Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
File: 391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft (raw, json)
Hash identifier: PLgq6+ehgppVj3q3NVfc5LNfaYm1lc5ZLwTQhZ7R/ZA=
Subject key identifier: 13:29:80:48:59:DF:A2:49:28:47:B1:5D:A8:5E:FF:2E:51:D6:71:FC
Authority key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
Certificate issuer: /CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Certificate serial: 56688D2FE2C1F2138C6A35D6A159B5FBE5F73DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
Manifest number: 29
Signing time: Sun 01 Mar 2026 11:25:06 +0000
Manifest this update: Sun 01 Mar 2026 11:20:06 +0000
Manifest next update: Mon 02 Mar 2026 11:37:06 +0000
Files and hashes: 1: AS215685.asa (hash: xszbeU8CdJRCRJHJvQgY81m0i0Z3/8sM5z/Hw/x2m0Q=)
2: 391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl (hash: GD0f60GgwkyT4QVXc//m3T/Y19fBkYY76z46hpSGBvE=)
3: 323030313a3637383a6139303a3a2f34382d3438203d3e20323135363835.roa (hash: f01olELinbK/WN+AKKfNEa3BaJPmtAdvY7LAPWQjTbg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:68:8d:2f:e2:c1:f2:13:8c:6a:35:d6:a1:59:b5:fb:e5:f7:3d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Validity
Not Before: Mar 1 11:20:06 2026 GMT
Not After : Mar 2 11:37:06 2026 GMT
Subject: CN=1329804859DFA2492847B15DA85EFF2E51D671FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:a6:c6:ee:42:01:5a:48:e4:57:8c:8a:e6:
f5:f2:fe:66:0b:2d:0e:41:d9:a9:56:ca:81:11:57:
e0:aa:6a:f0:6b:ff:43:5b:7a:d6:0f:47:fc:8c:32:
08:13:c5:97:b1:fe:17:75:9f:f8:ad:97:02:06:f4:
2d:fc:2c:b0:8c:6f:0f:fe:2a:6e:0b:cd:45:59:75:
66:57:9d:d6:fa:14:ca:c7:30:09:a0:d5:0f:5d:13:
4d:15:69:7c:51:20:de:d1:42:c9:99:10:24:55:ef:
f5:a5:d2:a1:22:4d:5f:f4:c8:a9:2a:dd:22:a5:a8:
1c:4c:25:3b:bf:89:de:7a:0d:31:7d:cb:1e:21:c4:
5b:a9:4e:ed:0b:d5:72:ba:a5:d8:42:2e:ee:65:7a:
77:04:ac:d8:4d:9a:76:55:27:3f:84:c9:de:39:ab:
50:c7:1d:6f:0f:9a:66:cf:0a:4c:71:be:96:67:51:
41:ed:1b:48:76:dc:5c:7e:82:a8:e9:96:da:07:63:
ae:2b:90:d1:8f:10:55:46:52:48:d0:88:76:ff:f0:
be:6a:40:22:1d:34:29:d4:72:5f:3c:d1:65:9e:c7:
42:db:7c:f8:1f:42:6e:8f:08:d9:6c:7b:74:b3:53:
29:23:93:a8:03:29:2a:9c:cf:fb:3e:e4:ac:36:fa:
13:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:29:80:48:59:DF:A2:49:28:47:B1:5D:A8:5E:FF:2E:51:D6:71:FC
X509v3 Authority Key Identifier:
keyid:39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:dd:15:98:4e:df:c8:eb:7a:5c:d2:12:c9:3e:2d:7d:82:a2:
de:41:f2:70:45:80:d0:58:e4:02:a8:0c:1e:5d:be:90:1a:25:
50:11:49:0e:f3:ab:47:c7:8a:db:d7:c3:db:a0:67:ef:45:ce:
76:5d:c7:a6:cb:b4:8a:df:79:f2:14:42:e6:24:e7:12:c9:36:
9a:77:38:89:c6:f8:14:7a:6a:6d:76:fe:ed:ff:70:d6:55:0a:
16:84:d6:51:97:3d:dc:97:56:93:fe:13:09:fb:ab:49:8d:7d:
9a:0c:69:4f:19:e5:ad:2e:5e:0d:fb:1b:90:c8:2b:47:11:bd:
66:be:4e:61:c5:bb:1f:0a:e0:9c:0d:99:20:fe:05:cc:c9:df:
dd:23:db:ff:14:7a:62:95:29:c1:b8:ec:4c:6a:f7:b7:59:5f:
44:6c:6b:fa:2f:6d:7b:52:ef:ce:13:f8:93:06:67:1b:d8:8f:
f2:3d:85:87:84:3e:9b:9c:5c:91:1f:a6:a6:e0:90:0b:61:fc:
19:42:a7:06:70:98:f1:5d:e2:97:79:f8:2d:eb:5c:ea:50:e2:
df:0a:bd:68:8a:ff:e8:bc:35:b7:e2:af:ca:fd:80:79:5a:94:
7e:2d:75:07:bb:eb:77:b5:f3:c8:47:8a:8b:fe:3e:5b:82:f4:
cc:5b:5b:d5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUVmiNL+LB8hOMajXWoVm1++X3PbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkxZjIwZjI2YWE2ZDYzNTk4ZmYzMDI1Y2RkYmRiNGI5
YzlhYjY3ZDAeFw0yNjAzMDExMTIwMDZaFw0yNjAzMDIxMTM3MDZaMDMxMTAvBgNV
BAMTKDEzMjk4MDQ4NTlERkEyNDkyODQ3QjE1REE4NUVGRjJFNTFENjcxRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hqbG7kIBWkjkV4yK5vXy/mYL
LQ5B2alWyoERV+CqavBr/0NbetYPR/yMMggTxZex/hd1n/itlwIG9C38LLCMbw/+
Km4LzUVZdWZXndb6FMrHMAmg1Q9dE00VaXxRIN7RQsmZECRV7/Wl0qEiTV/0yKkq
3SKlqBxMJTu/id56DTF9yx4hxFupTu0L1XK6pdhCLu5lencErNhNmnZVJz+Eyd45
q1DHHW8PmmbPCkxxvpZnUUHtG0h23Fx+gqjpltoHY64rkNGPEFVGUkjQiHb/8L5q
QCIdNCnUcl880WWex0LbfPgfQm6PCNlse3SzUykjk6gDKSqcz/s+5Kw2+hMHAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUEymASFnfokkoR7FdqF7/LlHWcfwwHwYDVR0j
BBgwFoAUOR8g8mqm1jWY/zAlzdvbS5yatn0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmU3Zjc0N2UtZmY2OC00ZmEyLWIyZTMtZjZlZGU1NDhh
MzIwLzAvMzkxRjIwRjI2QUE2RDYzNTk4RkYzMDI1Q0REQkRCNEI5QzlBQjY3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09SOGc4bXFtMWpXWV96QWx6ZHZiUzV5
YXRuMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZTdmNzQ3ZS1m
ZjY4LTRmYTItYjJlMy1mNmVkZTU0OGEzMjAvMC8zOTFGMjBGMjZBQTZENjM1OThG
RjMwMjVDRERCREI0QjlDOUFCNjdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA190VmE7fyOt6XNISyT4t
fYKi3kHycEWA0FjkAqgMHl2+kBolUBFJDvOrR8eK29fD26Bn70XOdl3Hpsu0it95
8hRC5iTnEsk2mnc4icb4FHpqbXb+7f9w1lUKFoTWUZc93JdWk/4TCfurSY19mgxp
TxnlrS5eDfsbkMgrRxG9Zr5OYcW7HwrgnA2ZIP4FzMnf3SPb/xR6YpUpwbjsTGr3
t1lfRGxr+i9te1LvzhP4kwZnG9iP8j2Fh4Q+m5xckR+mpuCQC2H8GUKnBnCY8V3i
l3n4Letc6lDi3wq9aIr/6Lw1t+Kvyv2AeVqUfi11B7vrd7XzyEeKi/4+W4L0zFtb
1Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:29 2026 by rpki-client