d2:2b:4f:42:0a:1d:ba:38:6f:b7:f5:e6:e3:51:
8b:c4:ff:6c:5e:37:0f:f1:13:33:cd:fa:21:6d:8d:
ac:29:a7:d0:5e:d8:a1:99:be:16:70:56:9a:f3:02:
93:bc:c6:d4:7b:47:51:7c:70:fd:db:e7:e0:48:2a:
51:1f:b8:82:63:04:94:e4:e4:87:64:20:1a:00:d9:
00:85:e7:9a:ec:25:1f:9c:49:f9:f8:55:ee:42:8d:
e6:f9:fa:a9:1c:36:f9:2b:b1:9e:53:5c:1e:05:7a:
79:ed:e1:17:e1:4b:b2:ed:77:93:32:96:9d:3a:40:
84:d3:8e:a1:5b:ea:d7:3c:4e:e2:9f:6b:4a:09:32:
e1:06:0f:68:a3:4f:7f:09:31:19:2e:61:d2:d0:37:
96:df:87:6a:a9:51:b6:c4:bd:11:5f:60:80:09:5e:
10:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8F:2A:E8:5F:1A:AF:44:19:31:67:ED:D6:C1:F3:8F:B1:76:73:8C
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:23:a1:5b:b0:23:e0:0e:a1:90:f9:40:d5:97:fa:c8:50:22:
3b:29:76:2d:9f:0b:0f:74:3b:29:94:83:db:70:9a:d3:13:88:
20:dd:91:6c:82:e2:78:cc:fe:bf:4e:b0:c5:bb:3c:ae:f0:84:
5a:fb:0c:ca:c1:f2:ff:a4:96:b0:98:87:15:99:c0:f9:05:2a:
be:07:83:9a:20:d0:80:29:66:4b:2e:4f:ac:75:55:6b:cf:a9:
3b:82:5b:d5:fc:bc:79:44:10:27:99:93:ec:5e:3a:42:40:5d:
53:8b:c0:b3:8a:44:8f:f6:65:00:79:57:bb:2f:fa:b2:3d:a6:
ec:65:08:e3:52:9e:c4:2e:e8:9f:7d:80:0b:51:9b:eb:73:82:
42:6b:2c:b5:19:64:bc:f0:ab:2e:af:7f:06:eb:1f:75:1e:02:
aa:37:d5:c7:3f:b7:14:2e:bf:c5:6b:ba:31:9d:75:4c:bf:f5:
ff:3f:98:27:a2:ec:a4:6e:21:8b:c3:ad:1d:71:56:79:be:a3:
18:19:fd:6a:ed:95:65:16:a7:f8:77:cc:f8:46:9d:d9:24:d4:
33:88:ba:1d:ab:af:fb:63:d3:0c:6e:f0:2d:57:5c:30:66:86:
59:4b:b9:74:98:82:bc:c3:5a:22:4a:75:2e:02:fc:aa:6b:d3:
01:10:f4:5c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOgGBJmh5LW1J/5u+LJjnfSkvQQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2ZjMjZhNmRlZjJlMmZmMWViY2MxMGE5ODcxNDc4Yjhh
OGJmMzkwODAeFw0yNTExMDMxMzE0MjJaFw0yNTExMDQxNTQ1MjJaMDMxMTAvBgNV
BAMTKEQ4OEYyQUU4NUYxQUFGNDQxOTMxNjdFREQ2QzFGMzhGQjE3NjczOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpiY5frHClXzjWJETlfeuHJO6u
k8EbsXj62i9ZP5ZIogde/PSt5oIm6JxVHwlIo3Fgw6KW1GEYPmEGbbluXZVV3X8j
eXTbFFDLqiNF+0a1z3rHndSEWpjNYx7SK09CCh26OG+39ebjUYvE/2xeNw/xEzPN
+iFtjawpp9Be2KGZvhZwVprzApO8xtR7R1F8cP3b5+BIKlEfuIJjBJTk5IdkIBoA
2QCF55rsJR+cSfn4Ve5Cjeb5+qkcNvkrsZ5TXB4Fennt4RfhS7Ltd5Mylp06QITT
jqFb6tc8TuKfa0oJMuEGD2ijT38JMRkuYdLQN5bfh2qpUbbEvRFfYIAJXhDfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU2I8q6F8ar0QZMWft1sHzj7F2c4wwHwYDVR0j
BBgwFoAUz8Jqbe8uL/HrzBCphxR4uKi/OQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFi
YzEyLzkvQ0ZDMjZBNkRFRjJFMkZGMUVCQ0MxMEE5ODcxNDc4QjhBOEJGMzkwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3o4SnFiZTh1TF9IcnpCQ3BoeFI0dUtp
X09RZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0w
OGJhLTRjZGUtODk3OS00ZmFlYTRiMWJjMTIvOS9DRkMyNkE2REVGMkUyRkYxRUJD
QzEwQTk4NzE0NzhCOEE4QkYzOTA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiOhW7Aj4A6hkPlA1Zf6
yFAiOyl2LZ8LD3Q7KZSD23Ca0xOIIN2RbILieMz+v06wxbs8rvCEWvsMysHy/6SW
sJiHFZnA+QUqvgeDmiDQgClmSy5PrHVVa8+pO4Jb1fy8eUQQJ5mT7F46QkBdU4vA
s4pEj/ZlAHlXuy/6sj2m7GUI41KexC7on32AC1Gb63OCQmsstRlkvPCrLq9/Busf
dR4CqjfVxz+3FC6/xWu6MZ11TL/1/z+YJ6LspG4hi8OtHXFWeb6jGBn9au2VZRan
+HfM+Ead2STUM4i6Hauv+2PTDG7wLVdcMGaGWUu5dJiCvMNaIkp1LgL8qmvTARD0
XA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:37 2025 by rpki-client