Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
File: 0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft (raw, json)
Hash identifier: t8qwzrvFOfOtCXqk26lGNZZi2Db69/p1xoMMjFsiue0=
Subject key identifier: F7:58:D6:3D:35:01:B8:23:7C:79:FE:DC:4F:0D:7F:2D:EC:77:F2:2B
Authority key identifier: 0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30
Certificate issuer: /CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
Certificate serial: 3B4E0531DF342C53E481A6F9945E7083E98B0333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
Manifest number: 8C
Signing time: Wed 25 Mar 2026 11:49:09 +0000
Manifest this update: Wed 25 Mar 2026 11:44:09 +0000
Manifest next update: Thu 26 Mar 2026 15:22:09 +0000
Files and hashes: 1: 0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl (hash: fDl6ZBZ7aXMj/aj5ePUcEhjaIiy0FFSkcO8Mr3ryW5Y=)
2: AS208754.asa (hash: 3pfL9jLjD9/sLJgF6JoE9wrlEZr3YjEPpinQaohSjCY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl
rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:4e:05:31:df:34:2c:53:e4:81:a6:f9:94:5e:70:83:e9:8b:03:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
Validity
Not Before: Mar 25 11:44:09 2026 GMT
Not After : Mar 26 15:22:09 2026 GMT
Subject: CN=F758D63D3501B8237C79FEDC4F0D7F2DEC77F22B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:94:3f:f9:aa:b0:a3:38:2f:52:4f:8e:e9:
6d:1a:3c:27:d7:7e:72:fc:69:0e:47:e4:6c:19:42:
4f:61:35:42:77:7d:ea:b2:f0:f6:b4:77:02:ae:d5:
fb:dd:f8:9f:9f:98:a6:92:3b:92:80:9c:7b:b0:10:
06:a4:d5:c4:8b:07:c7:6c:83:14:78:3e:6d:cf:97:
59:73:0d:a9:79:b5:c7:c7:af:8d:49:cf:d9:d7:43:
e5:30:fd:70:81:72:12:dd:50:b9:f7:72:0c:e3:b2:
54:76:07:cf:cb:7e:aa:4e:5e:22:70:22:28:ea:cc:
5f:3a:1d:e8:40:51:18:e0:c5:05:28:4c:cd:57:d8:
16:21:9c:83:15:05:1c:59:cc:71:90:b2:c8:3d:ee:
72:97:a9:0b:e3:e8:c4:78:ed:ba:c5:af:30:59:1c:
68:4b:16:da:60:84:1c:ed:10:40:c1:52:13:26:07:
0d:fb:1f:6b:28:44:49:ca:5e:f3:11:29:5c:64:b9:
f4:1a:86:96:c9:c3:6d:35:ee:40:25:f6:90:36:0b:
64:50:54:f3:ca:5b:b1:ea:c6:06:89:f3:d6:e4:34:
01:5f:04:df:85:93:36:dd:e6:78:fc:2e:c3:f0:67:
cc:dd:32:d0:ad:5d:2e:10:de:de:33:a5:89:d9:b4:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:58:D6:3D:35:01:B8:23:7C:79:FE:DC:4F:0D:7F:2D:EC:77:F2:2B
X509v3 Authority Key Identifier:
keyid:0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ca:37:0e:b8:e7:97:2b:6b:6e:06:75:04:f1:2a:18:97:e3:
cf:1f:25:98:dc:e0:87:7d:8d:39:8a:dc:fa:a3:36:51:a7:2d:
4c:1a:52:12:e8:ad:a6:7e:bc:6b:17:b9:47:d5:06:97:a2:0d:
a8:0c:fe:56:4f:ed:c5:62:90:71:b3:26:78:46:6a:70:63:6a:
4b:69:0d:76:59:43:3f:3d:a4:85:77:e2:56:60:b5:cf:f7:8a:
e3:db:ad:bd:19:3e:22:57:fa:e2:8a:8f:d6:ff:81:71:94:a3:
6b:54:8d:9c:b1:ac:98:6e:4a:53:e2:bf:0f:1b:66:2b:78:a8:
42:78:82:da:88:ca:85:f2:82:6a:61:c9:33:77:9b:37:e0:09:
82:20:6d:a2:2f:3d:ba:52:7c:c2:ce:9e:75:10:ab:da:af:80:
45:6e:13:55:5a:7f:b9:c6:08:73:a9:65:81:04:81:df:fd:24:
38:30:f8:ad:1e:f8:f8:07:ba:59:b1:4b:0d:c8:b1:11:e6:ab:
9e:7d:ef:2f:8b:13:7e:c7:c7:81:52:c2:58:60:2f:e3:d2:b1:
ba:1e:31:b7:53:1c:9c:7c:c7:35:d3:f5:03:8d:ed:ee:1b:6f:
09:64:6c:83:ea:a0:19:d7:d5:fc:b1:88:53:65:2e:31:7e:29:
bd:7b:d4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:15 2026 by rpki-client