Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
File: 399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft (raw, json)
Hash identifier: xEkvThuFy+7hw3bErJsY8Lo4ahU3sNlD/HNzb6rh/2Q=
Subject key identifier: D3:7A:71:BD:E9:85:9E:11:66:FE:AC:81:DF:92:93:F9:D9:AE:07:61
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 6E5DE35844CDF867DBC87AA0CE48EE5E53DFB145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
Manifest number: 02E0
Signing time: Mon 31 Aug 2026 10:52:37 +0000
Manifest this update: Mon 31 Aug 2026 10:47:37 +0000
Manifest next update: Tue 01 Sep 2026 11:30:37 +0000
Files and hashes: 1: AS273043.roa (hash: J5XmuJxWgaFve963e8mjbZSN9H6IDO/exl7LJq+RNyc=)
2: AS57043.roa (hash: IGqA+P4gyGQj+Ojgf3UYhxfhZx3ja/lPhrS9/OZoZrQ=)
3: AS16276.roa (hash: ivnTqgV4WNfXbRjaixdV8Az1b9K3HAxScmTRPDntrA8=)
4: 399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl (hash: 2ELUEbQ0Lx25oGozIHNqApwTnYNsHIvfMT7McghcQA8=)
5: AS209242.roa (hash: u5+4DfE46qXMJgOaB5ve7LU+UJlKJ1xNuLpOyCzKoQs=)
6: AS17561.roa (hash: KwMNTwRp+CA0zLNXy8cS4H4fMjOPW8bW7QLTgVQAG08=)
7: AS395954.roa (hash: qpJnOKlx2JsSV2pN1Y3JKvyzN3SP5RoWp2ky1F3Qg4E=)
8: AS48729.roa (hash: 9kOZrIrZDmTB/NO4UExUIWDXxdofMxriEIqF2KMPp4g=)
9: AS219020.roa (hash: n7NjCG+aZTB+2pYlfb6hhXC06dmEQ0K4C7QxI9pIzRo=)
10: AS197842.roa (hash: kIRy3NMl7bs1KiRBnYrlW/JpSPsYhqLQWfrFiCKCODo=)
11: AS219183.roa (hash: 7d9SZHgLY0dNG2XcNrsRNkqBmpff8/QPn96Sm60tkWs=)
12: AS13335.roa (hash: YDslZ7oke18viDbx+Ygyopq6MWnYQD9W6tgXdPs8HXk=)
13: AS200213.roa (hash: mt0oKV4vKyzTLnTVvTz1WTT70/R8SpHLCy/OBAgeu/8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 11:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:5d:e3:58:44:cd:f8:67:db:c8:7a:a0:ce:48:ee:5e:53:df:b1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Aug 31 10:47:37 2026 GMT
Not After : Sep 1 11:30:37 2026 GMT
Subject: CN=D37A71BDE9859E1166FEAC81DF9293F9D9AE0761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:3d:cf:ee:c6:e2:cd:24:cd:62:62:bf:86:
91:85:55:97:d8:cf:5c:b1:07:e9:36:c6:1a:cb:89:
df:08:99:6f:35:37:8c:b0:62:9b:b1:07:47:2e:72:
63:2f:2f:6d:bf:ed:42:96:db:27:2a:db:fd:a5:63:
55:74:20:d5:f3:d3:a5:51:96:ea:aa:08:6b:ae:78:
84:98:90:69:9a:a0:a4:33:ef:bc:09:1e:27:f1:11:
01:09:6b:da:8a:d5:27:31:99:c0:c6:a8:bc:7a:c6:
5c:b2:69:81:16:17:42:c8:7e:ad:d3:7d:1e:58:51:
d0:ab:fe:78:19:b9:cb:0e:53:70:55:44:25:61:9c:
21:30:a5:a7:20:52:98:37:f5:f1:cf:26:44:cc:29:
41:6f:33:c7:7c:1b:e6:5c:b2:c1:0d:0d:d0:65:fe:
1a:3e:c3:54:82:f0:1f:d3:e6:79:a6:bd:51:21:25:
f8:c8:3b:d0:56:bd:15:bc:c9:6a:5c:73:33:2e:59:
ef:f8:e3:84:fa:b5:28:b5:c0:0b:1e:d8:20:38:e8:
27:28:16:d2:c0:b8:40:d5:4b:7e:c7:00:0d:f5:ed:
f3:b1:c1:04:90:ba:5e:07:74:bf:4f:8d:60:14:2c:
3b:ca:10:da:bb:32:7c:57:92:67:78:58:e6:6d:71:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7A:71:BD:E9:85:9E:11:66:FE:AC:81:DF:92:93:F9:D9:AE:07:61
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3e:b9:99:2e:c7:d0:62:89:95:f7:c6:17:c7:50:91:49:63:
0a:d0:12:ea:b5:92:39:4e:eb:56:41:78:34:69:32:b1:da:64:
92:93:d3:65:aa:5a:7d:ec:e2:47:bd:54:f6:48:a6:d2:02:5f:
74:e5:6b:13:36:bd:c2:5a:6e:8d:1a:98:76:9b:42:08:d1:09:
ae:71:86:33:1a:84:d9:eb:28:dc:ce:c0:83:e2:72:54:38:9a:
8d:48:e7:48:9f:f2:bc:1d:4d:9d:bf:6f:78:d2:2e:4d:ff:1f:
e1:9b:ad:1a:fe:dc:2e:c6:c7:d4:80:7f:70:13:fa:93:d0:4a:
d8:88:30:4f:9f:64:07:9a:18:ba:a8:26:9f:06:da:ef:54:f2:
0d:c7:7a:cb:30:51:54:05:a4:9a:d0:74:e0:4f:17:2c:ec:ba:
51:e0:4d:92:d8:6f:ae:37:c4:db:a0:a9:b4:9e:e0:31:01:80:
21:b5:38:57:1c:39:7c:c9:13:73:eb:7f:2b:c7:83:ef:93:66:
2d:72:cf:c7:f8:d0:27:e8:84:fd:c6:f0:f3:37:e6:3b:b1:0e:
44:87:eb:1f:a6:c2:f4:89:dd:6f:97:19:8d:fc:b2:65:cb:06:
a9:87:bc:21:7d:46:de:31:d9:a7:1e:b9:f9:31:63:92:a9:87:
40:0d:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:07:31 2026 by rpki-client