Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
File: 06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft (raw, json)
Hash identifier: FqrPiYZBWPV7Ei+a0SH0fv3QlGRtJ5hgLECNKbHr6t8=
Subject key identifier: 10:29:8B:C0:63:6C:D7:2E:64:81:EF:11:2C:4B:24:D2:C1:87:CD:FF
Authority key identifier: 06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C
Certificate issuer: /CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
Certificate serial: 5250F301622C128763293F8B20C7EF5CE5779C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
Manifest number: 3B
Signing time: Sun 01 Mar 2026 03:03:04 +0000
Manifest this update: Sun 01 Mar 2026 02:58:04 +0000
Manifest next update: Mon 02 Mar 2026 06:40:04 +0000
Files and hashes: 1: AS202782.asa (hash: BUvQaaL6LDCtZinny59vQWt/MEabU/h3KDaRVhwqAQM=)
2: 06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl (hash: qeL/pHH8vxAP4D9dBe3SWJ9rixckcoexGW4/c3eaJgg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:50:f3:01:62:2c:12:87:63:29:3f:8b:20:c7:ef:5c:e5:77:9c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
Validity
Not Before: Mar 1 02:58:04 2026 GMT
Not After : Mar 2 06:40:04 2026 GMT
Subject: CN=10298BC0636CD72E6481EF112C4B24D2C187CDFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ad:27:d9:67:61:ad:ec:af:e4:1e:4b:4d:f9:
2b:27:73:d3:01:b4:5a:50:21:19:bf:26:c2:7d:7b:
07:8c:40:45:fe:5f:d4:4b:2b:db:36:93:72:c1:b6:
6f:b5:57:b8:19:44:85:d5:77:7b:6c:1d:db:92:72:
f1:54:bf:fd:d8:99:b3:43:78:9b:69:69:d9:22:3d:
0c:99:5e:74:43:2b:62:0e:2d:68:3f:02:d9:58:0d:
a8:7e:9f:0c:40:96:d1:0a:b9:bd:3d:e2:a0:e0:b7:
58:01:e0:56:50:88:56:61:76:fe:a5:59:17:44:6b:
e6:24:09:ce:45:8c:e9:c4:6c:90:e6:5e:d4:8c:3d:
15:d6:61:4d:51:7c:ba:5e:8f:11:38:b4:66:17:a6:
e3:fd:ee:91:cc:cf:d4:44:52:aa:c6:3a:a2:e4:91:
d0:cf:48:7e:06:ae:11:0d:9d:aa:c4:5c:db:f9:9e:
71:a9:7f:0b:ee:c5:56:50:4b:be:39:a7:62:e1:9f:
4a:f9:7c:ea:ad:45:67:7d:0a:d6:bc:b9:5f:2f:c1:
1f:02:b5:e7:1d:85:22:88:61:d3:a6:ab:a2:92:da:
76:e2:e7:61:14:eb:c4:a0:8b:08:45:e5:bb:9a:08:
7c:10:37:55:11:73:2c:a6:cd:11:23:74:f3:ed:b3:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:29:8B:C0:63:6C:D7:2E:64:81:EF:11:2C:4B:24:D2:C1:87:CD:FF
X509v3 Authority Key Identifier:
keyid:06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a9:54:4c:4c:ec:e5:78:cc:92:08:e1:87:6d:be:ca:95:1e:
28:04:ae:81:49:66:20:ad:02:26:63:f9:85:bf:82:98:60:5d:
8d:2a:0f:35:fc:a7:a6:5b:18:66:56:e4:22:76:9d:55:0c:2e:
de:ab:5e:30:b9:19:99:88:34:c5:fd:0b:26:32:92:a0:54:f6:
47:77:f8:3a:04:38:ab:ac:99:66:d8:00:22:46:91:af:48:45:
65:85:59:c1:24:5a:9a:7a:b6:e8:1e:5d:c1:1a:fb:69:73:c9:
69:71:d4:ed:62:f8:4c:9c:dc:c7:53:0c:c6:73:a6:69:4a:4d:
13:c6:b0:d0:c2:83:c5:2c:ac:f3:bc:ec:5a:e3:99:c4:7e:35:
fa:95:75:4a:56:ef:45:e0:c3:43:4e:49:9a:38:6e:4b:06:b5:
43:f4:e6:f3:e0:33:ce:48:fa:ed:63:d6:52:0d:cc:f6:ea:f0:
fc:2e:9b:c9:dd:c3:a5:35:30:fb:10:5a:4d:98:99:2c:a2:e1:
f2:c7:ac:95:25:14:c3:72:1c:57:5e:f9:80:5f:81:ec:0e:17:
b1:f0:de:e6:e4:f4:af:ef:12:66:7b:68:82:32:44:52:43:57:
90:d5:4c:15:33:26:cc:b8:f2:49:88:9a:24:97:ab:ef:46:be:
38:79:66:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:18 2026 by rpki-client