
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
File: 439CED080CC8B076E557B02CC83D8768D27D56A4.mft (raw, json)
Hash identifier: 6PPgtqwsT5m2T6+m4xUrGrtCc/NTQTZy7QVnGIx26DM=
Subject key identifier: 9B:74:18:43:3B:A8:02:B6:95:E7:0C:D8:D1:07:63:1B:92:B6:A6:8C
Authority key identifier: 43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
Certificate issuer: /CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Certificate serial: 3B5B49AD62D4FB8804E90A8DF168E04870B95C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
Manifest number: F3
Signing time: Fri 18 Sep 2026 07:03:09 +0000
Manifest this update: Fri 18 Sep 2026 06:58:09 +0000
Manifest next update: Sat 19 Sep 2026 09:54:09 +0000
Files and hashes: 1: 439CED080CC8B076E557B02CC83D8768D27D56A4.crl (hash: lcpHEbvoD7xzBg6jKHqq9BeqadyBC69BY1C1S+fDots=)
2: AS216455.asa (hash: 3Hj6soP0mHi9tW3tH3/uigxupFi1xIZySq2M9PB9CK0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 09:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:5b:49:ad:62:d4:fb:88:04:e9:0a:8d:f1:68:e0:48:70:b9:5c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Validity
Not Before: Sep 18 06:58:09 2026 GMT
Not After : Sep 19 09:54:09 2026 GMT
Subject: CN=9B7418433BA802B695E70CD8D107631B92B6A68C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:74:42:70:b5:46:38:fb:9a:3f:a7:18:c2:
90:5a:4c:c8:76:cf:21:dd:fe:03:b7:eb:12:37:08:
49:96:64:7f:fe:a1:c2:b5:23:4d:d5:27:e3:5f:2e:
33:8c:dc:d4:fe:16:f1:20:6b:e4:70:ba:ab:3a:a2:
eb:13:e1:69:ad:b3:aa:9b:ac:4a:42:ee:4d:76:6d:
9e:2f:30:76:c7:e3:0c:a7:25:79:51:65:86:19:3e:
a6:17:25:12:26:ac:92:7f:42:40:31:d3:d7:d6:bc:
b6:d6:68:52:9b:e5:44:55:cd:11:42:58:0b:5e:60:
dc:4f:eb:b7:e7:30:b6:12:2b:06:35:0f:ab:ea:ae:
7e:02:67:fa:a1:c4:7a:52:ce:34:fa:f7:e3:15:d7:
82:4a:27:7f:47:6d:15:7c:ce:d0:1e:39:16:97:f6:
30:e6:87:14:e1:bf:a7:ec:17:02:1c:c6:7c:10:48:
15:35:73:b0:36:7e:aa:6a:02:85:15:77:d1:db:31:
db:fc:5c:28:d9:ff:ec:4f:f9:05:33:69:f6:33:20:
fd:43:96:3c:40:1b:7a:77:d4:f4:e1:1c:26:ad:b5:
a6:e5:98:ca:53:02:3c:89:5c:ac:2c:64:98:a4:92:
44:5e:b7:55:d7:62:7a:4d:f2:0c:d8:96:f6:09:2e:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:74:18:43:3B:A8:02:B6:95:E7:0C:D8:D1:07:63:1B:92:B6:A6:8C
X509v3 Authority Key Identifier:
keyid:43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:34:d2:56:9e:27:09:e9:6d:8c:d4:83:26:1d:1f:f0:7c:00:
4a:18:6b:3d:4d:7e:4b:eb:86:36:b0:01:62:3c:08:43:b3:40:
b5:70:f3:17:bc:22:9b:01:25:4e:ae:83:89:16:8f:f4:5d:65:
39:cb:fc:6c:31:88:f1:9a:67:c9:ff:c6:c0:12:05:3b:60:20:
f5:82:a6:89:6a:53:e9:d6:f3:b6:50:62:40:be:6a:7f:53:ac:
11:64:36:50:f7:d3:b3:bf:4b:2f:94:9b:82:21:b6:b0:1d:1e:
f3:2e:ea:21:9b:e7:7d:b9:28:3e:02:dc:50:29:d6:ef:e5:dc:
d1:45:e9:a1:71:af:d4:77:49:6f:c3:5e:3d:05:24:ea:05:c5:
4f:45:2b:1e:87:7d:c3:e5:a2:7f:7f:fb:8a:9c:6f:ea:14:42:
e7:d9:80:74:88:92:74:7e:d7:b7:8c:83:6f:0f:9b:cd:71:7e:
b6:f5:f0:17:33:96:4d:46:96:20:ac:9e:60:1b:53:cd:e0:a5:
05:aa:d2:d5:41:8f:4f:ed:1f:bd:ac:67:a2:6d:42:c2:c8:2f:
d6:9d:9d:90:43:d3:6d:b6:3b:f8:fb:9f:24:96:1c:49:3f:b3:
82:b9:96:1f:e9:0a:f7:4d:79:27:c1:61:60:95:7b:3b:c7:6a:
6c:3e:0a:ff
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUO1tJrWLU+4gE6QqN8WjgSHC5XF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM5Y2VkMDgwY2M4YjA3NmU1NTdiMDJjYzgzZDg3Njhk
MjdkNTZhNDAeFw0yNjA5MTgwNjU4MDlaFw0yNjA5MTkwOTU0MDlaMDMxMTAvBgNV
BAMTKDlCNzQxODQzM0JBODAyQjY5NUU3MENEOEQxMDc2MzFCOTJCNkE2OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTcXRCcLVGOPuaP6cYwpBaTMh2
zyHd/gO36xI3CEmWZH/+ocK1I03VJ+NfLjOM3NT+FvEga+Rwuqs6ousT4Wmts6qb
rEpC7k12bZ4vMHbH4wynJXlRZYYZPqYXJRImrJJ/QkAx09fWvLbWaFKb5URVzRFC
WAteYNxP67fnMLYSKwY1D6vqrn4CZ/qhxHpSzjT69+MV14JKJ39HbRV8ztAeORaX
9jDmhxThv6fsFwIcxnwQSBU1c7A2fqpqAoUVd9HbMdv8XCjZ/+xP+QUzafYzIP1D
ljxAG3p31PThHCattablmMpTAjyJXKwsZJikkkRet1XXYnpN8gzYlvYJLni9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUm3QYQzuoAraV5wzY0QdjG5K2powwHwYDVR0j
BBgwFoAUQ5ztCAzIsHblV7AsyD2HaNJ9VqQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1
NjRhLzQvNDM5Q0VEMDgwQ0M4QjA3NkU1NTdCMDJDQzgzRDg3NjhEMjdENTZBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1E1enRDQXpJc0hibFY3QXN5RDJIYU5K
OVZxUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81ODIxYzQ3ZS1l
ODE1LTQyZGUtYmQ2Yi0xOWEyZTFhZTU2NGEvNC80MzlDRUQwODBDQzhCMDc2RTU1
N0IwMkNDODNEODc2OEQyN0Q1NkE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTTSVp4nCeltjNSDJh0f
8HwAShhrPU1+S+uGNrABYjwIQ7NAtXDzF7wimwElTq6DiRaP9F1lOcv8bDGI8Zpn
yf/GwBIFO2Ag9YKmiWpT6dbztlBiQL5qf1OsEWQ2UPfTs79LL5SbgiG2sB0e8y7q
IZvnfbkoPgLcUCnW7+Xc0UXpoXGv1HdJb8NePQUk6gXFT0UrHod9w+Wif3/7ipxv
6hRC59mAdIiSdH7Xt4yDbw+bzXF+tvXwFzOWTUaWIKyeYBtTzeClBarS1UGPT+0f
vaxnom1Cwsgv1p2dkEPTbbY7+PufJJYcST+zgrmWH+kK9015J8FhYJV7O8dqbD4K
/w==
-----END CERTIFICATE-----
Generated at Fri Sep 18 19:39:49 2026 by rpki-client