Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
File: 439CED080CC8B076E557B02CC83D8768D27D56A4.mft (raw, json)
Hash identifier: BM3ENkGZoH6CENhIhX1crop5VYhnW7aLc3DRkXCMRu8=
Subject key identifier: 31:18:CA:95:B3:58:AF:7D:73:7B:A2:81:E8:F7:EB:84:46:8D:C5:A9
Authority key identifier: 43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
Certificate issuer: /CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Certificate serial: 3BBB732D978521B501E267DA9770C5CF5255BC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
Manifest number: 08
Signing time: Wed 25 Mar 2026 09:51:57 +0000
Manifest this update: Wed 25 Mar 2026 09:46:57 +0000
Manifest next update: Thu 26 Mar 2026 11:23:57 +0000
Files and hashes: 1: 439CED080CC8B076E557B02CC83D8768D27D56A4.crl (hash: cHUeVAdZqB60yETQ82iLWgD0Bw5xrxTZtTF0WId+2Ig=)
2: AS216455.asa (hash: 3Hj6soP0mHi9tW3tH3/uigxupFi1xIZySq2M9PB9CK0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:bb:73:2d:97:85:21:b5:01:e2:67:da:97:70:c5:cf:52:55:bc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Validity
Not Before: Mar 25 09:46:57 2026 GMT
Not After : Mar 26 11:23:57 2026 GMT
Subject: CN=3118CA95B358AF7D737BA281E8F7EB84468DC5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:64:a1:28:ea:54:ff:ae:5e:ae:65:2f:93:
74:08:36:bd:23:dc:e0:73:7c:18:d2:15:6f:b2:0d:
b8:16:4b:95:b3:75:cd:2f:12:cd:6e:97:63:8f:62:
04:15:ab:db:f3:fd:7d:54:1a:f8:36:b4:69:9f:35:
68:c9:39:eb:1d:de:72:4a:36:b1:3e:6c:81:03:7a:
39:bf:9b:a8:76:27:b8:ec:b4:d4:c2:af:08:9e:a0:
ad:1a:cd:58:00:5b:4a:f5:ee:ad:43:45:fe:5d:bb:
50:ba:30:e6:ea:cd:7d:a4:88:4f:1f:b8:b8:7c:92:
2b:8a:d0:35:16:f1:fe:3b:0e:af:02:b1:ce:b9:8e:
ab:ec:14:e3:ba:1b:94:7e:70:0b:9e:6f:3f:19:f3:
e3:83:ff:d4:5a:a2:93:f1:4b:92:48:04:e7:73:04:
10:c0:c3:bb:bd:72:0b:9d:3f:cb:e2:c4:1f:16:fb:
da:84:2a:2d:8d:12:b4:89:3d:92:90:e7:b7:68:86:
68:08:8b:cc:bd:e7:7c:be:94:b3:0f:c7:c1:24:6c:
4d:fa:3c:56:1c:b0:5f:57:e5:8e:28:5c:bc:77:b6:
61:e2:60:bd:e4:f9:b8:8a:c1:32:7c:3f:d9:5e:b4:
ed:34:22:22:e2:97:a4:54:97:eb:3c:90:b6:01:12:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:CA:95:B3:58:AF:7D:73:7B:A2:81:E8:F7:EB:84:46:8D:C5:A9
X509v3 Authority Key Identifier:
keyid:43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fc:87:1f:20:7e:d1:8c:1b:ff:2f:4b:38:6d:1c:df:41:e2:
84:b8:5c:7d:1d:81:12:51:fd:34:d1:0e:a0:cc:1a:dc:16:7c:
8a:79:95:ca:46:94:6e:a3:49:d0:11:86:c5:0d:da:19:c2:9c:
6d:6f:e9:fb:10:b0:d9:14:cb:a5:79:91:fb:5e:cf:bf:a5:f0:
c6:0b:b3:1d:81:8b:dc:af:b8:45:74:ad:71:ef:a6:e7:7a:b9:
cf:73:e0:66:b2:40:63:96:d3:d7:79:7e:c7:5a:fd:52:40:6f:
03:9b:9c:96:4f:95:c9:1d:f8:2a:54:7a:f4:33:b6:79:ac:7c:
d3:f1:07:d6:c6:32:ba:a6:a0:1d:ea:ca:85:53:b5:be:fd:5c:
cd:71:5c:2c:a5:77:2b:d2:3c:55:e5:92:71:f0:29:75:24:94:
a2:a5:e7:bf:17:26:bb:f2:be:85:99:ef:3e:68:28:9d:d1:cb:
95:33:74:21:41:42:4a:b5:b2:44:0d:eb:e9:1b:0d:87:b0:3f:
a8:9d:ba:4c:6b:9f:bd:6c:6c:f2:2b:f6:26:2e:60:60:02:e6:
0c:51:3c:d9:89:51:9d:34:65:80:18:81:ac:48:93:46:3f:33:
9a:dc:e4:ba:a9:29:f5:b0:3c:a0:a1:8a:44:66:b3:69:2a:36:
a7:4d:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:06 2026 by rpki-client