Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: B5XEh3YRtUNgQg+JclzP/9Fnl5ocwI7zFz+Tur5AEMA=
Subject key identifier: 0F:9E:49:E4:30:64:A4:81:56:C0:80:48:D6:3D:27:4E:0C:2E:C6:9A
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 14A90CF32A8FB4B4D064EC3B59E1BDD581D43429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: 0178
Signing time: Fri 15 May 2026 00:12:40 +0000
Manifest this update: Fri 15 May 2026 00:07:40 +0000
Manifest next update: Sat 16 May 2026 03:07:40 +0000
Files and hashes: 1: CE964F98379F0320A7191E6D6788800535885928.crl (hash: yq2MhnPyFGfqr0dZmgjJPy/z469AbMkh8TBF8RzLsus=)
2: AS214955.asa (hash: Q8xewUCi/NeJj+8SeKwplh2UruSS6EWahrF4De9gRYA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a9:0c:f3:2a:8f:b4:b4:d0:64:ec:3b:59:e1:bd:d5:81:d4:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: May 15 00:07:40 2026 GMT
Not After : May 16 03:07:40 2026 GMT
Subject: CN=0F9E49E43064A48156C08048D63D274E0C2EC69A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:43:2a:f4:06:2f:ac:40:2d:82:b1:42:01:
63:e6:d1:90:c5:f1:37:ee:96:3c:05:8f:78:72:0b:
0a:b3:f5:af:fd:ba:26:db:d2:29:1c:bc:45:3d:02:
bd:99:45:da:30:8f:8a:bc:b1:f4:7d:2a:0b:b1:8d:
ed:de:a5:f1:09:fc:de:5b:f9:23:8a:ea:97:3f:e4:
66:96:7d:3e:44:09:b9:39:09:a7:8a:20:c0:75:39:
2a:be:79:78:80:2f:0a:7b:76:67:fd:f6:ac:d6:45:
ff:a3:0c:60:93:10:a5:8e:75:54:1e:24:10:17:04:
95:19:95:99:b8:4e:cf:b4:ab:3d:6d:e5:8b:90:10:
94:16:b9:88:df:53:ce:19:33:8a:52:7b:b0:19:80:
63:52:53:64:c6:7b:bf:d7:c5:59:ba:f0:18:7d:74:
91:b0:b1:19:28:83:66:b0:a3:15:4f:c3:26:ce:b7:
a1:9b:c9:78:89:d0:80:a0:f4:0a:5a:4c:75:39:06:
79:40:f4:97:d7:62:47:b2:4b:0f:05:63:16:20:91:
f7:be:43:8b:be:6f:37:14:fc:47:0e:69:10:14:61:
41:25:16:f1:b3:57:af:67:2b:f8:7b:dc:f9:97:5e:
87:f2:62:e9:f3:12:fc:ac:20:ad:3d:16:0c:27:23:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9E:49:E4:30:64:A4:81:56:C0:80:48:D6:3D:27:4E:0C:2E:C6:9A
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bb:ef:14:21:55:f7:de:45:fd:5f:85:8b:dd:60:64:c7:32:
0c:a7:4a:f0:5e:41:82:40:2e:9a:a5:b3:ae:71:5c:3e:7b:11:
37:68:63:3e:9e:ec:73:47:e3:5b:37:aa:0c:77:0e:f3:12:d2:
25:aa:51:1f:7c:fc:33:12:76:ab:e6:ed:46:fc:8c:48:8b:80:
4e:29:f9:66:54:75:b2:93:1e:c1:0e:b2:1b:44:47:15:f0:e1:
53:03:a2:cf:8f:8d:f5:3d:07:a4:9a:7b:ee:fb:d7:77:b6:88:
d8:1f:8a:57:bb:f8:ef:26:b1:51:f7:70:64:7e:ec:96:ae:a6:
ab:4a:20:25:eb:df:ab:8b:52:43:82:49:32:3e:d8:70:8c:dd:
2f:60:a6:08:d9:22:08:a8:a4:b3:24:83:c1:c9:cd:3a:8d:eb:
0f:56:2a:eb:fe:70:d3:5f:96:22:df:a3:ab:69:fc:db:16:9d:
c1:65:be:79:68:4a:43:69:92:3e:cb:96:48:ee:e4:ba:2f:b3:
25:cc:79:55:3f:f2:38:82:04:86:1a:91:c2:f1:9b:bf:de:6b:
1a:e1:7e:35:98:80:48:9a:08:8a:60:eb:25:cd:34:f4:ea:cc:
07:71:3a:c7:74:96:2d:38:35:19:a4:be:64:ab:1f:a5:c5:35:
e6:fe:7b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:05 2026 by rpki-client