Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File: 317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier: KABYyHi5R0m5IPkB7oMA1ydvC7BiOUfl6ZNSZp7c8sE=
Subject key identifier: FF:4F:82:EC:78:6C:58:60:B0:D6:17:4E:F5:CE:9B:65:69:76:CE:A5
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer: /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial: 12CF4C47B22717EA809DEE2F5236AD79BAF06FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number: BF
Signing time: Sun 29 Mar 2026 05:29:56 +0000
Manifest this update: Sun 29 Mar 2026 05:24:56 +0000
Manifest next update: Mon 30 Mar 2026 08:36:56 +0000
Files and hashes: 1: AS207682.asa (hash: yNMgsZTlVBgZuwAny+gfftheJcltZQ2eLBjscmcmhhI=)
2: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: +OLez/lHSfh48ZBLQj4o26W4xB2uZ/t9Acdym9OTGAI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cf:4c:47:b2:27:17:ea:80:9d:ee:2f:52:36:ad:79:ba:f0:6f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
Validity
Not Before: Mar 29 05:24:56 2026 GMT
Not After : Mar 30 08:36:56 2026 GMT
Subject: CN=FF4F82EC786C5860B0D6174EF5CE9B656976CEA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:ed:29:e6:f0:f1:26:dc:c7:73:e1:e4:54:
11:ba:84:54:e7:f8:65:28:31:db:74:ab:60:66:07:
8e:4f:05:8f:2b:f6:51:6d:b4:e3:2b:7e:05:f4:cb:
c1:e5:38:25:6e:2f:ad:df:c9:30:ca:6b:32:c8:dd:
c2:de:65:6e:17:92:ea:8b:72:89:79:b2:c6:f4:92:
22:e7:85:fa:ad:2b:cd:46:02:98:67:e8:2f:6d:9b:
84:a3:b1:eb:3a:73:75:b2:80:8e:88:7c:85:17:48:
da:69:a1:e9:dc:30:c7:e2:9c:37:ac:24:2d:01:8b:
cd:7a:5c:f0:f8:01:8b:64:06:84:a4:86:2e:9b:0e:
77:d1:d1:f3:60:3c:13:02:ad:76:4c:0d:08:bd:b1:
4e:1b:df:06:90:4c:72:18:05:3d:a2:2c:53:f3:8f:
6a:99:2b:21:1f:67:7a:59:0f:db:63:f8:19:8b:0e:
c7:a5:ea:7c:e4:fe:08:cc:e3:f7:cc:b1:43:12:5b:
a8:00:f3:44:be:2b:cb:58:60:b2:86:55:ce:e3:08:
68:58:9c:d9:5a:22:0b:9e:62:fc:00:a3:04:c2:a6:
ec:85:b7:d9:1a:de:92:ae:d4:06:50:d5:11:5a:1c:
50:5d:f2:61:12:65:a8:71:7f:f6:50:f8:23:c8:62:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4F:82:EC:78:6C:58:60:B0:D6:17:4E:F5:CE:9B:65:69:76:CE:A5
X509v3 Authority Key Identifier:
keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:38:68:bf:a7:e0:f8:68:1c:b1:af:06:d6:d6:96:f9:a6:85:
5f:33:48:cd:6d:3d:2c:53:80:82:b6:92:cd:b5:33:e2:7b:71:
c8:67:61:dd:fb:07:e3:de:bc:b3:d9:5f:c6:2f:de:f1:92:b9:
1c:4b:ca:9d:91:49:af:94:81:82:6f:50:4e:00:e8:1f:6e:c7:
df:b2:59:d6:c7:4d:57:70:0c:73:25:05:f8:52:e0:02:02:62:
3b:66:96:a5:8b:f8:f4:78:8b:36:11:72:31:e5:2e:67:0b:69:
82:7c:f6:74:35:2e:d9:1f:eb:42:44:aa:33:f1:27:ef:e5:8e:
bf:18:e7:54:6f:2b:61:fe:6f:f2:20:3e:e8:7a:bb:e9:e2:3d:
42:ec:67:13:41:af:3f:3d:dc:ac:14:b9:3b:d3:ec:e0:29:2f:
d1:58:0f:51:c0:92:1d:19:4a:f8:40:ab:1c:1f:58:68:4b:61:
5d:53:f2:8a:ba:b8:26:4d:eb:bc:0c:cb:40:74:2b:b1:cc:25:
07:99:a2:a0:72:dd:31:22:ee:3d:0c:28:c8:13:64:e1:62:67:
d6:b9:ea:9a:75:a9:a6:78:ce:a2:95:26:2e:38:b9:31:7a:67:
4e:21:6e:35:f4:1a:c1:d5:cf:ed:6d:da:70:c4:d8:35:66:74:
f1:52:2e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:58 2026 by rpki-client