Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier: Kki5tVqGdSt7GJdjB2bGHwnSM90TmxieT11BWnLp6xw=
Subject key identifier: 12:CC:89:07:51:9F:1B:A9:FF:C0:3F:5C:A8:F2:11:46:21:22:F2:1E
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 58607F7C90B444D5D667EABAC7581AB385575F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number: 02AA
Signing time: Tue 21 Apr 2026 19:49:57 +0000
Manifest this update: Tue 21 Apr 2026 19:44:57 +0000
Manifest next update: Wed 22 Apr 2026 20:00:57 +0000
Files and hashes: 1: AS402215.roa (hash: x+hGHtmEAPwvXVRtrD3qC/g1vCDTd7iiThEcyJYSuno=)
2: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=)
3: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=)
4: AS212238.roa (hash: 0IyslS3CG8KwMKdb6hG7WmS6/jX6BN24to036ny5Oec=)
5: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=)
6: AS202736.roa (hash: mvaFQ8VzOiSlC6osU1pagjFGEUjuXEDkXWP0QHArhMs=)
7: AS200213.roa (hash: jHsWgHO4WsK8UwfX+EGNaRyozPf8mcg2Dl9LXjUSJHU=)
8: AS201002.roa (hash: b8ZITxaPgT55292RXOwDGuMuOURRGinQZs7OnZ+k958=)
9: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
10: AS203446.roa (hash: oqoiqzh1+ViDUf4HKID2vR8MgIa8o5lwgPwsNCMr93E=)
11: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=)
12: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=)
13: AS153383.roa (hash: vCi6FQYQWKC0ggluWhyMgm6QAvKbEiJEf7VAiTXWA9c=)
14: AS48266.roa (hash: bMUjaV/zrukPHur/enwWknsnzqvOgoiCYnqoXIVR7Rw=)
15: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=)
16: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=)
17: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: STSOvGo0FJgp+iou1XSMxmchPpUEolNpeHU3bH2lEss=)
18: AS212027.roa (hash: mwTmCqgr/BINwa+LRLW7yo0HSDw8DAufEvQaH4pf++8=)
19: AS64267.roa (hash: 9NR5KgAXq7OBNV4qYToFoteMTZc+d/n3KSlEv7KRAOE=)
20: AS834.roa (hash: ty9DW8hCr/3ogLKj17TIGhLC1Z1Gl/rJbwO5o/nwnN0=)
21: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=)
22: AS402047.roa (hash: kDpEc/Mv6MVbpX0TtNEUs1x0Fql1p3DOMvkh2qSS8pw=)
23: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=)
24: AS32132.roa (hash: AnbuErehQXFxV+kWQt2eul6q993RKYVkoz7/H8Ifyq0=)
25: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=)
26: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=)
27: AS47690.roa (hash: JX7G+mBe037OStFqpA0McZ7JKC6vPuvjH2Y/7AsUGXU=)
28: AS16276.roa (hash: EKpXTe4ys8FkDLvAjnRFYuDnQiF1p8xjjP1Ye2+AROI=)
29: AS20326.roa (hash: bjlCs1cn8SZvrAA+XVOeFzTEEDwkFKKTeVLvOLa+FN0=)
30: AS8820.roa (hash: 37NLowiuT9jy/dagftAxkW62Xv5potfYYsy61mpYIOM=)
31: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=)
32: AS9009.roa (hash: bsO+KEDdsh042ly3XKZ18x6W8Jx5Y/tMwuWQMMg9A7o=)
33: AS198250.roa (hash: 0AtrEvqe07hWd8Wqy2rJpr0jaaNWhdxqy23FH66II7Y=)
34: AS214483.roa (hash: 4KtpSOnc/KWvq+zimWh8U+q+OC78oZRQovYOuN+I9XY=)
35: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=)
36: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=)
37: AS203090.roa (hash: AtZQiXBdWfevJeS9ni8F5oxZwYfsEjJFqy+rO2NW5P0=)
38: AS197537.roa (hash: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0=)
39: AS2914.roa (hash: 2t79Dc48lM1NRGFZZiYzebTrp5NOXQIczJ6i0MsJxLQ=)
40: AS3320.roa (hash: J0gCdn8aWPQr54/0F/uediEv8Z8fjukYJoHGgqTaPFs=)
41: AS150293.roa (hash: QbHrOZo2zwZ+oLE3z31pu5sxkdmzrbc6BP45zBXt6Tg=)
42: AS215748.roa (hash: 3x6iarwKX82be+ibel0x8bpdtYPfZ1tvpFoGL1m1VtU=)
43: AS54252.roa (hash: LRBKfU3oZxsRDvjiCU60FMM0ioGajI+vpwmOzUPhljM=)
44: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=)
45: AS212980.roa (hash: Zoz/8g4QJTKbhJZrHf9/7XdXmBbc4ng74YzPeFjoYNk=)
46: AS152179.roa (hash: 3s5ZO5zsIBGOTYB/W7LkLPPbBTA+gesfrHvDmlpyA+0=)
47: AS174.roa (hash: YVpjx11K2k0KwX6I8b7c/sGi80aE+WgPV5jxCl19cwg=)
48: AS40352.roa (hash: zD0xqd5sXzdGo6EF84+O92Ic0KmkhjIMhSt0sdwuKTc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:60:7f:7c:90:b4:44:d5:d6:67:ea:ba:c7:58:1a:b3:85:57:5f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Apr 21 19:44:57 2026 GMT
Not After : Apr 22 20:00:57 2026 GMT
Subject: CN=12CC8907519F1BA9FFC03F5CA8F211462122F21E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:e5:fe:0b:6a:32:80:3a:a0:79:fa:e7:95:
be:2f:5e:0a:ef:83:e4:ac:19:ab:c1:07:67:d3:c0:
07:19:72:a6:f6:f3:ef:5e:e6:f4:c6:39:f6:2a:40:
f5:2d:e5:ba:7c:ee:49:9f:6a:1f:02:59:0e:34:a7:
d4:d1:7a:21:b5:12:2c:05:a6:a2:98:04:d4:24:e6:
53:ce:c5:42:ad:f6:64:33:92:0c:ab:78:96:da:be:
88:45:94:1a:54:98:fc:a4:07:7f:c8:f9:c1:59:eb:
4a:2e:68:99:5b:22:52:46:87:37:79:f7:e6:fd:f2:
dd:2b:68:15:7d:a1:dc:e7:0d:18:11:46:93:bd:98:
5b:cf:24:19:db:bc:68:d9:af:42:73:db:a6:96:08:
88:a1:0c:9e:5b:16:ac:7b:41:05:6f:06:68:99:7f:
95:22:f2:10:50:4f:a6:41:2f:b3:9a:ed:dd:83:4b:
d6:67:84:e6:c6:20:55:09:40:00:8a:f7:98:f7:84:
c9:0f:31:88:69:eb:48:b1:79:6c:88:0d:37:c5:5f:
70:e6:0b:dd:5a:0b:87:d6:83:c5:14:fe:c1:c7:b7:
3d:f0:87:d9:b9:a8:3b:72:fb:3c:f0:bd:14:f6:43:
d4:b2:75:94:84:cb:04:cc:11:1e:3d:97:6a:94:4b:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CC:89:07:51:9F:1B:A9:FF:C0:3F:5C:A8:F2:11:46:21:22:F2:1E
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:aa:12:1d:4d:cc:a2:d5:74:a0:50:f8:d2:2f:45:5f:b7:c9:
3f:c5:e5:ba:80:a8:bc:fe:23:ef:f1:43:63:22:9e:97:39:f8:
29:04:2b:d2:06:cb:41:13:97:d2:c3:79:26:6b:85:e8:93:23:
12:47:d8:df:23:ec:68:26:7b:3d:21:e9:c6:17:c5:04:f9:fe:
37:d9:7b:d8:2a:6d:0e:09:4c:7a:bc:a2:8c:65:ce:e8:10:ea:
be:3c:34:7f:a1:57:14:cb:5f:ce:ca:9e:1b:e7:d8:49:07:a6:
59:9d:52:14:f9:50:3f:99:35:e5:62:08:f4:0f:0a:6e:c1:f8:
9a:c8:51:04:b8:20:c3:eb:07:ef:57:49:6d:a4:5e:16:bd:d1:
08:f7:dc:66:2b:08:d3:2b:19:c5:be:19:32:9a:26:82:e3:32:
6f:b0:9b:75:05:40:3c:ea:49:60:d3:69:89:e9:2a:5b:56:17:
c1:29:00:8d:1a:f1:0c:77:d0:e8:7a:67:87:81:9c:57:cd:40:
00:10:55:3a:14:fe:0d:72:e8:79:38:d0:39:c6:b6:c8:51:a0:
f1:68:78:e1:0d:15:83:26:5f:7b:bc:15:63:4c:b0:25:c4:5e:
0f:8b:8c:a7:df:a0:6a:59:35:58:c8:27:79:d6:8a:d0:fc:82:
26:c7:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:32:02 2026 by rpki-client