Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: 2N9er7gtGJtb0CGKTVkzQxO1g4sRuUgo/FR7sJWMsrE=
Subject key identifier: 0B:54:84:3B:71:AD:FE:FB:EB:55:26:DF:0C:C9:03:C8:DD:8D:06:B9
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 34443F9B423F8F81AEB1ACFF9D12662DC9DA3867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: 0205
Signing time: Mon 24 Aug 2026 11:09:47 +0000
Manifest this update: Mon 24 Aug 2026 11:04:47 +0000
Manifest next update: Tue 25 Aug 2026 12:53:47 +0000
Files and hashes: 1: CE964F98379F0320A7191E6D6788800535885928.crl (hash: eIh2QO5ouZbXH7D28D5alCFfwTuJkfuCh06X9qjVbxA=)
2: AS214955.asa (hash: Q8xewUCi/NeJj+8SeKwplh2UruSS6EWahrF4De9gRYA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:44:3f:9b:42:3f:8f:81:ae:b1:ac:ff:9d:12:66:2d:c9:da:38:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: Aug 24 11:04:47 2026 GMT
Not After : Aug 25 12:53:47 2026 GMT
Subject: CN=0B54843B71ADFEFBEB5526DF0CC903C8DD8D06B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4c:81:a8:c8:96:b8:fe:88:f7:d6:c5:a1:1e:
78:a7:e8:cd:27:16:4f:38:ff:00:b7:91:07:ee:95:
b0:e2:df:ce:97:15:21:21:4b:76:02:55:00:0e:e1:
fa:3d:9e:ba:90:19:a7:40:b2:99:70:5c:53:de:e8:
96:82:a2:90:f9:44:79:25:db:5f:aa:9b:06:44:ee:
e5:c1:f3:0d:48:c7:b1:23:ff:2a:c8:fa:9d:c5:55:
3c:2a:73:48:9f:1a:2c:f3:83:b3:4f:5b:07:11:e1:
65:bb:76:41:0f:6e:2e:ef:ce:a1:29:74:e6:8b:34:
fa:ee:61:4c:21:8c:d2:86:03:09:6c:f8:8b:19:34:
3d:73:22:be:fe:d8:33:cf:cd:14:41:a2:98:a4:33:
75:f0:36:be:26:ae:9f:8f:4f:09:f9:d9:f6:3b:4a:
a4:76:57:a7:de:37:eb:fe:8a:05:7f:21:5b:fa:84:
15:c6:97:d7:b2:6e:18:41:d2:36:70:26:37:ed:65:
47:b0:8b:98:cf:57:d0:0e:cc:ef:75:c4:76:81:ea:
89:48:ef:a3:b4:0d:85:34:32:bd:27:df:e7:cb:d4:
82:af:8c:7a:cb:44:c5:e7:d0:dd:34:c5:47:b4:d1:
4d:0c:10:83:7a:f8:c7:a8:a8:88:0f:37:fb:ca:86:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:54:84:3B:71:AD:FE:FB:EB:55:26:DF:0C:C9:03:C8:DD:8D:06:B9
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4b:63:06:22:55:44:00:d1:ce:11:20:93:85:c7:cc:8c:70:
59:56:2e:b3:1d:cd:0d:ee:fc:2c:03:b0:4c:b1:9b:80:73:97:
29:e2:db:80:fe:a9:63:9a:3c:d1:59:cb:26:9a:4f:78:c4:63:
a6:82:49:4e:ba:10:1e:13:67:f9:85:60:be:6a:f3:90:13:5d:
0a:3c:63:ce:8d:be:4a:b5:79:c1:1d:1c:a6:e3:1f:5e:b2:54:
a1:5f:14:bf:49:e1:07:d8:45:29:be:09:c5:9d:fb:48:a9:22:
c3:d6:e3:01:47:08:4c:28:bf:17:f8:e9:04:39:3c:66:ab:4b:
4e:28:8f:3c:75:8e:6c:4d:3d:55:8a:5a:fe:1f:96:4a:8a:cf:
79:bd:ed:cc:f5:5e:27:a6:d9:9e:6f:7d:b3:f7:b4:94:4c:22:
40:85:00:67:4d:56:b5:54:d7:c3:3e:4a:92:a3:1a:4b:96:2d:
3b:a0:60:39:78:1f:08:4d:14:bc:44:0d:b0:c0:a3:14:4a:2c:
c8:3c:17:0a:b7:a8:70:c1:63:e7:1c:d5:70:ae:84:8e:e7:a6:
0e:d8:5f:c1:93:db:77:e3:fb:31:2c:ae:06:61:52:2a:c0:b9:
c0:6d:cd:42:c0:21:8d:88:e3:ae:ef:93:a8:6b:4b:aa:3d:06:
95:c8:ca:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 14:36:48 2026 by rpki-client