Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: u548qYBm/kH8pksrGPuslnJjRcUHy90dhjfk/YOGx5o=
Subject key identifier: 8E:0A:78:E5:3B:91:11:DF:E4:5B:2B:CA:24:4D:48:BE:FD:EC:1A:75
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 6BE70AE4F549C498F0A20145D2B21305ED8CF53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 04C7
Signing time: Sun 29 Mar 2026 00:01:29 +0000
Manifest this update: Sat 28 Mar 2026 23:56:29 +0000
Manifest next update: Mon 30 Mar 2026 02:49:29 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: D+D2Fr4BMbkzFfUwu3koay6HvkAdu+o7lX0I51VdnHM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e7:0a:e4:f5:49:c4:98:f0:a2:01:45:d2:b2:13:05:ed:8c:f5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Mar 28 23:56:29 2026 GMT
Not After : Mar 30 02:49:29 2026 GMT
Subject: CN=8E0A78E53B9111DFE45B2BCA244D48BEFDEC1A75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:3c:91:b4:a7:1a:12:8f:ab:fc:2c:8b:f8:
c3:8a:8f:39:10:3e:3c:d6:9d:57:76:d4:6f:c5:ca:
00:2a:fd:87:72:54:17:0a:83:1f:55:2a:f3:1f:e0:
e3:d0:c8:f2:a3:59:28:7e:fc:b7:42:70:8e:e6:29:
53:96:e0:07:04:7f:18:66:8b:88:22:50:93:b2:22:
c4:08:72:bc:32:fe:8b:78:98:e3:cb:92:86:28:9e:
65:df:cd:05:a2:20:5c:15:04:76:61:b8:35:cd:0a:
1e:b4:da:4a:7a:c8:e7:c2:6d:31:8d:23:0d:9c:87:
fb:a0:cb:da:e5:8d:93:f5:aa:8a:4b:4e:71:9e:39:
86:79:67:30:d3:17:ad:af:a4:01:ad:53:83:5a:4e:
03:ef:f9:cc:c4:d8:7b:f3:73:01:25:c8:5c:33:b0:
58:27:cd:bf:fa:dd:94:df:53:96:1b:bb:07:6c:87:
be:ba:f3:82:eb:d3:e4:ee:07:27:3d:aa:6c:98:87:
84:33:b1:fb:7e:7c:b5:2d:aa:ae:d9:7c:db:6c:38:
0b:6d:03:8f:99:fc:f1:05:a0:bd:fb:c4:e9:20:f7:
c9:b5:4d:2e:e4:b0:d4:7a:3b:4f:6e:2f:ab:41:03:
13:76:a2:ea:7c:61:62:17:8f:7a:dd:d4:b7:7f:d7:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0A:78:E5:3B:91:11:DF:E4:5B:2B:CA:24:4D:48:BE:FD:EC:1A:75
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f5:9e:6a:e0:97:33:62:ba:74:63:e9:b9:af:13:2f:6b:0f:
a3:a7:b0:05:b1:7f:b9:27:a2:23:b8:d0:1e:24:b8:d4:66:f0:
b5:0f:b6:0f:04:89:30:29:ab:79:d8:67:a0:11:a7:7b:99:92:
b7:ba:f1:da:d7:cb:0c:7b:c1:38:4e:e5:7a:8b:95:ab:f4:19:
db:cc:7f:12:0c:86:3d:a8:21:cf:5f:fb:94:ab:89:c8:55:11:
e1:8b:62:cf:c8:32:cd:30:3e:16:24:a1:63:89:3e:eb:4f:3b:
10:1d:2e:0b:f6:09:13:eb:07:4f:16:92:6b:2c:e8:89:2e:80:
92:36:e2:de:1c:4e:e1:8b:43:eb:ee:98:c4:fd:e4:ac:2a:24:
93:aa:03:8d:de:b1:72:93:4c:db:f3:13:a6:ab:0e:ba:7e:10:
04:3c:1c:e1:ef:24:b3:16:0d:24:c3:34:2a:1a:6d:09:de:7d:
d8:cc:08:99:02:f7:f4:aa:41:6f:b8:78:2a:96:3e:f0:4c:2a:
21:19:36:73:48:e2:b0:90:44:3b:68:99:6b:a6:2b:d5:24:0e:
88:a3:21:bd:e0:b9:bd:d2:a1:4e:01:37:65:88:57:4c:30:3a:
4c:16:e8:af:57:b8:72:c7:79:55:e9:82:e8:97:b0:95:cd:db:
96:58:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:59 2026 by rpki-client