Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: NHiFbubXJ2kmPwGrFpzq73fN7dnb3fd+rowl6Wil174=
Subject key identifier: 09:EE:99:31:6E:95:EC:F9:BC:0D:01:52:92:1D:10:C8:7C:38:16:8B
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 7D7B6ECC3EDB44D72F88E665CD9199F3803A8F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 04A2
Signing time: Sun 01 Mar 2026 18:08:00 +0000
Manifest this update: Sun 01 Mar 2026 18:03:00 +0000
Manifest next update: Mon 02 Mar 2026 21:58:00 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: xQauFNDX4nGL8uq3+daN+4XUP1z9BN5ZmXJagtCGN8I=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:7b:6e:cc:3e:db:44:d7:2f:88:e6:65:cd:91:99:f3:80:3a:8f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Mar 1 18:03:00 2026 GMT
Not After : Mar 2 21:58:00 2026 GMT
Subject: CN=09EE99316E95ECF9BC0D0152921D10C87C38168B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:6b:3a:63:12:48:a5:93:54:8b:0f:9c:ce:
7c:aa:f5:a1:d9:db:8e:3d:39:ec:35:75:f2:96:1a:
7f:95:9f:91:00:b9:70:ea:1c:88:27:fe:45:f2:f6:
ad:ed:20:fb:01:97:58:c7:d7:8f:ac:ca:a2:18:b8:
7a:f7:d8:b3:10:4a:ec:66:ee:87:eb:5f:b8:80:16:
83:8f:03:29:61:04:c1:2b:f7:dd:c8:12:f7:21:3a:
4b:bd:ad:fc:ab:83:88:66:04:04:c5:08:c5:5b:b3:
fb:eb:4c:1e:b9:f0:f8:64:0c:12:47:6f:80:01:07:
5b:8d:9b:0c:ef:14:a9:6c:5e:af:22:fa:3a:7c:24:
79:5a:34:19:dc:15:8d:21:a9:54:15:69:18:0c:79:
9d:01:d8:bd:10:0f:a7:d7:f7:59:18:14:f6:85:e1:
d1:2e:72:50:50:b0:a5:b2:c5:54:d4:17:fd:f1:05:
49:c8:7a:25:66:fa:e9:76:bf:8e:ef:d7:80:b2:f0:
5e:e9:30:f3:6f:84:56:cd:f8:a6:40:fa:95:5c:39:
23:ef:a9:fe:09:52:2b:37:d9:14:d3:60:4e:1e:6c:
fa:1d:09:3b:33:08:5d:b0:b6:f4:e3:ac:cb:c3:2d:
30:1d:85:73:ee:95:d4:50:46:34:c2:97:88:1f:2e:
84:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:99:31:6E:95:EC:F9:BC:0D:01:52:92:1D:10:C8:7C:38:16:8B
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e4:31:3b:08:c0:d9:4b:92:cf:a3:d9:4d:fb:72:21:bb:e9:
e6:00:14:6e:7c:c3:e4:3c:c3:de:c4:8b:fd:29:96:6f:5f:32:
9c:41:1f:54:34:3e:8e:0a:90:eb:15:2b:aa:9d:c6:d5:22:80:
95:be:64:a7:c2:31:bf:84:d2:d6:fd:37:65:b2:4c:6f:b5:8e:
b7:cf:0c:ac:54:99:c6:ce:05:f9:0e:9f:80:20:b2:1e:fe:0a:
d2:c5:4f:e6:f0:44:f6:cb:53:d5:e0:29:e3:7e:a3:3b:bf:07:
a1:3d:36:d7:68:8b:1f:ef:eb:24:08:5c:1a:36:9a:c5:69:4b:
72:0c:09:65:6d:fd:f6:f9:00:80:03:eb:10:a4:0f:aa:36:3e:
bb:12:bb:cf:a2:f7:c8:79:d8:94:55:41:73:d3:34:a3:c4:31:
a1:9b:44:3f:af:d6:3b:d1:81:8e:23:38:27:1e:b9:e8:29:55:
ae:4c:b2:90:c8:31:8c:cb:8f:e8:1d:de:60:cb:17:3c:b5:ac:
36:04:8f:55:7e:fe:ad:e6:1d:f6:6d:17:b3:63:b1:b1:6c:20:
a5:7c:79:c7:4f:b7:8b:be:88:bb:80:ce:16:99:4a:ce:d9:43:
8e:b2:d7:78:ef:dc:e8:b5:3e:42:5d:1c:f5:fe:78:5d:54:06:
4e:c2:3b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:24 2026 by rpki-client