Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
File: 439CED080CC8B076E557B02CC83D8768D27D56A4.mft (raw, json)
Hash identifier: BUapslhvIjgvb9LxUZkthmOL+dRsFEIgy5hBCeHEx6U=
Subject key identifier: A3:84:CB:C3:69:98:8A:64:92:C2:E9:12:54:F9:43:7E:72:78:3A:19
Authority key identifier: 43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
Certificate issuer: /CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Certificate serial: 47A7E57E1AF3B1C87A8CDBFE249C5A508E3D6118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
Manifest number: AE
Signing time: Tue 28 Jul 2026 13:32:15 +0000
Manifest this update: Tue 28 Jul 2026 13:27:15 +0000
Manifest next update: Wed 29 Jul 2026 13:44:15 +0000
Files and hashes: 1: 439CED080CC8B076E557B02CC83D8768D27D56A4.crl (hash: GC2HD0uQaX9+e9ZomDX+7yWlpUjJDB3ufv41r/K8F14=)
2: AS216455.asa (hash: 3Hj6soP0mHi9tW3tH3/uigxupFi1xIZySq2M9PB9CK0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a7:e5:7e:1a:f3:b1:c8:7a:8c:db:fe:24:9c:5a:50:8e:3d:61:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced080cc8b076e557b02cc83d8768d27d56a4
Validity
Not Before: Jul 28 13:27:15 2026 GMT
Not After : Jul 29 13:44:15 2026 GMT
Subject: CN=A384CBC369988A6492C2E91254F9437E72783A19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:30:7f:52:22:34:cd:5b:8f:db:23:c7:c2:25:
a7:66:41:9b:70:92:53:86:ee:69:7b:99:9c:ea:f8:
69:47:dd:a7:09:cf:96:25:0f:2d:97:04:4e:ad:25:
aa:6e:1d:af:01:72:99:47:84:14:5a:d1:12:44:38:
e4:d6:e0:6e:4b:47:3f:2e:e0:db:d2:15:e2:84:e4:
17:dd:6b:01:14:31:05:d5:3c:11:2e:96:66:4f:43:
07:c6:fa:f6:b7:a6:65:96:38:45:d2:f7:24:71:e2:
0e:f6:3c:86:16:de:fc:fa:74:84:18:fa:2f:b9:8d:
b7:46:f1:c7:fb:f3:ba:f0:99:4f:10:47:e0:f4:eb:
fc:f1:56:73:08:19:6f:45:8f:e6:8b:c2:db:ac:73:
e9:79:cc:ff:04:e3:02:15:e4:cd:b4:50:ce:85:c0:
13:14:95:0e:d7:9d:09:e3:16:0d:1e:ed:9a:40:9e:
83:7a:17:ca:15:64:84:b9:1d:94:a0:d7:9b:64:1f:
67:85:8c:27:59:6d:e4:2e:5a:7b:63:52:32:bf:0d:
1c:98:dd:e0:a2:9a:ca:a1:39:93:ec:1b:c2:ed:f2:
d0:45:46:cd:5b:56:72:08:da:1c:33:e4:2b:7f:41:
1b:ab:05:54:fb:26:e0:4e:1c:5f:d0:0b:6d:a9:3c:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:84:CB:C3:69:98:8A:64:92:C2:E9:12:54:F9:43:7E:72:78:3A:19
X509v3 Authority Key Identifier:
keyid:43:9C:ED:08:0C:C8:B0:76:E5:57:B0:2C:C8:3D:87:68:D2:7D:56:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztCAzIsHblV7AsyD2HaNJ9VqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/4/439CED080CC8B076E557B02CC83D8768D27D56A4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:21:a4:fd:db:87:6c:b6:12:97:5c:63:2f:6b:6a:a6:a3:ff:
91:52:a6:a2:f8:72:74:4d:ea:80:b6:89:77:e1:22:46:8e:0a:
78:4f:12:00:6f:16:47:d2:40:29:48:88:99:ee:66:fb:c4:c3:
93:e0:36:3a:60:5b:20:09:0c:49:76:c7:37:da:2a:8f:ca:29:
7a:91:1b:cd:58:0e:4e:d5:50:59:0b:dd:7e:69:de:f1:ea:41:
4b:7d:32:3d:7c:a4:41:c5:4b:56:1e:bc:89:5e:22:fa:ef:4f:
19:aa:80:ea:e3:67:61:ed:85:d0:7b:e1:0a:9f:4e:95:10:b7:
2a:a9:7f:c6:e3:89:5e:b4:86:b4:1a:cf:3c:df:e0:fc:86:df:
d9:99:46:0e:77:36:34:6e:7e:99:e0:dc:f9:8e:6a:9e:ed:e0:
c6:a1:24:49:d2:71:54:3c:a6:84:7c:34:1a:e0:82:0a:8f:11:
5a:b9:bd:f9:58:51:a0:7a:72:ee:60:23:07:c6:27:bf:9d:4f:
99:02:ab:a5:73:48:08:87:d8:c1:bd:36:03:2c:4a:ce:64:4f:
1e:25:21:82:f7:5e:e7:0f:7e:3b:fb:b6:69:1e:f1:21:ec:79:
d1:ff:d2:6c:21:a3:95:12:b0:43:e9:49:a1:5b:90:ab:8d:b8:
c8:88:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:59 2026 by rpki-client