Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
File: 4158AB6E76F847695C8FEB594CB05DE3191E7877.mft (raw, json)
Hash identifier: JfEnmsABxFbB+fGqxZf0YuxN85cVjJhmpE5iwN66CyY=
Subject key identifier: 27:EE:8E:B2:37:BD:FB:41:A3:34:7B:9E:66:B6:BE:89:63:46:B2:6B
Authority key identifier: 41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
Certificate issuer: /CN=4158ab6e76f847695c8feb594cb05de3191e7877
Certificate serial: 05F710030D266082AEA9262F64A111BA16622C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
Manifest number: 0163
Signing time: Wed 26 Aug 2026 10:57:21 +0000
Manifest this update: Wed 26 Aug 2026 10:52:21 +0000
Manifest next update: Thu 27 Aug 2026 13:54:21 +0000
Files and hashes: 1: 4158AB6E76F847695C8FEB594CB05DE3191E7877.crl (hash: 3+3WqXToR0p9TzoPZvi0SgWcVIVkYnMM/GbjyzLa5tU=)
2: AS152868.roa (hash: GrO2pd/g85FxsiUY0YyMrr9h9RBsiagjDuy529rR0Ps=)
3: AS199707.roa (hash: XnRGkv44RHI5Dgnj6MyUeYuvP/YPSMSe4myZ/6kpm20=)
4: AS8888.roa (hash: vFzQhzdcXF03Xb0gbb3LcRVtgVPQpt5v1DjzuR+KFCA=)
5: AS58342.roa (hash: kLObi2M4FqaCxHa9FXrlvz+TC7zs50Fa3mgP0Z10T1U=)
6: AS142240.roa (hash: Y9seJZd6VyoIjfPOmVEAcrDoFkWdbmJZj50yJZahbaM=)
7: AS16509.roa (hash: Ofb+sAfpNY/HtUsmSrh+opoxFce1Ix1mehNVxaO2akM=)
8: AS917.roa (hash: V4OQjDsecLD9joEIG91A5I/d/i0DWppvogljo082GjM=)
9: AS3214.roa (hash: 9N8Qy7RGvVNtOAO2bwFZ7I1gKLOnQ550e8LNL3Bf8Dw=)
10: AS14618.roa (hash: EqdzGyoTSJlDZWFW/lJtVnsqAohCGCmVt48DQ7uyld8=)
11: AS219374.roa (hash: AETcsigs1hm25tzlhvg+UGIixD5h925RHSqM4cU+6Wg=)
12: AS402265.roa (hash: e5WSyn8HyvJvfhkbZDCvcd5TTlxwU3bRLeYuDrXFzhU=)
13: AS4785.roa (hash: xEb4lcGTOnouvXZ5t0TngodJ5Lfx39yGP9YsK1yTmPg=)
14: AS834.roa (hash: O89p8Mw9b6puArP4GJgtsly+2YT54oLBr+kCiy0lO9s=)
15: AS402215.roa (hash: 6HXa5wVSGLpZx9TuEojmud3lue76tsNcFqHzAm+Xm2I=)
16: AS50069.roa (hash: TqhK0BEX0JdGwEDKeQf2/NOKamwsbjma59QMr49iFQs=)
17: AS6233.roa (hash: pumREpV4EdjVcrCQLciTyxkr9zngdREJidotgehGtp0=)
18: AS219427.roa (hash: /lvfAQKCgb0Y6dTIPe/Cobp796KFEXuD9gLULdcimz0=)
19: AS35487.roa (hash: W2NmL1sr0annHAeHXN9pVec/cO/bx7yxKnHz4VnJhdU=)
20: AS23961.roa (hash: 2U/LXcZrOvbQbad8/DpcDgJYmxyYaLlgWaNu2dYOEj0=)
21: AS3258.roa (hash: QnfhQfk2sZbemyQoXufyiun/0y3i0WCNj4xwTXI7p/4=)
22: AS9312.roa (hash: YB1fIs8eTcn3mIWmKjflaTCn6PwYZj0OjmJQwuSeN1I=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f7:10:03:0d:26:60:82:ae:a9:26:2f:64:a1:11:ba:16:62:2c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4158ab6e76f847695c8feb594cb05de3191e7877
Validity
Not Before: Aug 26 10:52:21 2026 GMT
Not After : Aug 27 13:54:21 2026 GMT
Subject: CN=27EE8EB237BDFB41A3347B9E66B6BE896346B26B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:ad:c8:15:fc:ab:1e:c8:47:61:2c:7a:4b:
6e:b7:67:71:25:d8:17:71:5b:89:fa:26:92:34:91:
d9:93:d0:50:d9:43:02:38:0f:3e:5a:6a:c8:3a:69:
62:0e:31:97:28:44:e7:5e:21:8b:86:59:d8:94:e0:
ee:5f:72:25:fc:92:fe:99:5c:fb:70:93:0e:de:1a:
68:5b:14:45:f9:5b:33:96:e3:0c:56:8b:47:10:54:
86:e2:66:26:63:70:cc:d0:ca:1c:12:59:6c:04:3a:
48:8e:6f:35:5a:5c:80:da:33:9c:71:ab:87:0d:db:
90:06:5d:c8:a8:4f:82:e8:87:62:07:68:97:a8:c3:
f8:3a:0a:1f:31:13:7b:a4:39:b5:2e:96:1a:87:1a:
dc:6a:0c:1d:63:5d:97:61:f2:a9:e2:6a:8c:6d:0f:
3c:f6:26:11:df:66:3a:70:1a:9e:81:77:7d:eb:24:
40:25:0d:89:a0:44:bd:53:5b:d6:ba:9c:5f:4a:df:
1f:b4:8e:a9:df:33:1a:3a:79:b4:dc:0b:59:91:ac:
2f:87:37:c7:57:76:d6:21:fb:d4:2f:f5:e7:d3:d0:
fd:ea:1f:4e:01:92:61:28:46:e8:e3:e7:6e:db:61:
d5:d2:b4:2e:3e:88:5e:98:85:9d:94:d2:7a:3e:7a:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EE:8E:B2:37:BD:FB:41:A3:34:7B:9E:66:B6:BE:89:63:46:B2:6B
X509v3 Authority Key Identifier:
keyid:41:58:AB:6E:76:F8:47:69:5C:8F:EB:59:4C:B0:5D:E3:19:1E:78:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVirbnb4R2lcj-tZTLBd4xkeeHc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/726945ea-07b9-428c-af74-96149e891884/0/4158AB6E76F847695C8FEB594CB05DE3191E7877.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:71:51:38:50:fd:c4:53:4b:ee:4a:82:ec:64:f7:b9:5d:d5:
ee:7a:a1:7a:99:8e:82:d6:50:14:7a:24:2c:a8:96:4c:d7:37:
90:ee:30:3c:6d:7a:6f:c6:8b:d8:ca:5e:5b:d4:cb:42:03:10:
e7:8a:c4:94:c6:53:f3:0b:cb:83:64:01:45:ea:d3:6c:46:fa:
29:67:67:ea:89:81:0a:1c:af:bf:d3:4a:f5:21:f3:84:13:88:
a4:66:77:8e:bc:36:ad:4c:8b:6b:c1:b5:cc:09:8a:c6:e5:65:
a6:17:97:5b:e1:83:60:83:dc:58:b6:d2:26:b9:1f:c3:c8:3d:
89:66:21:c0:ae:04:8c:4c:15:a7:8c:c6:ed:d1:dd:1f:a0:83:
53:d8:9c:15:83:7f:b3:2a:df:ff:14:ea:e4:42:14:86:db:c9:
9b:e4:b8:26:57:ac:86:60:4f:3a:d7:d6:55:3b:04:02:01:2b:
b9:fd:49:72:ab:a3:87:17:54:c8:16:f9:07:ae:f2:46:13:dc:
e4:06:b0:fb:c8:92:49:aa:d3:ea:f9:d5:44:9b:89:10:b1:63:
fb:3b:ca:3a:80:5e:95:29:6a:8c:0f:cb:2d:59:65:69:ba:80:
41:e6:54:1e:fc:7a:76:3e:fe:1c:db:66:db:f9:32:7f:ed:7c:
e1:08:42:f5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUBfcQAw0mYIKuqSYvZKERuhZiLEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1OGFiNmU3NmY4NDc2OTVjOGZlYjU5NGNiMDVkZTMx
OTFlNzg3NzAeFw0yNjA4MjYxMDUyMjFaFw0yNjA4MjcxMzU0MjFaMDMxMTAvBgNV
BAMTKDI3RUU4RUIyMzdCREZCNDFBMzM0N0I5RTY2QjZCRTg5NjM0NkIyNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxK3IFfyrHshHYSx6S263Z3El
2BdxW4n6JpI0kdmT0FDZQwI4Dz5aasg6aWIOMZcoROdeIYuGWdiU4O5fciX8kv6Z
XPtwkw7eGmhbFEX5WzOW4wxWi0cQVIbiZiZjcMzQyhwSWWwEOkiObzVaXIDaM5xx
q4cN25AGXcioT4Loh2IHaJeow/g6Ch8xE3ukObUulhqHGtxqDB1jXZdh8qniaoxt
Dzz2JhHfZjpwGp6Bd33rJEAlDYmgRL1TW9a6nF9K3x+0jqnfMxo6ebTcC1mRrC+H
N8dXdtYh+9Qv9efT0P3qH04BkmEoRujj527bYdXStC4+iF6YhZ2U0no+epfvAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUJ+6Osje9+0GjNHueZra+iWNGsmswHwYDVR0j
BBgwFoAUQVirbnb4R2lcj+tZTLBd4xkeeHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI2OTQ1ZWEtMDdiOS00MjhjLWFmNzQtOTYxNDllODkx
ODg0LzAvNDE1OEFCNkU3NkY4NDc2OTVDOEZFQjU5NENCMDVERTMxOTFFNzg3Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FWaXJibmI0UjJsY2otdFpUTEJkNHhr
ZWVIYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjY5NDVlYS0w
N2I5LTQyOGMtYWY3NC05NjE0OWU4OTE4ODQvMC80MTU4QUI2RTc2Rjg0NzY5NUM4
RkVCNTk0Q0IwNURFMzE5MUU3ODc3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHFROFD9xFNL7kqC7GT3
uV3V7nqhepmOgtZQFHokLKiWTNc3kO4wPG16b8aL2MpeW9TLQgMQ54rElMZT8wvL
g2QBRerTbEb6KWdn6omBChyvv9NK9SHzhBOIpGZ3jrw2rUyLa8G1zAmKxuVlpheX
W+GDYIPcWLbSJrkfw8g9iWYhwK4EjEwVp4zG7dHdH6CDU9icFYN/syrf/xTq5EIU
htvJm+S4JleshmBPOtfWVTsEAgEruf1JcqujhxdUyBb5B67yRhPc5Aaw+8iSSarT
6vnVRJuJELFj+zvKOoBelSlqjA/LLVllabqAQeZUHvx6dj7+HNtm2/kyf+184QhC
9Q==
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:57:58 2026 by rpki-client