Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/CEAF2144C75795C223CC17CA305B72D0A4B4E4F2.mft
File: CEAF2144C75795C223CC17CA305B72D0A4B4E4F2.mft (raw, json)
Hash identifier: iskVwg0IityiOsIRXMF1XVYn4xcMROUn662DSmfehsc=
Subject key identifier: BF:53:C6:AC:ED:3E:43:5D:25:E3:93:A8:22:56:0D:E7:69:84:30:FA
Authority key identifier: CE:AF:21:44:C7:57:95:C2:23:CC:17:CA:30:5B:72:D0:A4:B4:E4:F2
Certificate issuer: /CN=ceaf2144c75795c223cc17ca305b72d0a4b4e4f2
Certificate serial: 4368833F92D86AD1CBF977AD0D5A362CA62EB9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zq8hRMdXlcIjzBfKMFty0KS05PI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/CEAF2144C75795C223CC17CA305B72D0A4B4E4F2.mft
Manifest number: 24
Signing time: Tue 10 Nov 2026 07:31:52 +0000
Manifest this update: Tue 10 Nov 2026 07:26:52 +0000
Manifest next update: Wed 11 Nov 2026 11:23:52 +0000
Files and hashes: 1: CEAF2144C75795C223CC17CA305B72D0A4B4E4F2.crl (hash: ONgdRlRGovHwX+Aw1+QLhQ87KjxiQFhbLxvhNI7uAXU=)
2: AS219418.asa (hash: khaI5BqMbvYDhIIGHO4wtYyJ4IaOIc3pETLpsWiJxV4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/CEAF2144C75795C223CC17CA305B72D0A4B4E4F2.crl
rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/CEAF2144C75795C223CC17CA305B72D0A4B4E4F2.mft
rsync://rpki.ripe.net/repository/DEFAULT/zq8hRMdXlcIjzBfKMFty0KS05PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 11:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:68:83:3f:92:d8:6a:d1:cb:f9:77:ad:0d:5a:36:2c:a6:2e:b9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceaf2144c75795c223cc17ca305b72d0a4b4e4f2
Validity
Not Before: Nov 10 07:26:52 2026 GMT
Not After : Nov 11 11:23:52 2026 GMT
Subject: CN=BF53C6ACED3E435D25E393A822560DE7698430FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:f6:e7:05:14:b3:19:f1:30:1d:70:33:85:
5a:95:64:33:3a:13:ec:23:47:a0:41:68:d4:cc:7a:
ca:d7:ec:fd:41:31:68:70:cc:a8:b1:d9:ef:e7:24:
a3:fc:d6:0d:fb:e6:ad:1d:64:69:d6:63:5e:5f:b2:
f9:18:eb:39:1a:ef:e7:40:0f:4a:b0:a8:bf:79:84:
62:fc:16:6a:d1:15:f6:39:d1:19:4a:8f:fc:85:34:
f8:1d:5b:35:83:94:41:bf:e5:c3:c5:c8:8b:6d:9e:
cf:1d:45:85:17:2a:4e:35:7f:f5:50:87:ec:e2:5b:
07:b5:27:9b:5a:05:88:f2:58:bb:8d:26:5f:f6:9b:
89:87:8d:77:e6:b6:d7:7d:4d:00:af:46:c8:5d:62:
ae:2c:6c:35:61:2d:fc:53:96:d9:d8:5e:2d:52:c8:
ab:a9:5f:36:dc:37:e3:af:44:c2:88:65:8b:34:12:
04:ec:9f:df:8d:e6:6d:94:ab:4b:b8:6c:e0:fc:4b:
6a:fd:51:eb:98:ee:e8:81:5d:7e:ad:2c:f7:5d:0d:
2f:12:cf:b6:86:2b:55:fb:76:9d:15:d4:6e:57:bd:
1d:06:88:86:a7:31:9a:33:94:19:61:e7:b0:ad:00:
70:b9:d2:85:de:88:9e:65:1f:37:62:6a:8d:51:7d:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:53:C6:AC:ED:3E:43:5D:25:E3:93:A8:22:56:0D:E7:69:84:30:FA
X509v3 Authority Key Identifier:
keyid:CE:AF:21:44:C7:57:95:C2:23:CC:17:CA:30:5B:72:D0:A4:B4:E4:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/CEAF2144C75795C223CC17CA305B72D0A4B4E4F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zq8hRMdXlcIjzBfKMFty0KS05PI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/CEAF2144C75795C223CC17CA305B72D0A4B4E4F2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0d:a9:43:60:f1:b8:83:42:e4:96:93:6c:05:86:c8:49:84:
84:f0:6c:ca:e8:ea:3a:a8:45:81:58:22:9a:9f:05:70:7c:3c:
ff:49:2c:93:1f:c0:bd:c7:94:08:b4:ac:b2:4e:28:c0:86:a9:
57:7b:d5:0f:a0:de:25:f8:18:c6:99:a6:37:57:dd:a9:63:f4:
e3:6e:0a:ee:09:f6:64:5c:53:ee:cd:c5:fe:a7:0c:70:cc:a6:
43:d4:6d:d6:7a:db:c7:01:39:d4:3d:04:05:4a:19:e4:0d:61:
25:92:ac:37:97:05:3a:ce:33:b1:2b:87:df:43:03:f8:7e:d1:
7c:52:ea:e6:ee:96:d4:90:dd:a2:b3:52:40:1d:80:18:1a:30:
c5:58:9b:69:7d:85:37:a0:46:af:60:63:86:cb:be:ae:98:3d:
ad:ca:85:71:1d:af:a7:75:64:eb:8a:df:c4:7e:25:6f:60:60:
2a:3d:13:70:aa:a3:b7:ab:7e:38:d5:15:cb:71:7e:03:1e:36:
f8:e2:6e:8c:12:8a:53:46:6b:f3:37:0a:b2:fe:1e:d1:99:28:
67:11:c1:58:0e:71:8d:fa:80:e8:4b:b7:d2:9a:9b:43:df:ba:
08:0f:4b:d5:7b:f9:ca:c0:72:9c:74:37:b3:df:7a:f0:30:64:
c3:c6:d5:62
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQ2iDP5LYatHL+XetDVo2LKYuuawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VhZjIxNDRjNzU3OTVjMjIzY2MxN2NhMzA1YjcyZDBh
NGI0ZTRmMjAeFw0yNjExMTAwNzI2NTJaFw0yNjExMTExMTIzNTJaMDMxMTAvBgNV
BAMTKEJGNTNDNkFDRUQzRTQzNUQyNUUzOTNBODIyNTYwREU3Njk4NDMwRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDII/bnBRSzGfEwHXAzhVqVZDM6
E+wjR6BBaNTMesrX7P1BMWhwzKix2e/nJKP81g375q0dZGnWY15fsvkY6zka7+dA
D0qwqL95hGL8FmrRFfY50RlKj/yFNPgdWzWDlEG/5cPFyIttns8dRYUXKk41f/VQ
h+ziWwe1J5taBYjyWLuNJl/2m4mHjXfmttd9TQCvRshdYq4sbDVhLfxTltnYXi1S
yKupXzbcN+OvRMKIZYs0EgTsn9+N5m2Uq0u4bOD8S2r9UeuY7uiBXX6tLPddDS8S
z7aGK1X7dp0V1G5XvR0GiIanMZozlBlh57CtAHC50oXeiJ5lHzdiao1RfSObAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUv1PGrO0+Q10l45OoIlYN52mEMPowHwYDVR0j
BBgwFoAUzq8hRMdXlcIjzBfKMFty0KS05PIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWY4MWViYzEtMGFlOC00OWVlLTgzYWMtMjIwZDVjY2M5
YTJhLzAvQ0VBRjIxNDRDNzU3OTVDMjIzQ0MxN0NBMzA1QjcyRDBBNEI0RTRGMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3pxOGhSTWRYbGNJanpCZktNRnR5MEtT
MDVQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lZjgxZWJjMS0w
YWU4LTQ5ZWUtODNhYy0yMjBkNWNjYzlhMmEvMC9DRUFGMjE0NEM3NTc5NUMyMjND
QzE3Q0EzMDVCNzJEMEE0QjRFNEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQ2pQ2DxuINC5JaTbAWG
yEmEhPBsyujqOqhFgVgimp8FcHw8/0kskx/AvceUCLSssk4owIapV3vVD6DeJfgY
xpmmN1fdqWP0424K7gn2ZFxT7s3F/qcMcMymQ9Rt1nrbxwE51D0EBUoZ5A1hJZKs
N5cFOs4zsSuH30MD+H7RfFLq5u6W1JDdorNSQB2AGBowxVibaX2FN6BGr2Bjhsu+
rpg9rcqFcR2vp3Vk64rfxH4lb2BgKj0TcKqjt6t+ONUVy3F+Ax42+OJujBKKU0Zr
8zcKsv4e0ZkoZxHBWA5xjfqA6Eu30pqbQ9+6CA9L1Xv5ysBynHQ3s9968DBkw8bV
Yg==
-----END CERTIFICATE-----
Generated at Tue Nov 10 20:13:03 2026 by rpki-client