Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
File: 0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft (raw, json)
Hash identifier: vP68ixhdwIWi6WGZ+dzBi6oJE/hb1u3veJzXcjvPZTI=
Subject key identifier: 09:25:7B:BF:4A:16:28:B2:CC:89:CA:33:66:F2:41:C8:50:35:8B:F3
Authority key identifier: 0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30
Certificate issuer: /CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
Certificate serial: 485A2998FCDDC31E1A16C8ACECA69C25F8077160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
Manifest number: 0124
Signing time: Thu 23 Jul 2026 16:28:45 +0000
Manifest this update: Thu 23 Jul 2026 16:23:45 +0000
Manifest next update: Fri 24 Jul 2026 20:09:45 +0000
Files and hashes: 1: AS208754.asa (hash: 3EW700VlL7DtTVIyBPhNoXihGyvxiMvZegasaRWzx5c=)
2: 0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl (hash: L2PDomweoG4CI3yrgldLkhCVsTRv7Y/SKBZ9mg+6E2s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl
rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5a:29:98:fc:dd:c3:1e:1a:16:c8:ac:ec:a6:9c:25:f8:07:71:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30
Validity
Not Before: Jul 23 16:23:45 2026 GMT
Not After : Jul 24 20:09:45 2026 GMT
Subject: CN=09257BBF4A1628B2CC89CA3366F241C850358BF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:bf:1a:4d:2a:78:97:33:e5:bb:6f:0d:f2:
8d:5e:3e:a7:d2:83:26:cd:50:bf:34:27:8e:89:a9:
54:1a:23:39:d4:d0:13:54:75:3b:b2:76:f9:aa:1a:
dc:cf:48:67:fe:7c:23:97:2a:1c:c8:e8:b4:4d:77:
69:cc:f0:7a:ba:69:cb:77:be:83:7c:ec:47:66:76:
d6:26:37:ff:af:e4:42:d3:9b:96:54:d8:52:69:2d:
e3:c9:71:8b:fe:0b:5e:44:45:ca:ce:b9:4b:4a:02:
62:af:08:6f:44:8a:c2:81:3e:eb:87:3b:ef:ca:fd:
00:dd:33:21:80:87:48:a7:82:7a:b7:57:af:3c:85:
e6:9b:c7:f1:4d:06:95:4a:6a:d0:1f:7a:49:3f:87:
cb:ab:51:09:81:f3:28:f3:ef:a9:29:5a:6e:11:bd:
5b:7e:e1:f9:49:5c:04:95:60:b4:5d:68:8d:10:a4:
c6:a7:26:f1:60:ef:4e:6e:0c:81:ba:3d:fc:0c:33:
af:5b:f4:2d:53:d3:f6:e4:d2:e1:32:69:26:a7:c4:
be:c0:b2:b9:52:28:22:e7:2d:16:5e:b4:86:55:96:
b9:6d:b2:e0:9b:a7:15:93:a0:55:cb:7e:6f:8e:7c:
0d:66:e0:0f:43:32:27:40:68:99:35:d2:b4:16:fb:
5e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:25:7B:BF:4A:16:28:B2:CC:89:CA:33:66:F2:41:C8:50:35:8B:F3
X509v3 Authority Key Identifier:
keyid:0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c4:4c:78:19:61:f0:87:c2:4e:c7:74:0c:b2:04:de:71:4f:
a2:7a:a7:71:3d:ac:b0:27:b5:d1:3b:36:86:ab:bf:f6:d2:19:
ca:22:1a:94:fb:e5:2a:29:2f:23:bc:3f:88:c3:05:87:8b:09:
1f:88:92:60:79:2f:07:64:67:43:ef:82:76:f4:46:d1:d5:f0:
df:d6:11:f5:36:2f:37:79:09:c8:7c:31:65:a6:a5:1f:ee:7e:
46:a7:67:fb:63:0b:63:3c:c2:53:ab:3f:1d:d9:5e:00:aa:58:
36:5d:51:7a:8a:ee:90:de:68:e1:08:4b:5f:10:6d:8c:ae:c0:
64:c7:50:46:6d:c5:d5:48:46:6b:d5:b7:c6:de:05:5e:df:8e:
6c:f6:4e:0b:45:e6:23:84:53:39:11:5a:a2:d3:2a:a9:34:a2:
8b:05:46:ed:d5:0e:f2:59:72:18:70:c3:31:1d:fe:d1:21:29:
86:a7:e0:cf:48:29:99:3b:03:c6:32:c9:f2:1c:c8:03:1f:d0:
32:2d:88:eb:51:98:aa:e2:8e:31:67:94:20:9d:90:99:e3:f6:
d0:83:af:cf:cd:ba:44:8a:7d:e9:c0:b0:c9:73:49:de:72:f5:
89:9a:63:a4:49:63:04:37:80:0b:51:4c:93:f8:2e:97:2a:95:
90:ba:06:0c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSFopmPzdwx4aFsis7KacJfgHcWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGM1YzM5OGMwMDQ1YTRmMGZlMGY4ZWRjZjIwNzk1ZTVm
OGVhYWEzMDAeFw0yNjA3MjMxNjIzNDVaFw0yNjA3MjQyMDA5NDVaMDMxMTAvBgNV
BAMTKDA5MjU3QkJGNEExNjI4QjJDQzg5Q0EzMzY2RjI0MUM4NTAzNThCRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeR78aTSp4lzPlu28N8o1ePqfS
gybNUL80J46JqVQaIznU0BNUdTuydvmqGtzPSGf+fCOXKhzI6LRNd2nM8Hq6act3
voN87EdmdtYmN/+v5ELTm5ZU2FJpLePJcYv+C15ERcrOuUtKAmKvCG9EisKBPuuH
O+/K/QDdMyGAh0ingnq3V688heabx/FNBpVKatAfekk/h8urUQmB8yjz76kpWm4R
vVt+4flJXASVYLRdaI0QpManJvFg705uDIG6PfwMM69b9C1T0/bk0uEyaSanxL7A
srlSKCLnLRZetIZVlrltsuCbpxWToFXLfm+OfA1m4A9DMidAaJk10rQW+14jAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUCSV7v0oWKLLMicozZvJByFA1i/MwHwYDVR0j
BBgwFoAUDFw5jABFpPD+D47c8geV5fjqqjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy
ZTkwLzEvMEM1QzM5OEMwMDQ1QTRGMEZFMEY4RURDRjIwNzk1RTVGOEVBQUEzMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RGdzVqQUJGcFBELUQ0N2M4Z2VWNWZq
cXFqQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mODEyZDNlZi1j
NWZjLTQ1YjAtOTU0YS04YTUyMjEwYzJlOTAvMS8wQzVDMzk4QzAwNDVBNEYwRkUw
RjhFRENGMjA3OTVFNUY4RUFBQTMwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMRMeBlh8IfCTsd0DLIE
3nFPonqncT2ssCe10Ts2hqu/9tIZyiIalPvlKikvI7w/iMMFh4sJH4iSYHkvB2Rn
Q++CdvRG0dXw39YR9TYvN3kJyHwxZaalH+5+Rqdn+2MLYzzCU6s/HdleAKpYNl1R
eorukN5o4QhLXxBtjK7AZMdQRm3F1UhGa9W3xt4FXt+ObPZOC0XmI4RTORFaotMq
qTSiiwVG7dUO8llyGHDDMR3+0SEphqfgz0gpmTsDxjLJ8hzIAx/QMi2I61GYquKO
MWeUIJ2QmeP20IOvz826RIp96cCwyXNJ3nL1iZpjpEljBDeAC1FMk/gulyqVkLoG
DA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:59 2026 by rpki-client