Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
File: 0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft (raw, json)
Hash identifier: 3iWjbIvo785rkcVrpizbelosp9BN5WNXdh1GV21App8=
Subject key identifier: 84:0E:FB:8A:E0:26:0B:A3:6B:A5:A1:00:8E:6F:AD:3E:7C:2D:17:DD
Authority key identifier: 0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30
Certificate issuer: /CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
Certificate serial: 3FE778BB75DD5296F5755F804209BF35E7A2151A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
Manifest number: 91
Signing time: Sun 29 Mar 2026 09:07:59 +0000
Manifest this update: Sun 29 Mar 2026 09:02:59 +0000
Manifest next update: Mon 30 Mar 2026 11:36:59 +0000
Files and hashes: 1: AS208754.asa (hash: 3pfL9jLjD9/sLJgF6JoE9wrlEZr3YjEPpinQaohSjCY=)
2: 0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl (hash: gXHMgNL+G2r0SIQURhfVhxKdR8u8prRsaWU29vNEe7s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl
rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e7:78:bb:75:dd:52:96:f5:75:5f:80:42:09:bf:35:e7:a2:15:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
Validity
Not Before: Mar 29 09:02:59 2026 GMT
Not After : Mar 30 11:36:59 2026 GMT
Subject: CN=840EFB8AE0260BA36BA5A1008E6FAD3E7C2D17DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:4c:24:c5:3d:14:95:27:96:8c:cc:64:ad:
65:3d:8c:b1:b0:32:ba:d6:d0:f7:1e:73:02:89:04:
d2:ae:be:04:f6:67:b9:85:1f:d3:b8:54:e1:f3:4c:
4a:18:22:c6:dc:a2:96:9b:74:d3:9f:83:69:60:43:
96:c1:89:69:cd:e6:e2:93:4d:1e:c3:a6:92:e0:df:
85:4b:a5:b5:75:a6:fd:d2:2f:27:26:9c:03:30:9e:
7e:28:e8:43:4d:1b:70:59:5b:0a:3a:4d:24:42:ad:
9a:93:97:36:04:73:a4:9f:65:9e:02:1a:eb:ca:4d:
22:c5:da:a1:0e:0d:6b:36:cd:34:ec:46:9b:70:3a:
91:a2:c3:65:c2:61:2b:f3:fd:16:a5:df:63:6e:d6:
17:7b:9d:fe:f5:11:43:62:9b:b0:e9:4c:1b:d2:51:
4c:a6:b7:c4:ab:11:fd:7e:57:1d:1d:c8:a0:59:9f:
77:67:14:ef:89:37:98:1c:2a:09:5d:70:d7:df:27:
71:50:26:a7:bb:07:52:9f:a0:93:5d:79:c0:f6:df:
b8:b1:74:b2:12:01:64:d4:6a:bd:86:43:bd:91:f4:
cb:ce:e4:96:46:96:b7:fc:82:4e:9e:20:e8:6e:13:
34:67:7b:fb:05:2d:6b:c0:57:2a:1d:b9:ee:c9:30:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0E:FB:8A:E0:26:0B:A3:6B:A5:A1:00:8E:6F:AD:3E:7C:2D:17:DD
X509v3 Authority Key Identifier:
keyid:0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:05:4d:29:5d:06:e4:78:08:c0:0b:a8:c5:0b:6f:31:89:35:
36:5a:96:b1:54:a5:2a:0b:96:48:08:62:b1:9f:a4:41:8a:c9:
b4:eb:bd:9a:bb:67:91:8b:a4:70:d8:5b:42:04:2b:2d:4a:46:
5c:50:24:56:96:c8:49:47:b8:ed:01:71:2d:d3:b7:10:3e:0c:
1d:ef:e4:51:be:d3:d7:2e:b7:eb:5c:27:1d:ba:2e:86:c9:21:
2e:98:d5:10:ae:28:a5:33:1c:d6:92:a4:c2:ef:b1:92:eb:df:
ab:17:5a:ae:52:3c:38:6f:8f:3e:2d:7b:33:14:f2:b5:78:68:
38:e4:44:e2:1b:d2:a0:c6:2c:bd:8a:91:fb:6c:9f:ef:c5:7a:
b8:c4:43:f1:9a:e4:1e:a8:1f:29:c2:33:3e:88:04:9c:1a:a2:
1c:05:60:b6:2c:25:d8:af:75:53:7b:61:7b:86:b6:d8:6b:90:
e4:32:d5:c8:c2:65:d0:d3:d9:fd:a0:f8:fe:10:b4:c6:7a:c7:
80:08:d4:8b:47:1f:14:07:43:95:91:0c:3f:48:5f:f4:0b:20:
bc:19:36:44:28:89:56:af:fd:5b:90:6a:45:45:e3:9f:ee:55:
e7:0f:27:12:21:48:bd:e3:8d:d7:21:01:2d:80:34:0d:5d:29:
05:d1:ae:13
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUP+d4u3XdUpb1dV+AQgm/NeeiFRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGM1YzM5OGMwMDQ1YTRmMGZlMGY4ZWRjZjIwNzk1ZTVm
OGVhYWEzMDAeFw0yNjAzMjkwOTAyNTlaFw0yNjAzMzAxMTM2NTlaMDMxMTAvBgNV
BAMTKDg0MEVGQjhBRTAyNjBCQTM2QkE1QTEwMDhFNkZBRDNFN0MyRDE3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlkwkxT0UlSeWjMxkrWU9jLGw
MrrW0PcecwKJBNKuvgT2Z7mFH9O4VOHzTEoYIsbcopabdNOfg2lgQ5bBiWnN5uKT
TR7DppLg34VLpbV1pv3SLycmnAMwnn4o6ENNG3BZWwo6TSRCrZqTlzYEc6SfZZ4C
GuvKTSLF2qEODWs2zTTsRptwOpGiw2XCYSvz/Ral32Nu1hd7nf71EUNim7DpTBvS
UUymt8SrEf1+Vx0dyKBZn3dnFO+JN5gcKgldcNffJ3FQJqe7B1KfoJNdecD237ix
dLISAWTUar2GQ72R9MvO5JZGlrf8gk6eIOhuEzRne/sFLWvAVyodue7JMGRzAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUhA77iuAmC6NrpaEAjm+tPnwtF90wHwYDVR0j
BBgwFoAUDFw5jABFpPD+D47c8geV5fjqqjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy
ZTkwLzEvMEM1QzM5OEMwMDQ1QTRGMEZFMEY4RURDRjIwNzk1RTVGOEVBQUEzMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RGdzVqQUJGcFBELUQ0N2M4Z2VWNWZq
cXFqQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mODEyZDNlZi1j
NWZjLTQ1YjAtOTU0YS04YTUyMjEwYzJlOTAvMS8wQzVDMzk4QzAwNDVBNEYwRkUw
RjhFRENGMjA3OTVFNUY4RUFBQTMwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAVNKV0G5HgIwAuoxQtv
MYk1NlqWsVSlKguWSAhisZ+kQYrJtOu9mrtnkYukcNhbQgQrLUpGXFAkVpbISUe4
7QFxLdO3ED4MHe/kUb7T1y6361wnHbouhskhLpjVEK4opTMc1pKkwu+xkuvfqxda
rlI8OG+PPi17MxTytXhoOORE4hvSoMYsvYqR+2yf78V6uMRD8ZrkHqgfKcIzPogE
nBqiHAVgtiwl2K91U3the4a22GuQ5DLVyMJl0NPZ/aD4/hC0xnrHgAjUi0cfFAdD
lZEMP0hf9AsgvBk2RCiJVq/9W5BqRUXjn+5V5w8nEiFIveON1yEBLYA0DV0pBdGu
Ew==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:42 2026 by rpki-client