Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File: 317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier: ta7EiMG95GrBuV4dJdUZa94snEl6/RJkFJkz0L+Eay4=
Subject key identifier: 97:81:44:EA:82:9F:4D:B8:65:25:F6:2A:7B:CF:CB:DA:B8:00:CB:42
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer: /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial: 04ADA1E07F53F7F40447090DDD9AF573A077EE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number: 0143
Signing time: Mon 29 Jun 2026 04:25:37 +0000
Manifest this update: Mon 29 Jun 2026 04:20:37 +0000
Manifest next update: Tue 30 Jun 2026 08:20:37 +0000
Files and hashes: 1: AS207682.asa (hash: 7devBP0cyMapHDrObHNB1aOL7sdvquPHiL3KXnHdnos=)
2: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: hftzR2HiX5yiqOvVQHzyGkVxt/KE8H8wNmboAH3MbBk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ad:a1:e0:7f:53:f7:f4:04:47:09:0d:dd:9a:f5:73:a0:77:ee:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
Validity
Not Before: Jun 29 04:20:37 2026 GMT
Not After : Jun 30 08:20:37 2026 GMT
Subject: CN=978144EA829F4DB86525F62A7BCFCBDAB800CB42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0d:a7:58:c6:94:b4:2a:0f:64:84:64:67:c3:
ab:cd:0f:c6:6f:ef:67:ab:2b:12:20:10:cd:8c:58:
d1:f0:6f:91:91:76:79:d8:d4:6b:85:e7:b7:81:c2:
e8:62:02:31:fe:2c:75:a9:ab:f3:b5:9c:d0:3b:92:
bc:9d:05:a4:3c:1e:7b:4b:62:e9:64:a8:9a:a0:0d:
9f:8d:be:7a:45:31:d4:3b:79:4d:2a:f8:b0:ad:db:
06:3d:90:bd:22:06:0d:03:d5:32:88:24:fc:7f:3f:
c7:07:83:39:4a:3a:a9:de:59:a2:65:e4:cb:a7:f6:
f9:60:e7:95:39:43:c8:ab:de:39:bb:a4:e7:55:3c:
6e:23:d7:30:76:10:32:a7:56:6d:da:02:3b:e3:e8:
63:9c:54:30:8f:de:09:a8:46:1b:96:22:e5:a2:80:
51:c9:34:b8:eb:c3:69:91:9c:26:81:45:24:c1:c3:
17:55:8d:b2:da:e9:cf:ba:38:a6:a2:04:38:23:6b:
65:de:d0:63:ec:25:6e:d3:a1:ba:8e:78:fd:6a:21:
21:14:aa:c6:66:1e:71:bd:ea:66:5b:5f:cb:4c:5f:
45:58:14:b0:aa:54:4d:3f:eb:ee:1a:d0:6f:49:d1:
74:90:86:46:0d:72:f3:b7:b3:6d:ea:6d:92:f0:9b:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:81:44:EA:82:9F:4D:B8:65:25:F6:2A:7B:CF:CB:DA:B8:00:CB:42
X509v3 Authority Key Identifier:
keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:50:c3:04:02:70:60:7a:86:da:d5:f0:d1:d6:1c:62:e9:69:
b4:46:63:be:62:aa:02:69:df:d7:b2:22:6a:33:be:1d:9c:03:
0c:d1:1d:a4:f7:35:9f:15:7a:8d:2f:16:1c:02:58:d9:40:21:
d9:7b:4b:7c:ea:51:0d:29:bc:e3:b9:64:1a:77:c2:0c:f3:48:
d7:1c:74:40:f1:10:20:36:db:90:c3:10:3f:65:a5:24:61:c3:
07:fe:fe:9e:76:e3:d3:f1:3e:e2:0f:01:20:b2:d7:70:f2:4b:
34:16:f9:16:50:cb:06:b0:11:29:1f:fe:ef:51:b5:4e:d0:95:
69:a1:41:b0:d2:7b:d6:ff:69:22:aa:d4:a0:55:c8:c1:ea:52:
cf:75:f4:e9:8e:af:78:ae:b9:11:52:12:ec:11:c3:12:2e:94:
58:af:0b:54:ab:15:31:85:1e:00:4c:07:52:72:40:a7:9b:69:
21:d7:89:6a:61:f4:7a:db:e0:07:76:43:20:28:34:20:44:88:
10:c3:0e:17:1f:67:05:1b:87:00:09:c9:da:7e:37:f5:88:ac:
f8:a2:e3:53:07:15:bb:32:ba:dc:c9:3f:44:9e:d9:b5:e7:7b:
ae:6b:17:0d:1a:60:46:31:31:ff:fd:b9:98:d7:2a:56:33:0c:
92:12:eb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:35 2026 by rpki-client