Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
File: 399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft (raw, json)
Hash identifier: 452IMjxFw1mK8hv6ClgbLG6jljtCPpg6344NdyIg65I=
Subject key identifier: 02:39:28:21:FE:B6:0E:89:F0:3D:80:25:F2:6F:E6:3A:0A:45:45:DE
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 1227782645A5F7CFAC8712110A7F94B737CA13B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
Manifest number: 030B
Signing time: Thu 24 Sep 2026 04:15:38 +0000
Manifest this update: Thu 24 Sep 2026 04:10:38 +0000
Manifest next update: Fri 25 Sep 2026 08:14:38 +0000
Files and hashes: 1: AS219020.roa (hash: n7NjCG+aZTB+2pYlfb6hhXC06dmEQ0K4C7QxI9pIzRo=)
2: AS218757.roa (hash: +oPJ4BCTREh5NYpXQhLqnbrUHjMt0jZYbNPOQ3NVfEY=)
3: AS16276.roa (hash: ivnTqgV4WNfXbRjaixdV8Az1b9K3HAxScmTRPDntrA8=)
4: AS197842.roa (hash: kIRy3NMl7bs1KiRBnYrlW/JpSPsYhqLQWfrFiCKCODo=)
5: AS62082.roa (hash: vnZ3izMrtJ4JH7rfOWOu+uvsXZMZS2hAbU6Xy2ppuF8=)
6: AS57043.roa (hash: IGqA+P4gyGQj+Ojgf3UYhxfhZx3ja/lPhrS9/OZoZrQ=)
7: AS17561.roa (hash: ClO3emh1IQhHFXSXeabdAwt6K42XyQd36OneCUf9o0E=)
8: AS273043.roa (hash: J5XmuJxWgaFve963e8mjbZSN9H6IDO/exl7LJq+RNyc=)
9: 399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl (hash: VcIdR1M48pvYk7V4uxGPaLnXGiOA6PTFCnLi6IfAWns=)
10: AS14618.roa (hash: +ZCMcc09GOGvH+RPQywhAOM/4k0Qko/J6RijUH1Gf1A=)
11: AS16509.roa (hash: MRwRszsGZxZG5dzirSfGrKpqCDPDeATyo9dzK+lHBJ8=)
12: AS48729.roa (hash: 9kOZrIrZDmTB/NO4UExUIWDXxdofMxriEIqF2KMPp4g=)
13: AS219183.roa (hash: 4UrOLweT+qrf1NMg3fly9j1yLDdaczMTQLgIHVuO3gA=)
14: AS395954.roa (hash: qpJnOKlx2JsSV2pN1Y3JKvyzN3SP5RoWp2ky1F3Qg4E=)
15: AS200213.roa (hash: mt0oKV4vKyzTLnTVvTz1WTT70/R8SpHLCy/OBAgeu/8=)
16: AS13335.roa (hash: YDslZ7oke18viDbx+Ygyopq6MWnYQD9W6tgXdPs8HXk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:27:78:26:45:a5:f7:cf:ac:87:12:11:0a:7f:94:b7:37:ca:13:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Sep 24 04:10:38 2026 GMT
Not After : Sep 25 08:14:38 2026 GMT
Subject: CN=02392821FEB60E89F03D8025F26FE63A0A4545DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:94:ad:e8:1c:ee:57:ce:10:e0:27:51:3f:
8b:73:de:bf:f3:b8:56:88:b4:50:7c:73:2e:41:d4:
0b:b9:e1:f3:4d:95:7c:b0:cf:bb:61:ac:56:e7:37:
8c:be:cb:2e:87:64:81:81:4c:a9:b6:a5:fd:60:1b:
a8:37:d9:a0:45:d9:f4:cb:32:f5:cf:09:dd:b3:a6:
a1:c0:ff:a6:4d:68:91:a1:62:ee:f4:b2:af:83:27:
99:69:28:0b:4f:eb:4b:a2:0a:86:61:45:0f:ab:aa:
cc:e4:0b:2a:ab:30:33:68:26:13:74:7a:45:3b:14:
fa:d9:4a:73:62:ce:33:bc:91:11:59:4e:f3:c8:d1:
6f:a3:a0:93:32:34:c5:10:c0:44:ca:e9:17:d2:d4:
02:e5:1b:51:bf:4e:59:05:3d:24:54:e7:c7:ff:85:
59:e4:65:c5:f4:98:a0:6e:23:36:74:ce:37:24:dd:
ee:ae:38:f0:2f:e3:38:2e:0c:85:44:dd:c8:88:5a:
a2:98:a3:94:38:26:5e:8e:53:40:d6:26:b7:0b:cf:
61:d2:26:5b:6f:a8:bf:9c:08:17:66:3e:4a:78:d8:
56:b9:c8:3b:81:ee:fc:d0:ec:09:6c:93:a7:29:11:
ff:25:5a:20:17:15:eb:a8:42:6e:7b:11:e8:2f:e7:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:39:28:21:FE:B6:0E:89:F0:3D:80:25:F2:6F:E6:3A:0A:45:45:DE
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d1:b8:56:b7:47:96:55:a0:fb:13:82:19:ea:7d:df:8f:3f:
54:89:3e:00:d9:0c:ff:2c:40:24:0b:5e:d4:cb:a7:77:d6:6b:
94:ee:13:1e:a4:e8:f3:5d:03:22:86:19:cd:b0:eb:d3:d3:dc:
19:fc:6f:cf:6e:1b:9f:3c:3d:b9:e7:5d:f2:fd:a4:b8:3a:93:
98:e6:aa:e7:6e:26:52:45:79:d0:47:66:28:93:d3:ae:7e:58:
f7:82:3c:c6:77:bd:1d:45:b3:9a:17:82:ae:18:9c:75:a5:57:
ac:1b:ad:80:d7:6f:05:c0:f4:b3:9b:41:ba:b4:81:dd:d5:5c:
1b:fe:b8:01:fa:5a:7c:f4:cc:01:1b:92:fd:05:93:80:72:f2:
88:37:39:67:17:56:c2:cb:a4:69:b7:cb:3b:00:9c:df:b6:89:
59:ac:4a:5c:03:01:70:db:f2:e0:e0:15:d7:80:0d:e2:b1:12:
6e:dc:b4:1b:81:db:e1:6a:2d:0e:cb:c3:4d:d4:07:bd:ab:24:
7a:0e:f4:a0:a4:43:de:2b:09:c4:60:d7:87:23:9e:2f:ca:2b:
0b:52:15:2e:28:a8:e0:eb:fa:4a:be:d9:e5:ed:09:1e:6c:c6:
d3:08:c9:1c:c0:85:10:98:60:a1:c2:42:dc:ce:e2:2e:bb:98:
ea:17:6d:87
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUEid4JkWl98+shxIRCn+UtzfKE7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk5YTdiZjJiOTBhYjhjYmZkMjRjYzRmOGJhZGVhNzg3
N2Y4ZTQ5NTAeFw0yNjA5MjQwNDEwMzhaFw0yNjA5MjUwODE0MzhaMDMxMTAvBgNV
BAMTKDAyMzkyODIxRkVCNjBFODlGMDNEODAyNUYyNkZFNjNBMEE0NTQ1REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC135St6BzuV84Q4CdRP4tz3r/z
uFaItFB8cy5B1Au54fNNlXywz7thrFbnN4y+yy6HZIGBTKm2pf1gG6g32aBF2fTL
MvXPCd2zpqHA/6ZNaJGhYu70sq+DJ5lpKAtP60uiCoZhRQ+rqszkCyqrMDNoJhN0
ekU7FPrZSnNizjO8kRFZTvPI0W+joJMyNMUQwETK6RfS1ALlG1G/TlkFPSRU58f/
hVnkZcX0mKBuIzZ0zjck3e6uOPAv4zguDIVE3ciIWqKYo5Q4Jl6OU0DWJrcLz2HS
JltvqL+cCBdmPkp42Fa5yDuB7vzQ7Alsk6cpEf8lWiAXFeuoQm57Eegv56gxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUAjkoIf62DonwPYAl8m/mOgpFRd4wHwYDVR0j
BBgwFoAUOZp78rkKuMv9JMxPi63qeHf45JUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1
NmI2LzQvMzk5QTdCRjJCOTBBQjhDQkZEMjRDQzRGOEJBREVBNzg3N0Y4RTQ5NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09acDc4cmtLdU12OUpNeFBpNjNxZUhm
NDVKVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZTQxNzA0Zi03
ODE1LTRmMmMtYTUwMy01OGFlMDhlNTU2YjYvNC8zOTlBN0JGMkI5MEFCOENCRkQy
NENDNEY4QkFERUE3ODc3RjhFNDk1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONG4VrdHllWg+xOCGep9
348/VIk+ANkM/yxAJAte1Mund9ZrlO4THqTo810DIoYZzbDr09PcGfxvz24bnzw9
uedd8v2kuDqTmOaq524mUkV50EdmKJPTrn5Y94I8xne9HUWzmheCrhicdaVXrBut
gNdvBcD0s5tBurSB3dVcG/64AfpafPTMARuS/QWTgHLyiDc5ZxdWwsukabfLOwCc
37aJWaxKXAMBcNvy4OAV14AN4rESbty0G4Hb4WotDsvDTdQHvaskeg70oKRD3isJ
xGDXhyOeL8orC1IVLiio4Ov6Sr7Z5e0JHmzG0wjJHMCFEJhgocJC3M7iLruY6hdt
hw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:19:24 2026 by rpki-client