Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
File: CF277DDF4A74DE53E4483795713BFB135A1140DE.mft (raw, json)
Hash identifier: Af2FWTfvosJyBPb696lw3K1s2WmVvl12I0U+5j6oXqY=
Subject key identifier: 2E:8F:11:0C:72:75:59:0B:43:4B:14:0C:8B:2C:4B:8C:63:B0:80:76
Authority key identifier: CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
Certificate issuer: /CN=cf277ddf4a74de53e4483795713bfb135a1140de
Certificate serial: 5B1E26F216595B18424E2735C55F8F66F49C9821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
Manifest number: 0160
Signing time: Tue 21 Jul 2026 01:14:39 +0000
Manifest this update: Tue 21 Jul 2026 01:09:39 +0000
Manifest next update: Wed 22 Jul 2026 04:54:39 +0000
Files and hashes: 1: AS213413.asa (hash: ijn+TOAS1cY9+9JFyv4vPp9+k2gOEooZ5b3w0sz5SsA=)
2: CF277DDF4A74DE53E4483795713BFB135A1140DE.crl (hash: dynaun8T0sC2lJIuQEJIPeTbYDAd7kv/+glSMC9GCQk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1e:26:f2:16:59:5b:18:42:4e:27:35:c5:5f:8f:66:f4:9c:98:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf277ddf4a74de53e4483795713bfb135a1140de
Validity
Not Before: Jul 21 01:09:39 2026 GMT
Not After : Jul 22 04:54:39 2026 GMT
Subject: CN=2E8F110C7275590B434B140C8B2C4B8C63B08076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:ac:a9:1e:a0:e5:cf:cf:e2:d2:c2:e4:d7:
6e:36:08:f3:d7:71:2a:a9:9d:9a:31:78:d0:f8:6f:
82:31:b7:0b:73:6b:80:0c:1f:d8:bb:02:db:dd:ce:
25:f4:ae:04:1d:ac:fe:84:4f:2f:38:c1:f2:cd:4e:
0b:10:0a:29:9a:3e:50:cb:f0:e4:fe:15:73:84:83:
d1:a0:ca:43:e7:9b:e5:ed:00:f0:c9:a8:2d:59:b6:
67:a0:fd:65:a7:43:7b:23:5b:86:03:b6:8c:45:65:
ec:15:50:48:15:61:17:92:df:ff:7e:a3:d0:01:f2:
a3:00:aa:bb:9c:1b:5b:8a:8d:7f:70:0f:18:9d:33:
f4:e1:77:99:b5:66:f4:45:9c:ee:d7:fc:0c:ea:c3:
e3:0a:2d:f0:b4:3a:9c:a3:1b:d3:7a:45:25:3e:8d:
e0:a9:46:f9:59:e2:f2:2d:d0:2f:79:03:c1:ea:01:
8c:73:17:5b:e3:74:ed:0c:33:52:3c:15:5a:32:71:
4a:dc:f5:2b:bc:6f:85:da:95:4b:db:3e:5a:e8:46:
c3:74:30:26:36:16:a3:3d:4b:78:c6:cc:0e:9f:a0:
a8:c6:d9:66:9a:0c:f5:91:f3:cd:aa:7c:a7:15:4b:
c7:e3:3e:78:0d:8e:24:32:e2:23:fe:fe:fa:b3:ea:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8F:11:0C:72:75:59:0B:43:4B:14:0C:8B:2C:4B:8C:63:B0:80:76
X509v3 Authority Key Identifier:
keyid:CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:69:31:42:2f:13:47:3f:96:53:49:5b:dd:d0:8e:ef:3e:a1:
77:e1:f9:e8:ba:74:f7:a7:48:de:5c:ae:8d:a5:b8:4a:ff:71:
fc:11:b3:6f:b6:ee:b4:28:be:a2:da:a3:26:7f:de:3b:1b:dc:
9a:19:9f:1c:1d:4e:5e:a7:5d:1d:1c:42:c8:12:f8:cf:b6:bc:
f6:97:b3:a0:d8:a4:f7:80:ce:f7:87:31:68:50:79:72:4d:9f:
b9:43:23:53:a9:c2:ee:37:8a:ac:6d:e6:00:96:55:4c:53:66:
d9:b0:13:07:15:9c:24:0a:5a:d8:3d:82:92:16:3c:b5:dd:89:
f4:0b:ea:8a:a0:a1:91:eb:9e:cc:e9:ca:43:2f:e9:fe:26:44:
93:04:8d:e9:53:ba:e6:4f:a8:7e:66:3e:9e:1b:7f:44:b7:5f:
aa:4a:77:73:07:e3:0d:ac:2d:f1:bc:ee:ed:22:9b:10:38:85:
e4:45:87:79:80:fb:d4:fb:ac:2d:de:95:17:c2:dd:9a:8f:9c:
e0:be:84:9e:76:a3:08:3a:3c:49:1e:a1:e0:d0:0b:4b:10:34:
e6:22:45:bc:ae:e3:8f:c1:80:ad:ae:37:87:23:86:cf:43:ad:
a9:db:4b:e7:be:e8:65:49:aa:1e:de:83:a7:5d:a7:62:8a:22:
e6:f0:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:44:40 2026 by rpki-client