Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
File: 439CED080CC8B076E557B02CC83D8768D27D56A4.mft (raw, json)
Hash identifier: h+Pb4KEhFOLY6Z9JAL5wnJZCAbyQuKRxwSHFMZPLzgk=
Subject key identifier: 03:05:AF:83:B1:8B:32:23:FC:8C:C0:63:F0:7A:98:5B:C0:1C:E8:4A
Authority key identifier: 43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
Certificate issuer: /CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Certificate serial: 253C50FF8AF008DFAE776DB97300B742EEEED68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
Manifest number: 26
Signing time: Fri 17 Apr 2026 10:05:28 +0000
Manifest this update: Fri 17 Apr 2026 10:00:28 +0000
Manifest next update: Sat 18 Apr 2026 13:35:28 +0000
Files and hashes: 1: 439CED080CC8B076E557B02CC83D8768D27D56A4.crl (hash: TFimwhUnk5I9Vnta9ml6cYRhpe4tyZ3mha/8taReQTA=)
2: AS216455.asa (hash: 3Hj6soP0mHi9tW3tH3/uigxupFi1xIZySq2M9PB9CK0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3c:50:ff:8a:f0:08:df:ae:77:6d:b9:73:00:b7:42:ee:ee:d6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Validity
Not Before: Apr 17 10:00:28 2026 GMT
Not After : Apr 18 13:35:28 2026 GMT
Subject: CN=0305AF83B18B3223FC8CC063F07A985BC01CE84A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:3c:70:54:44:5f:73:d6:ad:5d:9f:70:98:
be:cb:96:41:78:bf:30:51:6e:db:0b:c6:f8:6b:de:
27:ac:93:50:7f:a1:cc:95:8d:5b:23:a9:d3:a6:0e:
5d:56:7f:35:b2:5a:8d:77:c7:dc:d9:b3:69:c3:e5:
b8:df:4e:2a:64:6f:e3:ec:58:1b:2a:84:ac:b2:28:
f0:67:53:bf:9e:f1:45:a6:42:a0:c7:33:b3:d3:3c:
f9:b5:6c:4d:29:93:10:f9:3d:c8:eb:19:a3:17:80:
7b:ab:22:37:e0:59:1a:d1:c1:db:75:51:1d:1a:08:
8a:13:ec:ea:f8:74:72:d2:f7:8a:c4:31:08:89:18:
60:e2:20:ff:62:c8:70:87:d8:c1:b3:97:27:a5:8d:
c7:02:7b:c2:db:bb:76:5c:e4:b4:9f:7b:f7:c2:3c:
66:9f:17:ea:84:6b:4a:13:ec:01:67:47:53:f7:bf:
96:03:66:5e:21:fe:2c:01:2f:8e:12:a8:9f:1a:72:
8b:28:c8:77:2f:64:8f:df:39:57:79:81:25:2f:d9:
54:95:ce:a3:4e:f9:ac:9c:f9:71:d3:e9:ee:01:49:
6d:9b:2e:bc:34:6e:82:aa:f6:2e:44:d1:a4:0e:02:
64:cb:9e:fc:8d:19:22:fe:c8:a3:d2:95:9b:50:d0:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:05:AF:83:B1:8B:32:23:FC:8C:C0:63:F0:7A:98:5B:C0:1C:E8:4A
X509v3 Authority Key Identifier:
keyid:43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bb:5e:8a:44:28:4f:d7:03:2d:d3:73:77:a5:d1:73:52:5a:
3f:11:79:71:91:9e:2b:63:42:69:32:a3:51:da:c7:ee:19:30:
2d:8e:d9:b8:3b:42:1e:b5:32:af:f8:9f:38:2c:5e:bb:36:6b:
a3:1b:10:3c:12:a8:6f:31:e8:d6:2e:a6:96:b3:bf:3c:bc:1e:
5c:21:f7:fd:92:40:58:91:bc:3d:81:fa:7c:af:ff:4f:ab:08:
ee:43:e4:f6:6c:c5:33:77:81:e8:c8:90:c8:50:1d:f5:8c:1e:
ac:e3:09:58:ff:7e:45:b0:71:81:00:cb:e0:d4:ed:12:dd:1f:
d4:4c:fb:16:13:10:56:56:22:4d:03:a8:ce:7d:2e:31:78:ca:
bf:6b:cc:f7:eb:d5:7e:3c:bc:fc:6e:3b:c7:18:f7:08:ea:4b:
b2:ac:e3:3a:d7:0f:91:d0:9d:57:37:5a:94:c0:8a:fe:41:8a:
0a:7c:2b:21:ce:fb:b0:08:13:6e:fd:4d:1f:5f:15:a8:ae:48:
d7:2b:87:83:c2:41:b6:87:eb:c9:19:3e:14:6e:81:77:7d:03:
f7:70:40:4b:b7:7d:39:61:ab:33:ff:aa:2b:8d:fa:dc:16:c6:
04:4c:83:84:19:a3:d5:50:50:e7:9b:6d:ae:74:c9:71:f8:65:
f9:5e:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:18:14 2026 by rpki-client