Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
File: 399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft (raw, json)
Hash identifier: s8OCpEcDjokkl8vxFT4RVsRSyklGYUaPgkVFbN3hTf0=
Subject key identifier: EC:CA:B4:D3:EB:BE:8E:47:6D:2F:7F:E4:13:1C:88:01:75:10:40:D8
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 0C95274FD168089E2342BCE8D0826785A6E5DDD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
Manifest number: 032D
Signing time: Mon 19 Oct 2026 03:22:36 +0000
Manifest this update: Mon 19 Oct 2026 03:17:36 +0000
Manifest next update: Tue 20 Oct 2026 05:56:36 +0000
Files and hashes: 1: AS62082.roa (hash: vnZ3izMrtJ4JH7rfOWOu+uvsXZMZS2hAbU6Xy2ppuF8=)
2: AS273043.roa (hash: J5XmuJxWgaFve963e8mjbZSN9H6IDO/exl7LJq+RNyc=)
3: AS17561.roa (hash: ClO3emh1IQhHFXSXeabdAwt6K42XyQd36OneCUf9o0E=)
4: AS57043.roa (hash: IGqA+P4gyGQj+Ojgf3UYhxfhZx3ja/lPhrS9/OZoZrQ=)
5: AS16509.roa (hash: MRwRszsGZxZG5dzirSfGrKpqCDPDeATyo9dzK+lHBJ8=)
6: AS48729.roa (hash: 9kOZrIrZDmTB/NO4UExUIWDXxdofMxriEIqF2KMPp4g=)
7: 399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl (hash: eShrRmfLXN5vQ2/Jnthzi/gSO1zPYg29d7Isc5aCXdM=)
8: AS16276.roa (hash: ivnTqgV4WNfXbRjaixdV8Az1b9K3HAxScmTRPDntrA8=)
9: AS197842.roa (hash: kIRy3NMl7bs1KiRBnYrlW/JpSPsYhqLQWfrFiCKCODo=)
10: AS395954.roa (hash: qpJnOKlx2JsSV2pN1Y3JKvyzN3SP5RoWp2ky1F3Qg4E=)
11: AS219183.roa (hash: 4UrOLweT+qrf1NMg3fly9j1yLDdaczMTQLgIHVuO3gA=)
12: AS13335.roa (hash: YDslZ7oke18viDbx+Ygyopq6MWnYQD9W6tgXdPs8HXk=)
13: AS219020.roa (hash: n7NjCG+aZTB+2pYlfb6hhXC06dmEQ0K4C7QxI9pIzRo=)
14: AS218757.roa (hash: +oPJ4BCTREh5NYpXQhLqnbrUHjMt0jZYbNPOQ3NVfEY=)
15: AS200213.roa (hash: mt0oKV4vKyzTLnTVvTz1WTT70/R8SpHLCy/OBAgeu/8=)
16: AS14618.roa (hash: +ZCMcc09GOGvH+RPQywhAOM/4k0Qko/J6RijUH1Gf1A=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:95:27:4f:d1:68:08:9e:23:42:bc:e8:d0:82:67:85:a6:e5:dd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Oct 19 03:17:36 2026 GMT
Not After : Oct 20 05:56:36 2026 GMT
Subject: CN=ECCAB4D3EBBE8E476D2F7FE4131C8801751040D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:1d:4a:f3:95:b3:ff:12:c5:9e:46:3b:0e:
14:ff:e5:36:07:6f:13:6b:a4:47:00:d6:66:ac:53:
9d:8d:29:65:74:fa:3c:5c:c4:43:3b:3f:8e:68:19:
f5:17:83:c7:0d:bb:1a:45:4f:42:9e:6c:6e:cd:30:
ee:d8:a5:93:d3:e4:5a:0a:18:86:d9:da:3a:a8:9e:
ff:ff:14:3b:fb:63:76:5c:84:c7:a2:cd:30:20:f2:
68:97:44:b6:57:b4:f9:fb:1f:b7:05:1c:5d:2c:e3:
aa:f1:2d:4a:dd:c0:b8:82:a0:10:11:50:83:eb:f7:
38:6d:07:ed:c9:bb:3f:e3:eb:5e:49:91:22:24:92:
ce:6f:d4:9c:6e:11:6c:c3:b0:ab:a9:07:fb:9d:b0:
8a:fa:02:73:58:ee:ba:a6:f7:71:f0:57:df:d0:d5:
57:52:d3:17:76:93:02:a0:b2:9f:8c:fb:9e:45:43:
43:45:e0:8d:7a:8b:4c:41:46:0a:9f:a0:d5:2f:c5:
c3:8e:75:0f:ea:fd:4f:d4:df:68:97:00:40:e0:42:
16:e0:5d:84:a0:fe:b7:b8:4e:28:40:f2:2c:11:24:
77:96:0b:e3:35:ef:a0:fe:bd:a4:ab:20:d9:ab:e6:
58:2a:9d:9d:31:0d:e1:5f:b5:4d:f4:4e:12:73:0f:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CA:B4:D3:EB:BE:8E:47:6D:2F:7F:E4:13:1C:88:01:75:10:40:D8
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:50:d6:fd:f1:5f:d6:fe:d1:0e:8e:8d:fa:a1:2e:d7:3d:62:
e5:e2:b5:6f:c4:27:5d:29:0f:bd:60:23:3e:09:61:51:46:18:
ef:ce:4d:bb:9f:53:c0:e8:71:10:ce:e4:43:4f:88:ab:1a:97:
1f:08:82:85:a8:cb:af:d6:08:61:c4:2d:ac:08:7b:59:55:80:
1d:6e:09:02:33:09:bf:a1:2f:a8:2e:1d:57:88:1c:54:3b:12:
5d:65:b7:f7:40:e5:f2:42:6d:65:b3:05:c8:ab:c4:49:8f:f4:
49:d9:44:fc:f7:01:f6:98:aa:4c:7b:01:fe:65:fd:c9:35:87:
70:47:36:c7:8a:81:11:36:74:1e:aa:eb:00:54:15:83:08:f4:
00:53:66:cb:00:33:9a:33:c1:e8:c9:06:ce:f0:e0:f3:1c:2d:
a2:05:54:63:69:7d:a0:56:34:4a:bb:74:e0:4b:3b:4b:df:0d:
fe:55:3f:72:af:82:81:fb:2a:36:c6:48:fa:10:81:c5:fb:22:
61:0d:73:d3:36:75:7b:91:f6:11:29:51:bf:21:db:de:d7:5b:
af:da:e3:7d:cd:71:2d:43:01:29:37:cb:aa:ae:7c:22:d8:1b:
66:2c:29:bf:df:7b:ca:62:54:ab:1f:a5:57:bf:6a:7a:cc:50:
cc:52:5a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:34:50 2026 by rpki-client