
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
File: 391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft (raw, json)
Hash identifier: c2ATn7THzwvF3iEPzntzQj1PUYLXAVb2IG7yXgnmV7Y=
Subject key identifier: 52:EF:97:54:1D:92:BC:91:34:2D:50:5F:E5:C2:65:00:9F:BF:44:AF
Authority key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
Certificate issuer: /CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Certificate serial: 3054B3274EA51C1ED9B9B7EE08A553FBA20986E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
Manifest number: 4E
Signing time: Fri 27 Mar 2026 20:30:06 +0000
Manifest this update: Fri 27 Mar 2026 20:25:06 +0000
Manifest next update: Sat 28 Mar 2026 22:18:06 +0000
Files and hashes: 1: 323030313a3637383a6139303a3a2f34382d3438203d3e20323135363835.roa (hash: f01olELinbK/WN+AKKfNEa3BaJPmtAdvY7LAPWQjTbg=)
2: 391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl (hash: dKnFwXqVgSavUf0gSvxPihpeM4GYWmQsbq4CDW4wdFQ=)
3: AS215685.asa (hash: YaDrA70r3c8UdJ/OHOv/yu3bJSTpuCNZQcfu9TFCX6c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 22:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:54:b3:27:4e:a5:1c:1e:d9:b9:b7:ee:08:a5:53:fb:a2:09:86:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Validity
Not Before: Mar 27 20:25:06 2026 GMT
Not After : Mar 28 22:18:06 2026 GMT
Subject: CN=52EF97541D92BC91342D505FE5C265009FBF44AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:95:c0:c1:f6:7a:85:ad:8c:76:7a:1c:06:
55:89:3c:15:e0:80:e9:af:a3:bf:71:01:bd:e5:19:
fb:f6:31:be:ae:27:53:16:66:b1:96:25:fd:28:12:
a5:c1:e5:1e:ac:f9:1c:d7:48:5c:6f:97:5d:0a:30:
18:40:57:b9:bb:1e:13:78:47:38:1a:3d:10:50:aa:
5a:2d:56:f2:0e:db:98:0b:92:53:fe:72:13:0e:b0:
98:34:82:99:94:f5:3a:9a:b9:56:d8:45:b9:54:09:
6a:28:18:31:36:d6:31:78:15:f9:10:9d:e6:af:6c:
ad:2e:14:fc:21:2a:b4:dd:a5:45:15:30:f4:b3:93:
17:14:c3:5f:b3:94:17:a8:96:62:23:93:15:92:46:
67:b8:d8:fc:26:b4:a9:d9:6d:9f:4d:c4:68:0d:6a:
cb:92:fa:be:1d:04:f1:18:01:fd:7b:88:99:41:7c:
f8:5e:38:60:19:6a:1e:f1:2f:b1:50:97:ce:a6:b5:
1d:5c:50:d4:fa:e2:5c:f2:2c:36:f4:9d:c9:6d:1e:
e5:77:1a:b8:7f:80:39:e6:95:a0:1f:ea:3b:66:e1:
1f:16:14:48:2e:6d:3e:ca:8d:ee:57:96:25:92:18:
d1:eb:13:59:58:c8:5f:be:e5:98:ca:8e:ef:b3:f3:
c0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EF:97:54:1D:92:BC:91:34:2D:50:5F:E5:C2:65:00:9F:BF:44:AF
X509v3 Authority Key Identifier:
keyid:39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:6a:13:2e:2c:fd:0c:39:5f:aa:e8:36:79:6f:44:65:8c:
c1:a6:8a:d5:51:7b:06:52:1f:79:29:06:6a:a5:3c:96:61:d7:
69:92:90:5b:73:fc:0e:2c:bb:27:7c:7b:0a:cc:0a:17:db:05:
2a:41:a7:bc:6c:5b:7d:58:e1:c0:60:76:b0:7b:9c:e4:9f:07:
2d:dd:59:d3:20:84:96:1d:8e:b9:a4:76:85:79:c5:21:bb:12:
25:de:7a:79:e6:23:f0:eb:a0:9d:d3:e3:30:51:f4:92:2c:83:
b0:c7:e4:8a:81:42:72:2f:f3:5f:19:d9:6c:fc:22:3a:bb:61:
4b:91:48:e0:cf:88:cd:59:56:3e:9c:40:2d:af:74:45:af:e4:
09:89:b8:07:60:fa:63:5e:d7:64:b1:2a:c8:e7:04:e8:44:12:
66:2a:68:57:c2:eb:f1:73:0b:f2:b0:91:65:38:0d:0e:e8:6b:
bb:bb:36:16:4e:49:2b:24:e7:6b:1e:05:72:6b:bb:84:ce:33:
7f:39:b7:af:ff:ed:ac:af:27:f1:0f:d6:26:e2:1c:16:18:33:
11:14:3a:66:47:8b:5d:8c:89:9c:c7:c9:78:a0:99:05:ec:72:
e0:b8:3b:0a:76:07:18:74:67:30:8e:7d:fc:20:28:9e:70:78:
f2:b6:1c:78
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUMFSzJ06lHB7ZubfuCKVT+6IJhuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkxZjIwZjI2YWE2ZDYzNTk4ZmYzMDI1Y2RkYmRiNGI5
YzlhYjY3ZDAeFw0yNjAzMjcyMDI1MDZaFw0yNjAzMjgyMjE4MDZaMDMxMTAvBgNV
BAMTKDUyRUY5NzU0MUQ5MkJDOTEzNDJENTA1RkU1QzI2NTAwOUZCRjQ0QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDea5XAwfZ6ha2MdnocBlWJPBXg
gOmvo79xAb3lGfv2Mb6uJ1MWZrGWJf0oEqXB5R6s+RzXSFxvl10KMBhAV7m7HhN4
RzgaPRBQqlotVvIO25gLklP+chMOsJg0gpmU9TqauVbYRblUCWooGDE21jF4FfkQ
neavbK0uFPwhKrTdpUUVMPSzkxcUw1+zlBeolmIjkxWSRme42PwmtKnZbZ9NxGgN
asuS+r4dBPEYAf17iJlBfPheOGAZah7xL7FQl86mtR1cUNT64lzyLDb0ncltHuV3
Grh/gDnmlaAf6jtm4R8WFEgubT7Kje5XliWSGNHrE1lYyF++5ZjKju+z88CxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUUu+XVB2SvJE0LVBf5cJlAJ+/RK8wHwYDVR0j
BBgwFoAUOR8g8mqm1jWY/zAlzdvbS5yatn0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh
MzIwLzAvMzkxRjIwRjI2QUE2RDYzNTk4RkYzMDI1Q0REQkRCNEI5QzlBQjY3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09SOGc4bXFtMWpXWV96QWx6ZHZiUzV5
YXRuMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZTdmNzQ3ZS1m
ZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMC8zOTFGMjBGMjZBQTZENjM1OThG
RjMwMjVDRERCREI0QjlDOUFCNjdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6FqEy4s/Qw5X6roNnlv
RGWMwaaK1VF7BlIfeSkGaqU8lmHXaZKQW3P8Diy7J3x7CswKF9sFKkGnvGxbfVjh
wGB2sHuc5J8HLd1Z0yCElh2OuaR2hXnFIbsSJd56eeYj8OugndPjMFH0kiyDsMfk
ioFCci/zXxnZbPwiOrthS5FI4M+IzVlWPpxALa90Ra/kCYm4B2D6Y17XZLEqyOcE
6EQSZipoV8Lr8XML8rCRZTgNDuhru7s2Fk5JKyTnax4Fcmu7hM4zfzm3r//trK8n
8Q/WJuIcFhgzERQ6ZkeLXYyJnMfJeKCZBexy4Lg7CnYHGHRnMI59/CAonnB48rYc
eA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:49:31 2026 by rpki-client