
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
File: 439CED080CC8B076E557B02CC83D8768D27D56A4.mft (raw, json)
Hash identifier: lCO59mzko9kAtgzmD3jRI6J68XXR2AdhJG6PSmP8Mbg=
Subject key identifier: 7C:CA:9C:D7:A6:CE:26:57:6F:91:63:CF:9C:F9:BD:C8:FF:E5:CA:49
Authority key identifier: 43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
Certificate issuer: /CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Certificate serial: 69893EDC46D018C5138DBDD5A3A24F9F75142FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
Manifest number: FC
Signing time: Fri 25 Sep 2026 06:58:13 +0000
Manifest this update: Fri 25 Sep 2026 06:53:13 +0000
Manifest next update: Sat 26 Sep 2026 09:32:13 +0000
Files and hashes: 1: AS216455.asa (hash: 3Hj6soP0mHi9tW3tH3/uigxupFi1xIZySq2M9PB9CK0=)
2: 439CED080CC8B076E557B02CC83D8768D27D56A4.crl (hash: e/klea7DrKjtkY/LJ91Qf65qJ6uZFuyNwiQcPYYuGJs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 09:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:89:3e:dc:46:d0:18:c5:13:8d:bd:d5:a3:a2:4f:9f:75:14:2f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Validity
Not Before: Sep 25 06:53:13 2026 GMT
Not After : Sep 26 09:32:13 2026 GMT
Subject: CN=7CCA9CD7A6CE26576F9163CF9CF9BDC8FFE5CA49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:ee:fd:23:53:27:c7:58:3c:c3:0c:54:90:
79:53:70:35:1d:75:e3:8a:ec:c0:7a:8e:cb:ef:94:
ef:95:ba:48:1b:a9:c3:0c:01:16:ac:49:a4:11:7c:
dc:55:72:d7:20:fe:ac:d4:c7:08:df:3a:48:33:a5:
0e:30:11:1f:c3:ef:06:ac:ca:4e:22:78:a5:10:a5:
79:2f:2d:0f:e6:bd:b6:a6:fb:45:d5:fc:8f:d8:88:
99:c9:a3:44:db:c0:5a:d7:ae:a6:37:14:fd:fb:78:
e6:42:58:6d:c1:e6:68:b2:cd:d4:00:e1:ef:ed:c8:
24:fd:b9:c8:95:99:ab:b9:ee:f8:a6:50:82:7f:3c:
5a:9c:e2:0a:31:92:0c:c6:c7:d7:63:db:da:62:98:
e5:01:73:c0:48:a8:51:3a:be:4c:d0:28:28:e3:4f:
d9:2e:85:55:eb:4c:19:df:b0:35:9b:c4:15:04:52:
82:24:5e:43:0d:ff:3b:c5:11:ce:57:fb:4d:6a:35:
48:03:2c:8e:78:0a:f1:24:5e:72:6e:69:c2:34:8e:
07:ad:4c:fa:70:ee:94:f4:c4:39:0e:46:92:04:84:
c2:d2:f5:71:72:3a:7d:18:48:23:77:e0:87:45:dc:
b3:74:5a:7a:f3:4d:94:00:da:41:8f:3e:db:2b:ef:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CA:9C:D7:A6:CE:26:57:6F:91:63:CF:9C:F9:BD:C8:FF:E5:CA:49
X509v3 Authority Key Identifier:
keyid:43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ad:d3:7c:ec:34:1f:f5:5c:78:be:4f:c3:53:46:f4:be:36:
f2:08:5b:ed:5d:d9:5a:81:bc:a5:b8:d9:86:b2:78:d8:27:82:
7b:88:f4:b5:6b:1d:99:4e:d9:a8:dd:b3:9f:8a:94:a5:d0:a1:
1c:03:52:64:84:7c:3d:62:2b:77:9f:5e:91:b2:84:a2:d1:28:
b0:d2:06:2b:cc:38:cc:ab:71:45:02:27:1e:be:0b:09:a4:f7:
a0:bf:2a:75:b6:7a:7f:93:71:49:70:3e:1a:2f:3e:9f:37:5a:
18:cd:2c:a8:52:31:c6:06:eb:cb:e0:4d:2e:f3:37:c9:da:4b:
6e:2e:08:49:38:e6:1f:3f:4f:e7:5c:31:7c:83:e8:e8:07:a2:
5f:10:fd:0c:ba:fc:9d:c7:73:3e:b6:5c:19:87:83:57:12:e1:
1a:2e:78:06:35:92:9f:2e:d8:3f:b4:5e:b7:13:95:0c:fe:be:
a4:39:d7:ee:46:39:37:f7:6b:3f:ff:e1:22:27:f4:d4:8c:8a:
68:9a:35:4d:ad:fc:1b:21:07:90:8a:a5:a7:49:3f:81:9d:75:
fd:a7:39:2d:3c:46:6a:47:53:3a:b4:02:de:3a:78:63:24:43:
81:9b:b2:1f:2e:92:a5:5f:81:fb:97:e8:7e:cf:86:78:f4:08:
38:74:c5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:09:51 2026 by rpki-client