Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
File: 399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft (raw, json)
Hash identifier: 3KVmlv/iP453UhH2kbCTIQsaXwQnU1ktBANczXqT+1M=
Subject key identifier: DB:22:A5:3C:25:E4:79:78:3F:5C:B8:8A:90:54:92:DA:7F:7B:09:DF
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 6BC32A0D4475426908F2947A42E44B1AD0F1E9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
Manifest number: 030A
Signing time: Wed 23 Sep 2026 09:10:36 +0000
Manifest this update: Wed 23 Sep 2026 09:05:36 +0000
Manifest next update: Thu 24 Sep 2026 12:12:36 +0000
Files and hashes: 1: AS273043.roa (hash: J5XmuJxWgaFve963e8mjbZSN9H6IDO/exl7LJq+RNyc=)
2: AS219020.roa (hash: n7NjCG+aZTB+2pYlfb6hhXC06dmEQ0K4C7QxI9pIzRo=)
3: AS16276.roa (hash: ivnTqgV4WNfXbRjaixdV8Az1b9K3HAxScmTRPDntrA8=)
4: AS219183.roa (hash: 4UrOLweT+qrf1NMg3fly9j1yLDdaczMTQLgIHVuO3gA=)
5: AS13335.roa (hash: YDslZ7oke18viDbx+Ygyopq6MWnYQD9W6tgXdPs8HXk=)
6: AS197842.roa (hash: kIRy3NMl7bs1KiRBnYrlW/JpSPsYhqLQWfrFiCKCODo=)
7: AS200213.roa (hash: mt0oKV4vKyzTLnTVvTz1WTT70/R8SpHLCy/OBAgeu/8=)
8: 399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl (hash: 2jn2CgFg3VRErOU1dp28vcWt6Z5hAEMAjp0j8IL63Is=)
9: AS395954.roa (hash: qpJnOKlx2JsSV2pN1Y3JKvyzN3SP5RoWp2ky1F3Qg4E=)
10: AS14618.roa (hash: +ZCMcc09GOGvH+RPQywhAOM/4k0Qko/J6RijUH1Gf1A=)
11: AS218757.roa (hash: +oPJ4BCTREh5NYpXQhLqnbrUHjMt0jZYbNPOQ3NVfEY=)
12: AS57043.roa (hash: IGqA+P4gyGQj+Ojgf3UYhxfhZx3ja/lPhrS9/OZoZrQ=)
13: AS16509.roa (hash: MRwRszsGZxZG5dzirSfGrKpqCDPDeATyo9dzK+lHBJ8=)
14: AS48729.roa (hash: 9kOZrIrZDmTB/NO4UExUIWDXxdofMxriEIqF2KMPp4g=)
15: AS62082.roa (hash: vnZ3izMrtJ4JH7rfOWOu+uvsXZMZS2hAbU6Xy2ppuF8=)
16: AS17561.roa (hash: ClO3emh1IQhHFXSXeabdAwt6K42XyQd36OneCUf9o0E=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:c3:2a:0d:44:75:42:69:08:f2:94:7a:42:e4:4b:1a:d0:f1:e9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Sep 23 09:05:36 2026 GMT
Not After : Sep 24 12:12:36 2026 GMT
Subject: CN=DB22A53C25E479783F5CB88A905492DA7F7B09DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:e0:fe:ff:fa:90:26:04:43:09:41:30:69:
ee:61:29:34:c2:41:60:6f:dd:19:f3:26:1f:d8:ad:
dc:73:c9:63:67:13:43:5a:17:08:5e:9c:a0:6f:ce:
8b:8e:21:92:20:53:f6:5f:85:ec:66:bb:2c:ae:4d:
83:69:2d:1d:a0:6a:4e:9c:d9:4a:44:58:2c:cf:d3:
c6:bf:c4:30:de:4b:5b:5a:c2:c9:54:0b:9d:d8:e3:
fa:93:d3:5b:59:19:7f:e7:25:a0:78:94:00:a2:b0:
7c:d8:6d:11:fa:13:6f:8a:4a:a7:a3:61:f3:70:84:
9d:11:18:5b:ed:68:84:24:8d:a7:0d:28:a2:c2:56:
88:a7:e3:9a:21:d9:84:3b:9b:e3:9b:34:af:74:65:
59:bc:5d:ca:3f:29:c1:a8:75:18:f1:5b:09:1f:e8:
c4:4f:5c:6d:26:fd:f6:e4:77:6f:bc:fc:7e:95:b9:
f1:b3:cb:b0:b0:8a:a9:f2:0e:3d:2b:ce:c4:9e:38:
63:23:a9:b9:a5:13:d8:7b:c6:b3:8f:b5:47:a0:ed:
cd:6b:4a:e4:95:f5:a3:aa:d3:30:c0:61:cf:7d:f5:
29:20:16:2a:f6:9c:4e:1c:dd:86:4c:45:5b:12:8f:
59:ce:f3:ea:b2:89:62:5b:28:df:28:8e:2a:02:5f:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:22:A5:3C:25:E4:79:78:3F:5C:B8:8A:90:54:92:DA:7F:7B:09:DF
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:84:f2:37:e1:11:9b:2b:4c:ef:69:03:63:5e:de:59:39:9a:
10:30:8e:ba:76:57:8b:f6:a8:7b:53:72:8a:ab:d0:65:ea:df:
10:6f:9e:a4:33:95:ff:4f:76:af:c2:2d:a7:db:f1:ec:5a:eb:
cc:3c:26:1c:c0:fc:8a:f0:61:24:f8:e0:e0:ee:45:91:75:74:
39:82:9e:00:a2:f8:a7:06:b0:bf:57:b0:2d:e4:02:7d:89:e5:
b5:d6:83:62:da:23:4d:c2:ce:67:79:81:1a:d0:27:04:7b:8c:
33:7f:a8:b9:d8:90:4f:dc:66:61:29:b6:55:55:53:9c:dc:c8:
50:f6:c3:fd:46:f9:45:58:92:57:61:21:2c:b7:53:f9:c7:ee:
32:ef:1b:53:e3:77:70:31:77:d8:3d:df:e9:ed:47:2b:8b:76:
02:8e:11:01:9e:d9:94:24:29:f2:39:4f:05:f2:6e:e1:46:00:
73:e0:6c:c6:8a:d9:da:c1:8f:00:07:7f:78:39:58:f5:61:fa:
35:97:91:76:f8:a5:7b:8d:1e:48:30:ed:8b:8f:a2:ca:3c:e7:
da:03:3f:80:1e:08:82:37:3c:e8:8d:0e:5a:85:c7:c4:80:ab:
6a:b4:87:97:84:95:57:d0:19:0e:a8:74:2c:63:47:92:d1:02:
24:93:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:33 2026 by rpki-client