Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: TxeEMagm3+QE2UCcMQqCOP0Kytxk6ILCFBl2p8LWgaA=
Subject key identifier: D8:88:5E:97:EF:52:21:55:B9:19:33:82:30:B6:05:0B:67:C0:8F:28
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 18C8772C052C7C7BAE4913513759B7B8A0FE4646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: 01B4
Signing time: Sun 28 Jun 2026 21:56:19 +0000
Manifest this update: Sun 28 Jun 2026 21:51:19 +0000
Manifest next update: Mon 29 Jun 2026 22:32:19 +0000
Files and hashes: 1: CE964F98379F0320A7191E6D6788800535885928.crl (hash: 0IcIQXal1MUxVC6N1p43e1AuvN7Y+hzhUx+eQ8/Iz98=)
2: AS214955.asa (hash: Q8xewUCi/NeJj+8SeKwplh2UruSS6EWahrF4De9gRYA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 22:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c8:77:2c:05:2c:7c:7b:ae:49:13:51:37:59:b7:b8:a0:fe:46:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: Jun 28 21:51:19 2026 GMT
Not After : Jun 29 22:32:19 2026 GMT
Subject: CN=D8885E97EF522155B919338230B6050B67C08F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:17:f9:c0:c2:4b:a8:b1:12:69:dd:fd:77:
da:fd:b1:8c:49:bb:97:55:06:bb:8c:0e:28:e6:49:
70:82:b6:6c:6b:4a:8b:96:0d:c8:13:2b:07:57:d1:
8b:ca:47:15:6e:16:b6:5d:b1:af:b8:f7:5e:06:d7:
2b:b8:1f:20:f3:65:1c:3e:f7:11:39:71:cc:a0:93:
32:b9:72:fb:4e:83:57:b3:08:9e:83:f3:0a:5c:04:
ff:71:1c:40:ea:2e:79:a0:4d:96:5d:c4:59:b0:5e:
cf:60:fa:dd:9c:68:39:57:65:48:9c:60:9f:b1:ff:
eb:fa:9b:08:d6:59:7a:5d:3d:76:32:2b:56:e5:0b:
17:4d:99:aa:9e:ed:62:31:be:8d:73:ea:af:80:58:
68:66:31:30:00:d3:f5:25:bf:17:49:60:61:84:f1:
23:a7:b1:ff:49:dc:62:73:a5:f4:bf:5d:c8:05:50:
db:1a:b8:ad:ab:1b:b0:8a:de:5a:80:18:eb:2c:96:
4e:56:19:ed:ff:c2:bc:76:4f:50:f1:8b:38:11:cb:
77:f5:0e:2f:ca:a3:8d:fb:8d:40:62:77:a0:5a:7b:
c6:44:09:e2:6b:92:98:fd:4c:e2:8b:ea:a1:6a:20:
ba:ca:83:4e:9a:28:32:65:83:59:d6:a8:f5:1b:64:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:5E:97:EF:52:21:55:B9:19:33:82:30:B6:05:0B:67:C0:8F:28
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7b:57:48:da:89:b2:21:20:d9:ed:c0:0f:c5:9a:07:c6:3e:
d2:10:58:ed:9c:50:57:59:f0:7d:57:99:72:05:c2:96:66:3f:
3d:b3:e5:2f:9b:8a:b2:4d:65:1b:b6:0c:19:17:fa:cf:81:5c:
59:3f:d2:0b:47:f3:2e:79:b0:2e:71:a6:b2:fd:8d:70:83:dc:
ac:7e:e4:69:e0:91:a1:79:44:15:0c:ba:68:23:d6:46:07:71:
82:e2:ac:1d:55:d0:52:d7:4a:73:f6:55:9d:a0:e1:d5:22:b0:
c1:52:70:81:c7:96:98:b8:19:20:b9:0c:22:be:7e:0e:38:fd:
8e:24:e4:d9:d3:c4:ff:7f:15:32:81:52:2f:7f:11:e4:b2:c7:
34:ab:0c:3a:06:91:18:98:1b:f7:3a:04:7e:1a:94:79:97:77:
01:ab:0d:59:aa:03:67:b1:00:24:4d:99:fe:c4:46:43:af:90:
e2:55:d0:56:97:ce:7d:b0:a7:d7:5b:ac:ba:1a:4f:cd:83:16:
7b:83:ac:68:f1:4e:cc:7b:27:d2:89:dd:c5:05:8a:2a:2e:e0:
e0:40:7e:59:e4:9d:63:5a:a0:da:4f:a4:72:32:29:18:3d:d1:
35:b8:7d:0c:ca:14:27:cb:eb:5e:25:29:69:5b:32:fa:94:77:
fb:6b:b6:6a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGMh3LAUsfHuuSRNRN1m3uKD+RkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2U5NjRmOTgzNzlmMDMyMGE3MTkxZTZkNjc4ODgwMDUz
NTg4NTkyODAeFw0yNjA2MjgyMTUxMTlaFw0yNjA2MjkyMjMyMTlaMDMxMTAvBgNV
BAMTKEQ4ODg1RTk3RUY1MjIxNTVCOTE5MzM4MjMwQjYwNTBCNjdDMDhGMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZKhf5wMJLqLESad39d9r9sYxJ
u5dVBruMDijmSXCCtmxrSouWDcgTKwdX0YvKRxVuFrZdsa+4914G1yu4HyDzZRw+
9xE5ccygkzK5cvtOg1ezCJ6D8wpcBP9xHEDqLnmgTZZdxFmwXs9g+t2caDlXZUic
YJ+x/+v6mwjWWXpdPXYyK1blCxdNmaqe7WIxvo1z6q+AWGhmMTAA0/UlvxdJYGGE
8SOnsf9J3GJzpfS/XcgFUNsauK2rG7CK3lqAGOsslk5WGe3/wrx2T1DxizgRy3f1
Di/Ko437jUBid6Bae8ZECeJrkpj9TOKL6qFqILrKg06aKDJlg1nWqPUbZN1bAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU2Ihel+9SIVW5GTOCMLYFC2fAjygwHwYDVR0j
BBgwFoAUzpZPmDefAyCnGR5tZ4iABTWIWSgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3
NzkyLzAvQ0U5NjRGOTgzNzlGMDMyMEE3MTkxRTZENjc4ODgwMDUzNTg4NTkyOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3pwWlBtRGVmQXlDbkdSNXRaNGlBQlRX
SVdTZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZjk5ZTY2ZC00
YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMC9DRTk2NEY5ODM3OUYwMzIwQTcx
OTFFNkQ2Nzg4ODAwNTM1ODg1OTI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHtXSNqJsiEg2e3AD8Wa
B8Y+0hBY7ZxQV1nwfVeZcgXClmY/PbPlL5uKsk1lG7YMGRf6z4FcWT/SC0fzLnmw
LnGmsv2NcIPcrH7kaeCRoXlEFQy6aCPWRgdxguKsHVXQUtdKc/ZVnaDh1SKwwVJw
gceWmLgZILkMIr5+Djj9jiTk2dPE/38VMoFSL38R5LLHNKsMOgaRGJgb9zoEfhqU
eZd3AasNWaoDZ7EAJE2Z/sRGQ6+Q4lXQVpfOfbCn11usuhpPzYMWe4OsaPFOzHsn
0ondxQWKKi7g4EB+WeSdY1qg2k+kcjIpGD3RNbh9DMoUJ8vrXiUpaVsy+pR3+2u2
ag==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:06 2026 by rpki-client