Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
File: 439CED080CC8B076E557B02CC83D8768D27D56A4.mft (raw, json)
Hash identifier: hbN/iKmANsw4lO18eUyClAlQryVXp27fIPwQegEnFKA=
Subject key identifier: 30:50:E7:04:24:BF:4B:72:89:0C:81:6C:C7:0F:60:55:30:E6:B1:C5
Authority key identifier: 43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
Certificate issuer: /CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Certificate serial: 3A0E5CC2E6543376A661C85B77B4608FB9457E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
Manifest number: 0D
Signing time: Sun 29 Mar 2026 03:06:57 +0000
Manifest this update: Sun 29 Mar 2026 03:01:57 +0000
Manifest next update: Mon 30 Mar 2026 03:44:57 +0000
Files and hashes: 1: 439CED080CC8B076E557B02CC83D8768D27D56A4.crl (hash: dhEjlSdkxhZdv4feMLQGqfSPRbbfTN1gkcSsuxSrstg=)
2: AS216455.asa (hash: 3Hj6soP0mHi9tW3tH3/uigxupFi1xIZySq2M9PB9CK0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:0e:5c:c2:e6:54:33:76:a6:61:c8:5b:77:b4:60:8f:b9:45:7e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Validity
Not Before: Mar 29 03:01:57 2026 GMT
Not After : Mar 30 03:44:57 2026 GMT
Subject: CN=3050E70424BF4B72890C816CC70F605530E6B1C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:ea:a3:9d:17:20:e2:d3:e1:9d:26:c7:99:
72:b5:73:24:e2:3d:d1:4d:46:c9:5c:44:af:a6:be:
35:03:b6:96:0b:bb:11:77:9c:3c:bf:b0:fe:e6:26:
1c:da:8f:68:e3:00:ef:30:e9:0a:da:ab:cf:09:ef:
76:53:1e:7a:0a:e0:a6:39:bb:e5:1a:03:f0:d1:0c:
12:84:a6:8e:04:07:4d:f8:07:29:ed:2b:08:e7:43:
92:5d:19:93:cd:0c:ef:73:78:1b:bd:2d:ab:a5:d0:
17:5b:64:08:b9:76:82:8b:f1:3b:e4:71:69:a6:2f:
bc:2e:f4:e4:35:53:09:b3:c3:5c:33:8d:ba:88:cb:
84:88:d1:7e:4a:86:b8:f3:16:bb:0e:57:71:82:16:
1e:05:2d:22:86:03:d2:ef:34:a9:4b:26:29:f0:92:
ae:6a:e8:e9:e9:f8:91:1e:07:62:5c:ae:67:77:99:
79:7d:9b:e5:61:1b:6e:a4:81:9c:f2:6f:ff:f7:3c:
24:65:93:20:d9:5d:40:2e:36:7f:fa:02:42:2a:68:
8b:6b:c5:af:4e:bc:d6:20:52:70:c9:35:8a:62:57:
da:9a:df:98:ce:9d:d9:a2:ef:73:e9:00:57:0d:27:
c3:11:71:fa:e5:0f:15:fd:65:41:e5:4b:6f:2f:b9:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:50:E7:04:24:BF:4B:72:89:0C:81:6C:C7:0F:60:55:30:E6:B1:C5
X509v3 Authority Key Identifier:
keyid:43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ce:07:bf:fc:0d:5f:20:76:16:ac:91:be:d1:99:a2:10:c9:
5b:2f:ba:9f:0c:92:b1:54:16:de:0d:0b:45:5f:c0:e4:1a:2a:
27:0b:8f:57:64:e4:b6:8b:aa:30:5d:c0:a2:06:3e:2b:de:1b:
5c:86:44:ad:d5:41:75:17:46:7e:87:65:97:98:95:ca:2e:7f:
7f:a8:a9:93:2b:3f:80:c2:30:24:e6:a5:da:0d:6b:37:d3:0c:
4a:bd:cc:31:12:32:b8:31:66:e3:37:01:f4:be:e8:ee:d0:c5:
b0:ec:ea:05:2b:19:41:71:7f:da:4b:5e:c8:e8:71:a5:63:cf:
5e:0c:41:85:11:01:f7:83:ef:58:5a:86:e8:51:fc:b5:0b:d5:
ca:40:d2:02:b3:22:9d:f4:43:a8:bd:a6:74:bf:3d:c2:56:1d:
03:96:d8:fa:b1:63:08:69:65:1e:8e:7f:b9:0c:aa:f8:9c:e8:
95:93:29:02:40:d5:d8:c0:47:e1:04:5c:b4:d6:18:e0:92:02:
c2:40:7b:7d:8a:9d:7d:8f:21:a5:fb:c7:60:0b:74:87:1f:09:
e2:36:b8:57:c3:59:38:36:fb:11:1b:f4:80:f8:8f:96:d2:9a:
11:07:ea:ca:95:a1:4b:a6:f9:aa:16:32:be:41:00:f1:be:43:
1f:fd:f0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:51 2026 by rpki-client