Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
File: CF277DDF4A74DE53E4483795713BFB135A1140DE.mft (raw, json)
Hash identifier: vWtZCPillllass9MYCLgeVPZNZthv61rmkZtUVarc1w=
Subject key identifier: E5:4E:A6:21:66:3D:9A:E9:FF:25:6B:E3:5A:DD:B8:A5:80:01:34:19
Authority key identifier: CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
Certificate issuer: /CN=cf277ddf4a74de53e4483795713bfb135a1140de
Certificate serial: 0A2E63B2773661D3F9A61FB1E3FDB705C82CA175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
Manifest number: B6
Signing time: Sun 29 Mar 2026 04:22:54 +0000
Manifest this update: Sun 29 Mar 2026 04:17:54 +0000
Manifest next update: Mon 30 Mar 2026 08:00:54 +0000
Files and hashes: 1: CF277DDF4A74DE53E4483795713BFB135A1140DE.crl (hash: dkWB0P4t1IUFsXFgW9vrghMDjUdxldEY53QLbjeBWcs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2e:63:b2:77:36:61:d3:f9:a6:1f:b1:e3:fd:b7:05:c8:2c:a1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf277ddf4a74de53e4483795713bfb135a1140de
Validity
Not Before: Mar 29 04:17:54 2026 GMT
Not After : Mar 30 08:00:54 2026 GMT
Subject: CN=E54EA621663D9AE9FF256BE35ADDB8A580013419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:19:ac:85:5b:be:2d:2f:e3:5c:9d:1c:ad:
9e:13:15:9c:98:c8:c6:38:9a:cf:f7:9e:9e:d7:d9:
86:6b:8f:1b:1e:80:84:f7:4f:b3:bf:80:61:f8:88:
bf:ad:60:06:bc:52:0c:e9:05:18:8c:79:d1:43:71:
7a:43:4d:68:f1:71:2f:d8:8e:12:f5:32:47:49:bc:
d7:bb:0f:36:24:e5:b5:eb:b5:57:d8:4c:99:1f:fc:
a3:ff:12:78:ab:91:b7:92:d4:96:cd:f4:ac:2f:77:
86:36:ed:66:4c:ef:f7:cb:da:47:94:c2:8a:09:55:
cc:57:f9:ea:8d:fb:c0:7a:0a:bf:54:9a:ae:0c:f2:
ad:e2:b2:7f:54:17:10:7c:45:50:0c:c3:3d:c2:90:
9e:65:29:69:5b:27:ae:5a:e9:a9:89:28:41:b4:af:
9e:5b:37:40:b4:81:11:98:65:e3:68:6f:e0:74:9c:
10:d7:39:c3:e7:4a:b5:d6:e7:14:85:15:d2:d2:27:
30:d9:d8:a0:9c:99:0e:00:5e:d1:b9:5b:54:45:e6:
0c:3b:90:cd:c7:04:51:9e:47:6d:59:99:c5:47:0f:
7d:cf:50:a7:9f:c6:9b:b9:ff:70:25:ca:a0:26:e9:
50:21:54:5b:7c:4b:70:e7:38:b7:89:9d:28:51:f4:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:A6:21:66:3D:9A:E9:FF:25:6B:E3:5A:DD:B8:A5:80:01:34:19
X509v3 Authority Key Identifier:
keyid:CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:38:59:a6:5d:58:a1:c0:07:2c:d7:5b:8a:28:9b:54:e8:98:
98:d2:98:05:ec:3d:7c:cf:b2:1a:07:04:fe:d8:c7:fc:c9:a2:
b2:8a:5e:a5:e5:e2:25:cd:f9:5f:14:db:13:32:15:2c:9d:19:
04:0e:16:d4:97:23:5b:fd:e0:e2:5c:b5:92:09:13:6c:0b:db:
0d:c9:8d:8f:66:d8:3f:83:07:ae:a7:86:19:7d:90:5a:d0:ea:
fd:52:49:13:bd:ec:0a:ba:76:1e:ac:2a:56:1f:1c:4c:92:27:
34:6b:b1:46:e9:51:09:b4:6c:cb:d6:6f:e0:a8:40:fa:a4:cf:
57:16:44:99:c9:82:df:73:94:a6:56:26:dc:46:3d:82:e8:6a:
a2:45:39:07:f6:87:44:44:2e:cc:96:70:1e:74:1e:3f:9a:1a:
77:d1:cd:0d:bd:74:f0:e7:c3:80:73:34:0f:ac:92:94:3a:c3:
4f:dc:02:a2:61:d5:7e:f4:aa:be:58:7b:c5:e5:8d:06:0e:ed:
87:65:06:fe:d7:5c:ff:e0:53:ec:82:59:a3:31:39:e2:32:5d:
7b:18:22:4e:7f:53:35:ef:86:25:54:c3:6d:8c:cc:c0:2b:47:
79:c3:2f:4e:41:26:d0:67:6f:d5:05:9c:1a:ac:aa:63:75:58:
d2:14:41:b7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUCi5jsnc2YdP5ph+x4/23BcgsoXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2YyNzdkZGY0YTc0ZGU1M2U0NDgzNzk1NzEzYmZiMTM1
YTExNDBkZTAeFw0yNjAzMjkwNDE3NTRaFw0yNjAzMzAwODAwNTRaMDMxMTAvBgNV
BAMTKEU1NEVBNjIxNjYzRDlBRTlGRjI1NkJFMzVBRERCOEE1ODAwMTM0MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXBmshVu+LS/jXJ0crZ4TFZyY
yMY4ms/3np7X2YZrjxsegIT3T7O/gGH4iL+tYAa8UgzpBRiMedFDcXpDTWjxcS/Y
jhL1MkdJvNe7DzYk5bXrtVfYTJkf/KP/EnirkbeS1JbN9Kwvd4Y27WZM7/fL2keU
wooJVcxX+eqN+8B6Cr9Umq4M8q3isn9UFxB8RVAMwz3CkJ5lKWlbJ65a6amJKEG0
r55bN0C0gRGYZeNob+B0nBDXOcPnSrXW5xSFFdLSJzDZ2KCcmQ4AXtG5W1RF5gw7
kM3HBFGeR21ZmcVHD33PUKefxpu5/3AlyqAm6VAhVFt8S3DnOLeJnShR9Pr7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU5U6mIWY9mun/JWvjWt24pYABNBkwHwYDVR0j
BBgwFoAUzyd930p03lPkSDeVcTv7E1oRQN4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2
OTQyLzAvQ0YyNzdEREY0QTc0REU1M0U0NDgzNzk1NzEzQkZCMTM1QTExNDBERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p5ZDkzMHAwM2xQa1NEZVZjVHY3RTFv
UlFONC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83OGU2MTYxMS0z
YjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMC9DRjI3N0RERjRBNzRERTUzRTQ0
ODM3OTU3MTNCRkIxMzVBMTE0MERFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzhZpl1YocAHLNdbiiib
VOiYmNKYBew9fM+yGgcE/tjH/MmisopepeXiJc35XxTbEzIVLJ0ZBA4W1JcjW/3g
4ly1kgkTbAvbDcmNj2bYP4MHrqeGGX2QWtDq/VJJE73sCrp2HqwqVh8cTJInNGux
RulRCbRsy9Zv4KhA+qTPVxZEmcmC33OUplYm3EY9guhqokU5B/aHREQuzJZwHnQe
P5oad9HNDb108OfDgHM0D6ySlDrDT9wComHVfvSqvlh7xeWNBg7th2UG/tdc/+BT
7IJZozE54jJdexgiTn9TNe+GJVTDbYzMwCtHecMvTkEm0Gdv1QWcGqyqY3VY0hRB
tw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:36 2026 by rpki-client