
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
File: 439CED080CC8B076E557B02CC83D8768D27D56A4.mft (raw, json)
Hash identifier: doRbJRDtzmK/3VtbNBGR45matSObpjlwbSyeNarrIOA=
Subject key identifier: 4A:EE:16:30:7D:AB:38:93:4F:6D:35:65:67:68:8F:87:09:F3:12:48
Authority key identifier: 43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
Certificate issuer: /CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Certificate serial: 2D0370E05B7B242E0594C52B5E5D7CFE10C39E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
Manifest number: 71
Signing time: Fri 12 Jun 2026 21:07:24 +0000
Manifest this update: Fri 12 Jun 2026 21:02:24 +0000
Manifest next update: Sat 13 Jun 2026 23:20:24 +0000
Files and hashes: 1: AS216455.asa (hash: 3Hj6soP0mHi9tW3tH3/uigxupFi1xIZySq2M9PB9CK0=)
2: 439CED080CC8B076E557B02CC83D8768D27D56A4.crl (hash: MMSspedmQi43PspSnz0nQ82WnVG8g7jI2AuaTRzKetc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:03:70:e0:5b:7b:24:2e:05:94:c5:2b:5e:5d:7c:fe:10:c3:9e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Validity
Not Before: Jun 12 21:02:24 2026 GMT
Not After : Jun 13 23:20:24 2026 GMT
Subject: CN=4AEE16307DAB38934F6D356567688F8709F31248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:44:47:90:63:ff:22:2a:80:02:09:0c:c7:
37:bf:5a:29:f2:02:f7:c7:8d:1e:5c:da:34:25:32:
67:26:d4:60:3c:88:99:21:ea:3b:27:65:6d:f7:9b:
5f:4e:cb:bb:58:9a:da:4c:6e:93:f4:e4:c2:e6:d3:
00:e1:8f:98:93:16:04:88:e8:0a:6a:04:47:2e:56:
47:8c:89:9c:cb:6f:20:6d:bd:bb:de:ba:73:bf:24:
78:40:02:9b:cf:14:3e:f3:cd:29:9c:85:12:f8:0e:
c8:34:33:b9:c4:15:d9:1e:2f:7c:3f:81:53:4d:27:
77:d6:95:49:c7:70:35:cc:40:9e:1d:73:30:f4:4e:
f3:34:52:31:29:8f:e1:55:b7:01:b4:b4:e6:e6:34:
68:3c:57:37:aa:ca:16:5c:d0:2a:c8:91:25:f8:92:
be:3d:68:d1:88:34:eb:1d:35:5d:51:f1:cf:18:28:
63:f2:81:8f:cd:33:99:10:b9:a1:64:39:b3:54:1d:
40:4a:dd:2a:fe:ea:04:3f:d5:89:49:42:d9:77:0e:
c4:04:6d:1a:7c:48:cb:7c:83:9c:4b:a3:98:3d:7f:
31:d0:da:8e:5f:31:d7:02:d4:25:14:eb:aa:20:3a:
30:8d:94:c2:1d:8f:11:0f:e0:95:5a:c0:18:8f:dc:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EE:16:30:7D:AB:38:93:4F:6D:35:65:67:68:8F:87:09:F3:12:48
X509v3 Authority Key Identifier:
keyid:43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:23:0e:09:46:da:2e:23:ae:d7:0b:d4:b6:b0:21:ca:90:f0:
22:99:98:68:f0:98:c7:17:74:ed:5e:62:a7:a5:d2:cc:fb:1f:
b6:9b:43:bb:b3:0d:55:a2:23:d1:e5:f2:ca:9d:1a:93:55:ca:
fc:48:bf:ca:f2:a2:95:89:6d:83:02:a2:ad:65:26:0b:ec:f2:
63:16:1e:88:3d:cc:4e:58:1c:29:f7:77:ba:79:6b:4d:06:dc:
99:3d:dc:b7:fc:b7:82:e1:9d:00:d9:09:94:7b:08:e3:18:b2:
c4:cf:a2:ae:bb:10:69:8e:fc:40:8c:7e:64:db:99:d0:25:6b:
c3:00:cc:04:b8:7a:35:50:4e:97:bc:b2:5b:ea:56:b8:bc:b6:
10:86:08:79:0e:17:0f:87:82:20:a1:ae:f4:64:02:a0:df:40:
8d:4f:96:1c:e9:94:4a:c2:59:65:a8:46:cb:be:99:d2:fd:ea:
f3:b4:5b:4f:dd:18:ee:10:20:24:2a:1d:15:1d:99:f2:a6:0f:
46:7c:e7:cb:93:fb:59:2e:7b:d2:29:60:6f:ea:3c:cd:1a:bc:
71:71:0e:99:fc:5a:9e:1f:02:8d:7a:ef:14:a6:ad:f6:6b:d9:
e7:e1:e6:e8:74:bc:20:79:78:8f:52:eb:4d:39:0d:37:7d:a4:
47:fb:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:08:11 2026 by rpki-client