Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: FDMwP5LqgiPbGbAczO8hlVSdPfxkWjw+zIzH+2Qs+qw=
Subject key identifier: 04:E3:0B:6A:31:24:FF:08:E7:F0:35:7D:B1:89:A2:CA:F9:EE:3F:B5
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 305D8CB939D370712AA63B1A64A3B7ADEB5F12C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 04AD
Signing time: Fri 23 Oct 2026 15:04:05 +0000
Manifest this update: Fri 23 Oct 2026 14:59:05 +0000
Manifest next update: Sun 25 Oct 2026 18:09:05 +0000
Files and hashes: 1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: ldxMFHEOKUf+PXHnXKlIYSOFtYZi39liB6Q6lax13TI=)
2: AS44355.asa (hash: yTQ1d47t7DL6OX9hK6P18sSDGhBeUUUl+2fU0coeqos=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5d:8c:b9:39:d3:70:71:2a:a6:3b:1a:64:a3:b7:ad:eb:5f:12:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Oct 23 14:59:05 2026 GMT
Not After : Oct 25 18:09:05 2026 GMT
Subject: CN=04E30B6A3124FF08E7F0357DB189A2CAF9EE3FB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:a3:b9:1f:30:7d:ae:d2:40:a2:dd:4c:b7:
99:bf:b6:c5:89:8a:d9:f1:5f:e7:74:c7:10:b8:7d:
c0:8c:eb:99:9f:93:82:cb:2f:f0:77:42:60:b4:ac:
fd:7f:80:9c:b9:d8:da:f3:a9:36:6e:2a:10:3f:c7:
a0:c5:47:4f:20:66:ea:96:70:9b:1b:7d:b9:cb:cf:
b8:5f:92:4b:5a:90:c9:b8:99:3e:89:cc:db:38:72:
8a:7d:4d:79:e2:b8:9e:10:5e:e4:7e:98:83:c2:2d:
67:18:89:26:3a:d0:7a:d7:03:87:2e:ef:be:e5:a9:
09:e7:da:cc:bf:2b:6d:7d:07:cc:5d:e5:88:15:ce:
66:af:28:9c:c8:7f:d1:21:0d:e6:b0:82:6d:04:f6:
ac:5a:fc:78:1c:1c:d3:e4:d4:0e:da:46:11:bd:87:
f5:07:52:38:b0:7b:ef:7a:2a:6e:b9:76:fa:9e:84:
39:16:12:07:7e:28:7d:10:42:e8:f0:68:1c:48:d3:
40:6f:cf:d9:f4:da:17:6c:8f:53:c8:57:b3:f1:28:
fb:35:a7:a1:5f:5c:fa:9f:02:16:3d:f1:82:f2:04:
9c:95:a8:16:2c:77:60:5b:27:9d:7b:3e:0a:92:09:
33:d6:67:67:ee:07:09:08:7e:6f:40:80:78:36:8b:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E3:0B:6A:31:24:FF:08:E7:F0:35:7D:B1:89:A2:CA:F9:EE:3F:B5
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fb:3b:65:e4:b3:24:a9:c5:27:c1:fc:6d:d3:ed:8c:86:c6:
64:5d:4b:33:49:99:b8:22:09:ba:9a:3e:9c:6c:3e:eb:45:03:
ce:f0:5e:f8:00:29:63:8c:d0:01:2b:bf:fd:58:7b:69:27:95:
a2:1d:d0:68:50:f9:f3:9c:6f:48:89:04:15:91:6d:14:1d:01:
93:16:fc:ba:9e:0e:4e:70:36:7e:9e:c9:b5:62:2b:81:d7:04:
c1:ac:11:a1:be:40:4e:e2:f7:67:76:9e:3e:4c:54:37:11:3b:
a7:ce:17:85:a1:90:2a:fb:8b:36:8f:7d:d9:71:da:5b:bf:4c:
6d:4a:64:fd:c1:0d:9a:13:55:5a:11:6a:92:c3:6c:fa:91:a7:
f3:03:84:9b:1c:c9:1d:d7:89:92:a2:c9:d2:7f:75:b5:b2:eb:
3c:2c:d3:a0:3b:96:60:99:04:5b:0c:7a:89:6e:49:34:2d:ed:
5c:f2:1a:33:48:b7:2e:5d:a9:54:b2:25:0c:d5:f0:2d:f5:ce:
8c:72:a8:a8:b0:60:ed:ba:52:6b:ae:71:a5:ff:81:cb:7a:d2:
63:3a:2a:84:a3:ee:43:4c:2d:a4:f5:40:f7:a5:df:75:10:7c:
35:dd:71:f0:64:81:78:39:3c:2e:4a:de:72:a8:72:81:31:ba:
ac:25:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:45:36 2026 by rpki-client