Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
File: 391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft (raw, json)
Hash identifier: XadA5WhFF8TRyyklVkronU/ZCUv2rAT3+RoKsQCIeNc=
Subject key identifier: 30:EC:1B:C8:2E:8D:38:A9:E3:BF:AD:70:E0:BD:4D:3D:B5:31:1C:5C
Authority key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
Certificate issuer: /CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Certificate serial: 5FD33781A08FDFEE57AE4978582B0E4EEA1DE112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
Manifest number: 0151
Signing time: Sat 03 Oct 2026 03:09:16 +0000
Manifest this update: Sat 03 Oct 2026 03:04:16 +0000
Manifest next update: Sun 04 Oct 2026 05:30:16 +0000
Files and hashes: 1: 323030313a3637383a6139303a3a2f34382d3438203d3e20323135363835.roa (hash: f01olELinbK/WN+AKKfNEa3BaJPmtAdvY7LAPWQjTbg=)
2: AS215685.asa (hash: z1HCJ+MBW90uZtQ7YI5miQ+upFnnhUIH5k5MjU6qxec=)
3: 391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl (hash: JzK7erTCDonX2uMVWbDC85QPx6pb9cYglikSa9Axu7E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:d3:37:81:a0:8f:df:ee:57:ae:49:78:58:2b:0e:4e:ea:1d:e1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Validity
Not Before: Oct 3 03:04:16 2026 GMT
Not After : Oct 4 05:30:16 2026 GMT
Subject: CN=30EC1BC82E8D38A9E3BFAD70E0BD4D3DB5311C5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:0b:65:0b:fc:db:ae:4b:03:6e:15:32:1c:
ba:3f:f9:08:02:0b:6b:50:86:37:69:b8:9c:51:e9:
5b:fc:8c:ce:ec:39:a6:70:bd:c5:4d:1c:27:9a:2c:
26:21:78:0d:77:d1:92:a7:70:ba:c1:9b:ae:7d:3a:
87:a9:dc:62:8d:ae:9f:31:1c:57:62:78:fe:47:9b:
52:31:1f:13:32:65:24:05:29:61:63:bd:1f:5f:07:
02:a5:fc:62:56:b6:76:c1:c9:9d:d0:80:6b:ae:b2:
e7:a0:35:19:49:de:c1:04:36:f9:b3:56:d9:ee:8a:
cb:46:67:91:8b:71:8e:41:9a:72:c2:8a:fa:75:10:
97:4a:b3:5d:0e:6d:05:a4:03:33:56:86:eb:d4:22:
91:43:38:d5:3d:7f:1c:84:41:0c:e6:58:19:d9:76:
15:1f:9b:b7:90:03:43:ea:5e:71:0c:24:1d:39:42:
70:18:fe:d8:c4:24:25:b4:69:c2:0b:f9:c5:7d:73:
6b:6c:5b:a9:67:fa:2f:91:64:7c:dc:80:23:9d:15:
66:ed:bb:82:59:84:d2:27:68:e8:55:52:d4:db:89:
aa:73:8e:8e:38:0f:9c:8b:64:99:23:85:af:15:f9:
71:ff:72:71:6d:40:7e:9f:36:51:09:0e:6b:2d:c2:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:1B:C8:2E:8D:38:A9:E3:BF:AD:70:E0:BD:4D:3D:B5:31:1C:5C
X509v3 Authority Key Identifier:
keyid:39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2a:5c:b0:5f:96:a3:96:1a:4d:f0:a6:8e:e4:27:c4:61:41:
40:1f:4c:06:87:d3:4d:de:8a:02:06:49:87:c0:b6:b4:12:fe:
70:96:66:60:b7:b6:6b:52:15:82:d9:31:1b:38:d3:70:48:9a:
21:de:af:2d:e4:e2:c6:24:9f:7c:38:df:a4:85:41:c3:b5:41:
13:95:ff:57:c4:a9:0d:f2:25:ed:9c:fe:23:a7:a6:f1:6e:37:
bc:6b:8f:67:b0:32:22:78:e9:df:57:65:9c:0f:68:c8:8a:d5:
cc:ee:23:a9:61:8c:ac:17:ad:5f:e1:3c:af:a8:90:79:a6:13:
2b:73:02:88:43:d3:fd:e6:0f:ad:4c:09:1e:22:9d:0c:d6:12:
81:75:7c:b0:9f:d9:4a:b3:1f:0e:31:93:41:37:05:6b:7c:7a:
29:48:b7:ea:b5:2c:3d:90:3e:b3:7e:01:2c:c8:3c:5c:2b:6b:
1f:bd:ff:f9:5d:7d:e3:c7:6f:0b:80:18:73:b1:4a:b9:0f:43:
97:f8:5c:f7:3d:ca:9a:6b:92:48:d7:13:b6:08:58:af:e9:0e:
05:55:fa:14:46:43:36:36:6d:de:eb:5e:6c:90:5e:bb:db:d3:
f4:60:7e:c0:55:c3:72:e5:c4:08:aa:ca:2b:0c:bb:c3:16:89:
0a:03:cf:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:26 2026 by rpki-client