Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
File: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json)
Hash identifier: avHJHbWSKuXJPJzVEl0e9JKmRLKTOOILjvm/r9wENNA=
Subject key identifier: 22:D8:12:5E:A7:83:E2:BC:E3:BE:B7:8B:07:80:C3:57:19:BD:88:E9
Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
Certificate issuer: /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Certificate serial: 7CE938403D2931ABA5ACE4F9522DB8D95E4BECAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
Manifest number: 041C
Signing time: Sun 19 Apr 2026 09:34:54 +0000
Manifest this update: Sun 19 Apr 2026 09:29:54 +0000
Manifest next update: Mon 20 Apr 2026 13:11:54 +0000
Files and hashes: 1: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: tXfTJEntsZipAKTGGjQLsE+GnWKQrIz5ecHKZ/41rLI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e9:38:40:3d:29:31:ab:a5:ac:e4:f9:52:2d:b8:d9:5e:4b:ec:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Validity
Not Before: Apr 19 09:29:54 2026 GMT
Not After : Apr 20 13:11:54 2026 GMT
Subject: CN=22D8125EA783E2BCE3BEB78B0780C35719BD88E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:91:8a:f1:18:ab:1d:11:33:42:87:5e:60:
b3:8d:92:64:a1:90:51:0e:36:8d:8e:d2:f1:00:b2:
82:a4:85:60:36:5c:21:85:1b:a8:8f:b0:0b:c4:0d:
6c:38:06:05:2d:05:3c:7f:77:59:1a:d0:a2:98:58:
7a:b6:27:b5:6c:f7:db:c5:84:cb:cf:d2:6d:2a:8d:
c7:52:de:e7:ce:48:60:2d:43:43:d2:f6:9c:5d:ac:
43:5c:6e:08:4d:1c:e6:09:70:dd:5e:70:a3:94:0b:
d5:c0:ad:18:d6:7e:1b:ee:47:a9:4d:10:d5:02:29:
25:cd:da:bf:d9:aa:f3:6e:7c:be:8c:45:f1:3e:23:
27:e0:47:66:b9:0d:8a:4f:d8:e5:a4:cd:22:82:6c:
c0:a8:c9:fd:39:ba:4d:f5:f6:d7:78:6a:3d:b3:64:
c6:59:0e:5f:1f:c9:eb:8c:0a:fe:51:d1:a4:d6:0b:
8d:76:74:02:40:d2:6f:b2:30:97:d3:13:71:b9:38:
14:60:c9:d7:7d:06:12:f3:4d:e3:10:57:0a:2d:bc:
28:f3:35:ef:f2:0f:7c:48:2b:2e:f0:fd:b6:8a:5c:
20:65:56:34:03:cb:c9:17:c9:9a:20:09:d0:46:1f:
d1:f8:a1:8c:c6:6b:a5:e9:4e:c2:11:7f:50:9d:ea:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D8:12:5E:A7:83:E2:BC:E3:BE:B7:8B:07:80:C3:57:19:BD:88:E9
X509v3 Authority Key Identifier:
keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:76:68:ff:9c:eb:3b:29:b7:a5:b0:10:39:f8:48:cd:2c:ec:
45:77:10:8d:96:6e:21:23:70:1b:df:6f:c4:44:00:31:3d:31:
ce:b6:ed:15:f5:73:83:65:3d:28:6b:68:45:1f:6e:45:65:61:
fa:a0:53:1f:ab:3d:bd:97:0c:68:e1:e5:b7:f1:db:63:14:ba:
61:55:8e:06:24:29:71:c5:32:73:73:ee:d2:cb:b1:38:46:6c:
f2:17:d8:ad:18:bd:0a:ea:63:9e:f8:99:c5:cd:13:79:05:b0:
f4:77:ba:c1:5b:1d:38:2f:50:02:9f:d6:17:15:9e:7e:41:06:
c8:bd:35:d2:38:b2:71:27:95:42:6e:be:35:eb:60:40:93:00:
d4:cc:b4:64:3d:1e:16:19:7b:18:7c:95:f1:15:e4:70:f6:33:
b0:4f:d0:bf:af:c6:65:45:90:a6:09:bf:0b:fd:6d:86:f9:a8:
f0:9c:dd:06:f0:c4:6f:b9:d6:03:9f:7b:57:48:31:1a:92:f5:
5d:3e:3c:3a:68:4f:92:42:dc:48:39:ac:17:98:03:8a:3c:8d:
06:2f:39:bd:57:0b:ce:7f:9b:5b:92:59:78:1c:a7:8d:74:bf:
95:70:b9:aa:b6:c2:5b:15:d0:bd:75:1b:25:5c:f2:15:29:50:
45:56:82:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:48:13 2026 by rpki-client