Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.mft
File: 3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.mft (raw, json)
Hash identifier: D7m5bGbkM1JVjCPPRivHGV9r/rJTAFIu0kEUBZ8nW/o=
Subject key identifier: E1:43:F4:0D:FB:DF:35:F3:DD:02:DC:0F:B4:08:5A:BA:FC:99:98:63
Authority key identifier: 3B:D4:42:B9:D6:4F:EA:0E:55:58:7E:E1:CF:BE:67:ED:41:3C:87:50
Certificate issuer: /CN=3bd442b9d64fea0e55587ee1cfbe67ed413c8750
Certificate serial: 0A695E3223A0B43566B28DBE3F10CA868100D334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9RCudZP6g5VWH7hz75n7UE8h1A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.mft
Manifest number: 2A
Signing time: Tue 12 May 2026 06:09:09 +0000
Manifest this update: Tue 12 May 2026 06:04:09 +0000
Manifest next update: Wed 13 May 2026 09:18:09 +0000
Files and hashes: 1: AS199746.asa (hash: b+hH5Q4it4yLsnEfmVi18jipNmhscoV/a1E9nlNnSu0=)
2: AS204464.asa (hash: qjzhUzlM7ddTgdWjz3vsyJhe493aRAF64q9a6Azxnjs=)
3: 3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.crl (hash: BraqieLQabEsnugOoftGHyws2wcMWMJdCIY6pKJmnOA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.crl
rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9RCudZP6g5VWH7hz75n7UE8h1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 09:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:69:5e:32:23:a0:b4:35:66:b2:8d:be:3f:10:ca:86:81:00:d3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd442b9d64fea0e55587ee1cfbe67ed413c8750
Validity
Not Before: May 12 06:04:09 2026 GMT
Not After : May 13 09:18:09 2026 GMT
Subject: CN=E143F40DFBDF35F3DD02DC0FB4085ABAFC999863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:1a:01:c6:d9:84:16:7a:a6:89:fa:a6:0a:
80:89:9d:09:ad:ca:f6:39:93:fd:e3:b7:1a:60:63:
d0:2c:fb:75:88:eb:35:16:b3:8a:bf:cd:fe:e2:af:
4b:67:ea:29:d5:13:6e:79:5f:4a:aa:38:af:9f:e8:
d0:b7:3b:0b:1d:49:1d:de:80:45:ec:6c:bb:79:03:
b9:67:c0:19:38:ff:1f:81:a4:00:dc:74:28:81:47:
1a:a7:49:90:c6:ad:af:ca:0c:1b:7a:6b:47:09:70:
ed:74:13:fe:42:03:4b:ce:ad:4f:be:3f:f0:10:6d:
10:e4:e4:e8:71:6d:b1:d0:22:ac:20:b0:7d:64:3f:
b6:92:f5:83:23:b4:20:46:a2:92:14:a9:02:d5:40:
9e:bb:53:97:0d:15:1b:e0:e1:98:36:62:57:47:dc:
ab:ae:88:8d:0e:c6:78:d0:aa:80:06:60:5c:7c:af:
8a:f3:43:99:dc:89:a5:d8:34:95:e9:c3:67:3a:a4:
5f:dd:b5:34:a7:78:08:85:02:49:97:bc:ee:2e:9e:
41:4e:5a:9f:0d:db:c5:3c:05:96:e5:b9:64:bc:57:
b9:c3:b6:20:28:3c:41:de:ee:1c:31:89:e7:53:1a:
11:fe:19:39:1e:cc:15:67:c3:43:ae:02:62:7c:d9:
2c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:43:F4:0D:FB:DF:35:F3:DD:02:DC:0F:B4:08:5A:BA:FC:99:98:63
X509v3 Authority Key Identifier:
keyid:3B:D4:42:B9:D6:4F:EA:0E:55:58:7E:E1:CF:BE:67:ED:41:3C:87:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9RCudZP6g5VWH7hz75n7UE8h1A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4af4a62e-3ef5-4a36-b0d3-7825bec134ab/0/3BD442B9D64FEA0E55587EE1CFBE67ED413C8750.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:be:ea:df:d6:4d:36:e1:38:e9:cd:cb:ca:c2:d7:ef:03:a2:
dd:10:cf:29:f5:57:96:ff:54:bd:3b:01:48:89:1a:74:43:b4:
0f:f6:d4:5f:9f:95:fd:e0:35:79:b2:67:40:e1:96:e9:57:de:
8d:bb:8b:4a:c3:63:c4:92:db:87:18:70:ba:c6:31:00:b2:73:
ca:5f:d4:f5:2b:8d:e6:50:fe:5b:aa:a9:b9:ea:6d:35:8c:78:
5a:e0:aa:f8:41:29:3a:35:34:1e:23:14:8a:6f:ac:f0:0e:8e:
9b:e7:a9:e6:e7:e1:b6:01:10:38:22:de:d1:78:ea:a0:13:57:
a0:7a:bb:57:86:7d:39:f0:6b:7c:45:69:28:18:79:fe:58:c8:
f8:ca:a7:0d:5d:22:0a:bc:8d:8d:fd:47:ba:cc:0e:0e:12:f8:
98:5e:d1:94:a5:2a:40:67:3a:85:53:9f:ab:5a:07:a8:d1:48:
74:bf:9e:2c:5b:1a:33:fc:df:c3:35:41:6c:ea:a0:f4:af:66:
de:ef:ce:b5:f5:5b:ee:02:02:c0:3e:a4:2b:dc:a9:a6:63:82:
53:74:39:e6:30:3b:e9:ef:bf:bc:2c:6a:78:5c:68:f1:7c:f8:
f8:ef:b6:40:c3:47:0a:0d:f4:96:4a:ae:10:04:79:f9:d4:33:
17:66:73:4c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUCmleMiOgtDVmso2+PxDKhoEA0zQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2JkNDQyYjlkNjRmZWEwZTU1NTg3ZWUxY2ZiZTY3ZWQ0
MTNjODc1MDAeFw0yNjA1MTIwNjA0MDlaFw0yNjA1MTMwOTE4MDlaMDMxMTAvBgNV
BAMTKEUxNDNGNDBERkJERjM1RjNERDAyREMwRkI0MDg1QUJBRkM5OTk4NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXgxoBxtmEFnqmifqmCoCJnQmt
yvY5k/3jtxpgY9As+3WI6zUWs4q/zf7ir0tn6inVE255X0qqOK+f6NC3OwsdSR3e
gEXsbLt5A7lnwBk4/x+BpADcdCiBRxqnSZDGra/KDBt6a0cJcO10E/5CA0vOrU++
P/AQbRDk5OhxbbHQIqwgsH1kP7aS9YMjtCBGopIUqQLVQJ67U5cNFRvg4Zg2YldH
3KuuiI0OxnjQqoAGYFx8r4rzQ5nciaXYNJXpw2c6pF/dtTSneAiFAkmXvO4unkFO
Wp8N28U8BZbluWS8V7nDtiAoPEHe7hwxiedTGhH+GTkezBVnw0OuAmJ82SxbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU4UP0DfvfNfPdAtwPtAhauvyZmGMwHwYDVR0j
BBgwFoAUO9RCudZP6g5VWH7hz75n7UE8h1AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNGFmNGE2MmUtM2VmNS00YTM2LWIwZDMtNzgyNWJlYzEz
NGFiLzAvM0JENDQyQjlENjRGRUEwRTU1NTg3RUUxQ0ZCRTY3RUQ0MTNDODc1MC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL085UkN1ZFpQNmc1VldIN2h6NzVuN1VF
OGgxQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80YWY0YTYyZS0z
ZWY1LTRhMzYtYjBkMy03ODI1YmVjMTM0YWIvMC8zQkQ0NDJCOUQ2NEZFQTBFNTU1
ODdFRTFDRkJFNjdFRDQxM0M4NzUwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb7q39ZNNuE46c3LysLX
7wOi3RDPKfVXlv9UvTsBSIkadEO0D/bUX5+V/eA1ebJnQOGW6VfejbuLSsNjxJLb
hxhwusYxALJzyl/U9SuN5lD+W6qpueptNYx4WuCq+EEpOjU0HiMUim+s8A6Om+ep
5ufhtgEQOCLe0XjqoBNXoHq7V4Z9OfBrfEVpKBh5/ljI+MqnDV0iCryNjf1HuswO
DhL4mF7RlKUqQGc6hVOfq1oHqNFIdL+eLFsaM/zfwzVBbOqg9K9m3u/OtfVb7gIC
wD6kK9yppmOCU3Q55jA76e+/vCxqeFxo8Xz4+O+2QMNHCg30lkquEAR5+dQzF2Zz
TA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:38:48 2026 by rpki-client