Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
File: 439CED080CC8B076E557B02CC83D8768D27D56A4.mft (raw, json)
Hash identifier: mGrP7LYif7C33APonrdEPYKxgY14fasWjvWYM3Q37w4=
Subject key identifier: 31:8E:BE:84:A3:9F:30:A6:A9:52:88:43:2F:86:E4:AF:29:07:04:58
Authority key identifier: 43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
Certificate issuer: /CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Certificate serial: 3D8B7D48DE42582042BBFAA173A407EF2AD639CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
Manifest number: 0132
Signing time: Thu 05 Nov 2026 01:34:10 +0000
Manifest this update: Thu 05 Nov 2026 01:29:10 +0000
Manifest next update: Fri 06 Nov 2026 02:40:10 +0000
Files and hashes: 1: AS216455.asa (hash: 3Hj6soP0mHi9tW3tH3/uigxupFi1xIZySq2M9PB9CK0=)
2: 439CED080CC8B076E557B02CC83D8768D27D56A4.crl (hash: nYcd1MzxbVYWvx1izOAhvJW1ekSWeX1yUmn1DjMihZs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8b:7d:48:de:42:58:20:42:bb:fa:a1:73:a4:07:ef:2a:d6:39:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Validity
Not Before: Nov 5 01:29:10 2026 GMT
Not After : Nov 6 02:40:10 2026 GMT
Subject: CN=318EBE84A39F30A6A95288432F86E4AF29070458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:58:3c:11:5c:93:db:53:9d:03:d3:9f:6a:
ba:62:cf:35:dd:f2:38:ac:88:5f:55:4f:ce:36:64:
de:97:35:3f:19:bc:5f:07:29:41:7e:6c:bb:e4:35:
5b:21:45:54:00:10:9d:48:e5:d3:e0:fd:9c:71:4d:
86:ff:1b:97:bc:d6:18:f1:41:e4:2f:aa:11:9a:77:
da:45:39:a0:17:f1:a5:1e:7f:c2:9c:ed:c4:4b:b9:
58:b2:cc:bd:a9:56:39:1b:40:c2:16:9f:63:ce:9a:
7b:b8:a6:c8:6a:26:b2:9e:ae:e3:94:83:2e:f3:25:
b9:72:30:b5:2b:54:61:51:29:7d:88:83:87:92:64:
9b:8a:9f:98:10:f0:b4:ad:a7:3e:0a:cc:66:37:3c:
ba:fa:ad:ff:37:b8:0c:47:0e:d1:70:5e:c5:34:ed:
67:a5:b3:d7:bd:0c:52:fa:4a:3d:2c:e4:fb:05:47:
05:1b:2e:3f:ed:3e:12:e8:33:2d:f2:73:40:b1:24:
3b:56:c8:1c:a7:80:b8:77:ae:64:f7:fa:af:38:66:
72:c5:5b:1f:1f:cf:60:46:25:9f:e9:5e:b8:4d:e6:
12:75:b9:da:06:d4:8a:e5:11:4d:2d:c3:43:e0:9f:
50:5c:b4:29:63:58:a5:b0:f5:4c:e4:99:6e:88:72:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8E:BE:84:A3:9F:30:A6:A9:52:88:43:2F:86:E4:AF:29:07:04:58
X509v3 Authority Key Identifier:
keyid:43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e6:15:57:35:93:fc:58:07:db:f7:50:88:b9:18:13:d2:6a:
40:15:2d:87:70:f5:eb:63:c4:80:7e:6f:77:bc:b5:a3:25:e5:
3e:28:19:52:95:09:b6:bf:95:f4:a8:07:84:95:68:a9:1c:76:
ec:50:96:ff:6f:b9:17:15:97:9a:f3:52:7a:8b:a5:d4:5a:b2:
da:3b:bc:49:35:12:02:d3:dd:f5:52:a1:e7:38:fe:1f:5b:b2:
88:68:55:c2:d6:44:e0:c8:36:12:31:84:c7:f3:05:f9:48:9d:
d5:60:e9:3e:45:93:36:81:44:50:97:88:e6:36:6f:f0:88:07:
22:20:ca:88:99:25:89:4b:93:5f:d2:98:f0:a7:f4:e2:8c:e8:
0f:9f:3e:ee:78:c6:7b:8c:26:63:a2:3d:1d:1b:2b:b6:34:26:
90:09:39:ba:db:1f:ea:31:30:a2:27:01:1c:2f:14:c3:b5:1e:
4f:66:4d:7d:de:12:71:71:13:0f:66:ad:09:90:02:4d:bd:16:
f0:eb:69:a7:a2:b9:cc:aa:9a:c6:18:66:1e:72:85:02:a8:d2:
f5:d1:3f:ae:85:ad:9e:43:1a:61:f8:f9:0a:16:50:7f:94:16:
3f:3c:c6:3f:40:0b:08:85:09:5e:56:58:f9:03:60:a8:e6:e2:
3a:c2:f4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:16:34 2026 by rpki-client