Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
File: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft (raw, json)
Hash identifier: oAr7pa0AOCmefwmt0BsMii2NiBkkuswqO86kvsm/LXk=
Subject key identifier: F5:E8:E7:4E:96:00:46:16:DF:86:6C:4E:9D:D2:8A:FF:D1:96:D6:29
Authority key identifier: AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
Certificate issuer: /CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Certificate serial: 18EC9284D66BEF6C085A6FACD7D177881B121BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
Manifest number: 13
Signing time: Fri 17 Apr 2026 06:34:53 +0000
Manifest this update: Fri 17 Apr 2026 06:29:53 +0000
Manifest next update: Sat 18 Apr 2026 06:37:53 +0000
Files and hashes: 1: AS213900.asa (hash: vZ4nFV2ZuxtxXZLEvZl+LEgTwQtkx6mKUShfFutxF0Q=)
2: 3139352e3134342e32342e302f32342d3332203d3e20323130343634.roa (hash: HB9HGgTweFVtW/gslktXVB+L0d08UgCcpj9As8LURAo=)
3: ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl (hash: UbZuaACMNPS0j3SLN8yywgdxYXnzR34hsy938i0Iu9o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ec:92:84:d6:6b:ef:6c:08:5a:6f:ac:d7:d1:77:88:1b:12:1b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb5dff8a45df5cdafa2a95c715f10c5fe5f91a3
Validity
Not Before: Apr 17 06:29:53 2026 GMT
Not After : Apr 18 06:37:53 2026 GMT
Subject: CN=F5E8E74E96004616DF866C4E9DD28AFFD196D629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:a1:9e:cd:76:bc:49:b3:69:91:02:ed:23:
65:b5:b4:ac:d3:5e:42:16:2d:03:54:a4:9a:51:c6:
d3:dc:02:fb:87:83:2a:80:15:f2:83:10:de:6e:47:
c6:32:ef:a7:80:ec:1d:bb:71:7a:cb:8d:ea:75:cf:
ee:2f:36:d6:94:53:f7:6a:04:73:09:27:38:04:49:
d5:dd:b5:58:de:6b:55:07:a0:3a:9c:cb:de:9b:fc:
cd:2d:4f:40:3b:a2:2b:99:99:57:6b:e5:47:aa:f0:
49:4a:43:38:2e:10:20:0e:3b:2f:d7:e6:2c:34:81:
62:61:f9:43:c5:47:e4:fe:b7:da:0a:2e:22:aa:82:
a0:90:42:cb:4c:75:a6:5e:ce:3f:96:58:6e:25:90:
21:06:be:e1:db:bb:47:9a:29:64:25:ab:1c:f3:be:
f7:fc:3f:1c:4e:da:d5:c5:db:d9:ca:dc:89:fd:bf:
51:d2:cd:25:2b:18:19:41:d3:b7:7d:12:32:e9:be:
dd:cc:98:b5:ac:20:50:ce:7b:77:6f:14:da:12:4e:
19:c9:03:85:3b:39:13:01:8d:93:4f:b2:18:b0:90:
8a:c3:d2:27:fe:5f:8f:76:4f:df:8e:c8:7e:1d:ef:
9d:6c:a2:bc:f0:82:8c:e8:3a:11:d1:c9:8a:34:fa:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E8:E7:4E:96:00:46:16:DF:86:6C:4E:9D:D2:8A:FF:D1:96:D6:29
X509v3 Authority Key Identifier:
keyid:AC:B5:DF:F8:A4:5D:F5:CD:AF:A2:A9:5C:71:5F:10:C5:FE:5F:91:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cf:6f:ab:b2:14:5b:b2:a5:ee:72:fa:1b:50:1b:12:f9:95:
d5:18:d1:d7:38:f7:09:e9:10:a3:09:90:ae:18:7f:54:ba:93:
b4:83:d6:98:11:92:a1:13:b4:0c:f2:4a:c3:d2:f5:67:9f:a6:
81:3d:b5:cd:df:59:c0:8a:f0:83:ec:22:a1:be:2e:91:ec:e1:
e1:f5:ba:45:7b:36:69:a6:ca:c6:ae:ca:72:06:2e:a5:cc:bb:
90:6e:a2:3a:12:d5:98:1c:62:4b:03:4e:ff:99:0d:11:ab:88:
37:ca:36:30:45:42:de:4e:dd:ad:f7:9a:6b:2c:a6:38:6a:83:
f1:04:11:42:a7:c9:c4:11:10:0c:23:78:26:24:55:d8:a6:8f:
fd:ac:d2:5a:28:e5:f7:39:a0:58:2c:81:51:16:dc:ef:7f:1c:
f6:62:65:07:64:32:fa:f6:b3:f8:37:7d:3d:09:e4:00:dc:52:
6d:29:00:47:47:9a:ac:43:f6:44:78:8c:b5:75:75:f8:8f:f3:
66:c7:af:8a:c4:3d:56:9d:fe:15:49:d8:3f:d4:d6:9e:3a:a7:
78:20:2c:d1:8c:2c:fb:fd:ce:24:77:7e:47:4e:de:74:ce:00:
68:c1:ed:42:4a:a7:bb:02:86:c6:c0:f9:e9:f9:34:02:1f:0e:
d3:9d:79:fa
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGOyShNZr72wIWm+s19F3iBsSG6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWNiNWRmZjhhNDVkZjVjZGFmYTJhOTVjNzE1ZjEwYzVm
ZTVmOTFhMzAeFw0yNjA0MTcwNjI5NTNaFw0yNjA0MTgwNjM3NTNaMDMxMTAvBgNV
BAMTKEY1RThFNzRFOTYwMDQ2MTZERjg2NkM0RTlERDI4QUZGRDE5NkQ2MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0l6GezXa8SbNpkQLtI2W1tKzT
XkIWLQNUpJpRxtPcAvuHgyqAFfKDEN5uR8Yy76eA7B27cXrLjep1z+4vNtaUU/dq
BHMJJzgESdXdtVjea1UHoDqcy96b/M0tT0A7oiuZmVdr5Ueq8ElKQzguECAOOy/X
5iw0gWJh+UPFR+T+t9oKLiKqgqCQQstMdaZezj+WWG4lkCEGvuHbu0eaKWQlqxzz
vvf8PxxO2tXF29nK3In9v1HSzSUrGBlB07d9EjLpvt3MmLWsIFDOe3dvFNoSThnJ
A4U7ORMBjZNPshiwkIrD0if+X492T9+OyH4d751sorzwgozoOhHRyYo0+hJ3AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU9ejnTpYARhbfhmxOndKK/9GW1ikwHwYDVR0j
BBgwFoAUrLXf+KRd9c2voqlccV8Qxf5fkaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi
MzRiLzQvQUNCNURGRjhBNDVERjVDREFGQTJBOTVDNzE1RjEwQzVGRTVGOTFBMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JMWGYtS1JkOWMydm9xbGNjVjhReGY1
ZmthTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03
ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC9BQ0I1REZGOEE0NURGNUNEQUZB
MkE5NUM3MTVGMTBDNUZFNUY5MUEzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS89vq7IUW7Kl7nL6G1Ab
EvmV1RjR1zj3CekQowmQrhh/VLqTtIPWmBGSoRO0DPJKw9L1Z5+mgT21zd9ZwIrw
g+wiob4ukezh4fW6RXs2aabKxq7KcgYupcy7kG6iOhLVmBxiSwNO/5kNEauIN8o2
MEVC3k7drfeaayymOGqD8QQRQqfJxBEQDCN4JiRV2KaP/azSWijl9zmgWCyBURbc
738c9mJlB2Qy+vaz+Dd9PQnkANxSbSkAR0earEP2RHiMtXV1+I/zZsevisQ9Vp3+
FUnYP9TWnjqneCAs0Yws+/3OJHd+R07edM4AaMHtQkqnuwKGxsD56fk0Ah8O0515
+g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:55 2026 by rpki-client