
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: pp460rBa2zCPIWxIJFKuZIqh8CawmQysvb+qeCg6GRQ=
Subject key identifier: D9:7F:98:DE:95:57:69:7A:51:9A:1A:56:42:C4:76:C5:7C:94:43:1B
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 664ACCF6355F5F711097D56446377AE8C0F3FDD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 0309
Signing time: Fri 13 Mar 2026 04:55:36 +0000
Manifest this update: Fri 13 Mar 2026 04:50:36 +0000
Manifest next update: Sun 15 Mar 2026 05:32:36 +0000
Files and hashes: 1: AS44355.asa (hash: jTQliZxgVlJWQCTLHvozwV5P3KAoGG8bCYGwmSr62sw=)
2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: mUPesfSvelRjPnJHniik1Qe9xbf+wGwL724wmnpxGEo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:4a:cc:f6:35:5f:5f:71:10:97:d5:64:46:37:7a:e8:c0:f3:fd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Mar 13 04:50:36 2026 GMT
Not After : Mar 15 05:32:36 2026 GMT
Subject: CN=D97F98DE9557697A519A1A5642C476C57C94431B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:86:80:4d:fb:16:54:b8:43:3c:4e:a3:80:
fd:3b:8b:a0:92:cc:d8:63:5d:aa:f5:3f:87:83:d2:
7e:8e:bc:18:da:21:65:d6:ed:93:8d:bb:4b:57:25:
e9:e5:10:1e:5f:87:2b:ec:06:a3:c5:2d:ab:5d:e3:
26:80:87:d7:22:52:bd:a8:e8:4b:cd:33:77:b8:a7:
ae:94:85:1c:ca:9f:5f:b9:a6:d9:6a:e5:3b:a1:59:
c0:64:cb:34:88:4c:09:ce:73:a4:40:6a:98:03:27:
4c:8d:47:5c:51:9f:5e:b5:65:ce:82:5a:87:b8:47:
a7:8c:8f:27:d9:22:f7:73:fa:74:ba:6c:99:4a:31:
ab:86:03:c2:f4:7a:63:36:1f:7e:9a:2f:15:8b:ec:
8d:8f:07:d4:7a:b6:6a:e3:29:ef:55:6f:ef:22:ad:
2b:72:51:01:76:a6:95:f2:9e:07:d2:29:fc:62:66:
8e:12:70:c1:66:1d:99:57:92:7e:14:0f:b0:f8:99:
a8:88:0e:22:1c:86:87:f2:37:00:48:f1:18:42:ed:
d4:fd:b4:f6:67:d9:ff:ab:fc:0d:9a:0f:2e:61:73:
b0:e4:d2:14:0f:5a:ef:0e:b3:9d:91:4f:36:c8:90:
14:e2:3e:e2:c2:88:10:29:84:83:2a:76:be:ab:bb:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7F:98:DE:95:57:69:7A:51:9A:1A:56:42:C4:76:C5:7C:94:43:1B
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:43:fa:cf:ee:1b:91:61:7f:30:f9:4a:75:85:5a:4c:f3:4f:
40:ef:82:04:a9:cd:9f:ea:02:93:da:b1:4b:31:bf:8b:b2:4d:
48:0e:4f:fd:f8:2c:15:a8:3c:49:56:e4:17:83:4d:b3:10:16:
3b:ab:2a:93:74:a6:b2:13:28:bf:84:0a:f8:7c:09:bf:80:16:
a7:28:ad:c8:00:70:fd:0f:39:7a:76:5c:00:a9:76:18:83:01:
45:70:6e:bb:98:b1:93:fb:36:b9:48:34:e3:6f:fc:f5:47:9b:
66:f8:c4:59:95:05:7e:be:ba:f1:07:59:99:f6:8a:45:91:2d:
eb:9f:4e:2d:28:45:a5:c0:2d:c1:9c:ab:fa:76:5f:61:f5:8b:
c6:45:b7:d8:a7:f8:c8:79:84:df:a2:3a:f7:7e:33:0d:ef:f9:
30:b8:37:6f:2f:5b:cc:83:d5:fb:a9:c9:08:8c:f1:d9:a4:fa:
1b:23:96:3b:8b:f2:39:58:ff:56:77:7b:a9:af:36:0f:a4:b5:
84:f5:62:cf:1b:1c:c4:44:2b:d3:b3:42:c9:5c:3f:06:22:8c:
e7:59:07:8e:59:24:ac:6b:aa:85:c3:9a:7d:a1:a5:78:18:8f:
50:4e:9b:d1:05:ad:1f:41:51:b7:26:f3:07:56:ed:70:e2:d1:
e3:79:a6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 05:20:13 2026 by rpki-client