Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
File: 439CED080CC8B076E557B02CC83D8768D27D56A4.mft (raw, json)
Hash identifier: vp3yc8rOj5Oc4EeLFPT9+MDqrpF2Wj86oPz0W4RoyvY=
Subject key identifier: 68:20:15:97:68:74:6D:3A:F9:70:20:D8:9E:66:9C:2E:48:3A:99:6C
Authority key identifier: 43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
Certificate issuer: /CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Certificate serial: 0402E432B6BEB176407728406E9B65B4E4203E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
Manifest number: A7
Signing time: Thu 23 Jul 2026 07:29:50 +0000
Manifest this update: Thu 23 Jul 2026 07:24:50 +0000
Manifest next update: Fri 24 Jul 2026 09:01:50 +0000
Files and hashes: 1: AS216455.asa (hash: 3Hj6soP0mHi9tW3tH3/uigxupFi1xIZySq2M9PB9CK0=)
2: 439CED080CC8B076E557B02CC83D8768D27D56A4.crl (hash: oNB3shr+Zgsp8S7CNVn/tmzWLuJvGuM9yijnNYc3s7Y=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:02:e4:32:b6:be:b1:76:40:77:28:40:6e:9b:65:b4:e4:20:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Validity
Not Before: Jul 23 07:24:50 2026 GMT
Not After : Jul 24 09:01:50 2026 GMT
Subject: CN=6820159768746D3AF97020D89E669C2E483A996C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:6f:5f:d3:66:19:b0:a1:91:7b:29:53:f4:
af:52:a6:02:3a:e8:f6:0f:e0:6b:1e:2a:a7:f1:13:
47:4d:d7:e1:11:25:62:0b:59:e7:5b:35:fa:6f:63:
7b:2b:c4:b2:8a:5f:6f:33:8a:cd:da:c2:07:be:21:
8f:4c:0f:1c:ff:d6:ed:3c:a6:44:f2:6e:5c:aa:8e:
48:5a:82:66:f8:a9:de:9c:8f:7f:39:b1:12:a8:83:
0a:79:3e:95:b3:fb:61:c1:7f:83:18:96:fc:f2:a9:
85:25:9e:2d:a7:ba:9a:de:73:69:23:82:e4:6d:e9:
3a:2d:a3:2a:aa:d6:04:28:5c:4b:48:67:e3:9d:6a:
9d:48:a2:aa:ba:b1:63:18:41:60:48:d3:43:ca:f8:
ab:ff:41:d2:e7:cc:57:6a:2d:6a:01:87:3e:8d:5c:
f0:21:c0:ab:24:f0:79:e2:0b:39:7e:eb:37:d1:6a:
4b:44:a6:47:04:e3:52:d3:d7:95:1d:a4:95:81:27:
62:83:1e:3e:71:24:a1:a8:8e:9e:38:1e:27:f0:45:
1b:fa:b1:78:f7:4c:e1:02:05:c3:b5:ce:f8:21:cf:
f1:19:14:2a:86:c2:ba:37:7d:57:52:26:c1:a3:77:
c3:5e:19:5e:37:f2:7d:fe:f9:8b:a7:67:57:b5:a5:
75:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:20:15:97:68:74:6D:3A:F9:70:20:D8:9E:66:9C:2E:48:3A:99:6C
X509v3 Authority Key Identifier:
keyid:43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9d:4d:5b:74:41:57:95:41:ed:f6:a2:f1:6f:9c:3e:03:8f:
7a:91:96:04:1c:56:f7:64:57:6c:fc:95:83:6a:68:7b:c1:21:
4c:8e:d0:71:99:41:a1:65:ee:1b:a2:14:06:f7:5a:97:10:18:
db:63:05:21:76:ec:c3:07:11:09:4a:72:9a:10:53:a6:e8:15:
81:66:c1:a6:9a:80:70:91:7c:db:b1:6a:9f:3c:72:dc:91:95:
4f:ca:56:53:51:4f:45:7a:17:bb:21:66:80:b8:68:15:0f:e6:
e9:5c:48:9c:dc:31:d8:97:78:45:2a:a3:a9:45:35:9a:66:1e:
31:b3:da:78:4d:57:07:4f:39:15:45:17:e8:f9:2d:ad:ab:a9:
3f:11:96:25:d3:06:72:99:95:66:c3:e1:29:2d:49:70:85:b6:
46:bc:88:26:88:e8:22:af:c3:51:c2:75:08:cd:90:37:d3:ad:
1f:72:c9:51:b6:d3:11:cc:69:d6:76:c9:b2:04:6f:ea:90:50:
be:32:63:5d:64:ce:2e:01:fe:af:80:89:c5:d0:7f:dd:67:f4:
93:c4:d1:c2:ab:66:05:c7:20:c2:ad:60:3c:94:e5:9d:eb:55:
6f:de:0e:b7:2c:48:52:73:4d:5a:d0:59:aa:6f:37:f0:44:72:
f7:70:58:4d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgITBALkMra+sXZAdyhAbptltOQgPjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg0MzljZWQwODBjYzhiMDc2ZTU1N2IwMmNjODNkODc2OGQy
N2Q1NmE0MB4XDTI2MDcyMzA3MjQ1MFoXDTI2MDcyNDA5MDE1MFowMzExMC8GA1UE
AxMoNjgyMDE1OTc2ODc0NkQzQUY5NzAyMEQ4OUU2NjlDMkU0ODNBOTk2QzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKdbb1/TZhmwoZF7KVP0r1KmAjro
9g/gax4qp/ETR03X4RElYgtZ51s1+m9jeyvEsopfbzOKzdrCB74hj0wPHP/W7Tym
RPJuXKqOSFqCZvip3pyPfzmxEqiDCnk+lbP7YcF/gxiW/PKphSWeLae6mt5zaSOC
5G3pOi2jKqrWBChcS0hn451qnUiiqrqxYxhBYEjTQ8r4q/9B0ufMV2otagGHPo1c
8CHAqyTweeILOX7rN9FqS0SmRwTjUtPXlR2klYEnYoMePnEkoaiOnjgeJ/BFG/qx
ePdM4QIFw7XO+CHP8RkUKobCujd9V1ImwaN3w14ZXjfyff75i6dnV7WldRcCAwEA
AaOCAkcwggJDMB0GA1UdDgQWBBRoIBWXaHRtOvlwINieZpwuSDqZbDAfBgNVHSME
GDAWgBRDnO0IDMiwduVXsCzIPYdo0n1WpDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS81ODIxYzQ3ZS1lODE1LTQyZGUtYmQ2Yi0xOWEyZTFhZTU2
NGEvNC80MzlDRUQwODBDQzhCMDc2RTU1N0IwMkNDODNEODc2OEQyN0Q1NkE0LmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvUTV6dENBeklzSGJsVjdBc3lEMkhhTko5
VnFRLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov
L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU4MjFjNDdlLWU4
MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS80LzQzOUNFRDA4MENDOEIwNzZFNTU3
QjAyQ0M4M0Q4NzY4RDI3RDU2QTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB
CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfnU1bdEFXlUHt9qLxb5w+
A496kZYEHFb3ZFds/JWDamh7wSFMjtBxmUGhZe4bohQG91qXEBjbYwUhduzDBxEJ
SnKaEFOm6BWBZsGmmoBwkXzbsWqfPHLckZVPylZTUU9Fehe7IWaAuGgVD+bpXEic
3DHYl3hFKqOpRTWaZh4xs9p4TVcHTzkVRRfo+S2tq6k/EZYl0wZymZVmw+EpLUlw
hbZGvIgmiOgir8NRwnUIzZA3060fcslRttMRzGnWdsmyBG/qkFC+MmNdZM4uAf6v
gInF0H/dZ/STxNHCq2YFxyDCrWA8lOWd61Vv3g63LEhSc01a0FmqbzfwRHL3cFhN
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:34 2026 by rpki-client