Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: ZLC03oksJkGd9zrwY6WkfrqAeIu/sJ+rErSn/4RwS1Y=
Subject key identifier: 27:26:C2:F4:AF:2A:1D:14:3E:5E:00:95:C4:E6:5C:68:4B:41:AC:75
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 0AA86EC447B7EE375D2FA69735EFAF0350181129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: 0139
Signing time: Sat 28 Mar 2026 23:19:31 +0000
Manifest this update: Sat 28 Mar 2026 23:14:31 +0000
Manifest next update: Mon 30 Mar 2026 02:28:31 +0000
Files and hashes: 1: AS214955.asa (hash: Q8xewUCi/NeJj+8SeKwplh2UruSS6EWahrF4De9gRYA=)
2: CE964F98379F0320A7191E6D6788800535885928.crl (hash: i2S88hm82d1sMyuJrX1HbeKzwc8yuz/Hn15TuKgY1UM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a8:6e:c4:47:b7:ee:37:5d:2f:a6:97:35:ef:af:03:50:18:11:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: Mar 28 23:14:31 2026 GMT
Not After : Mar 30 02:28:31 2026 GMT
Subject: CN=2726C2F4AF2A1D143E5E0095C4E65C684B41AC75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:fd:62:3b:07:e0:28:5a:51:b3:43:b1:17:
87:e9:be:9c:6d:3b:01:34:aa:5a:2a:cd:81:38:8f:
00:49:25:32:bc:35:5a:95:fe:c9:8e:6d:cd:33:4c:
17:87:89:18:ed:50:7a:5b:15:f2:97:96:6e:ad:3d:
33:fa:5e:02:2a:61:21:c4:08:f8:76:d1:73:f5:96:
43:7a:fa:44:eb:e9:8f:e7:8f:8c:6d:21:e1:5b:58:
49:71:c6:2d:16:3d:ad:51:e0:50:44:f9:2b:53:f5:
60:d8:3d:2e:0d:2c:a3:7d:44:dd:9b:ea:b6:ce:1b:
ef:15:79:70:57:4a:d1:e2:da:e1:34:4d:60:ca:dc:
80:e3:1e:e8:46:09:f7:39:2f:35:4f:53:f8:69:bd:
6f:91:0c:8b:91:90:54:fc:f0:d0:2e:80:34:f9:9a:
bb:ed:db:c2:5d:1e:e3:e1:27:c6:a2:ba:3b:69:c9:
85:18:75:f3:10:3c:9a:c4:58:be:de:14:18:79:f0:
e8:7c:e6:39:a7:cb:26:7c:90:3f:af:7a:75:5e:28:
2f:86:2f:f7:98:66:f9:fa:9d:46:46:07:64:7d:89:
b4:26:f3:72:4d:52:1e:a0:ed:d7:70:be:5b:ad:1c:
3e:9e:c8:6f:fe:90:7c:10:69:95:d6:b6:e2:8f:ae:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:26:C2:F4:AF:2A:1D:14:3E:5E:00:95:C4:E6:5C:68:4B:41:AC:75
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f8:6f:71:dc:99:c8:3b:f7:d1:be:a3:40:84:61:35:e0:be:
f8:de:f2:dc:c2:0e:26:c5:74:99:74:47:b1:67:9b:9a:e2:53:
a4:56:85:34:10:17:a4:17:7a:ca:78:12:0d:4a:29:af:47:0a:
45:ec:2b:bf:2d:c9:5b:fd:af:76:d5:28:78:0a:5f:88:7e:69:
6a:65:a8:8e:de:33:1e:1b:37:d4:17:fb:2d:db:02:8a:a3:e4:
37:d3:06:04:46:bd:0e:83:52:96:44:0a:97:39:56:f4:3e:c5:
4b:52:b3:c2:2c:f6:e3:62:19:8a:88:a0:54:38:fe:a3:90:3b:
9a:e5:42:7c:7a:90:f6:b6:ba:97:5b:58:60:4b:c7:7d:38:cf:
da:49:d8:1c:4f:7d:37:37:02:33:10:a7:d2:fe:7e:75:b9:3f:
84:ab:83:8a:56:56:b8:3b:fa:b0:01:4f:24:da:e0:f7:aa:88:
5c:f3:c5:b4:43:45:90:6e:52:6a:b8:6e:2b:09:ac:5c:f6:c6:
a8:39:24:95:45:52:a9:ed:28:4c:90:34:db:9c:b8:f6:b1:18:
ad:2f:f0:c9:cb:a9:36:98:75:be:47:9d:61:6d:28:c5:13:c2:
cf:db:cb:a4:ed:9a:f3:89:f2:d6:c3:4e:cd:f7:99:8e:a2:01:
59:dc:8d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:25 2026 by rpki-client