Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: e+qhRcqRWD1kkY/LPGEbO+GYwul1hdluv7HDsPOi8Fg=
Subject key identifier: 16:14:7B:99:28:FF:6A:5A:61:A5:E7:28:B6:ED:67:09:C0:EA:8C:52
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 7F80A40308D55861D0ED11C8DBE36B0D8DFCD5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 035B
Signing time: Thu 30 Apr 2026 08:07:57 +0000
Manifest this update: Thu 30 Apr 2026 08:02:57 +0000
Manifest next update: Sat 02 May 2026 11:58:57 +0000
Files and hashes: 1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: LwdG33rwRjCgeg3mAovK9rsKmfHSBNxZ+BtLHpfLuaE=)
2: AS44355.asa (hash: jTQliZxgVlJWQCTLHvozwV5P3KAoGG8bCYGwmSr62sw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:80:a4:03:08:d5:58:61:d0:ed:11:c8:db:e3:6b:0d:8d:fc:d5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Apr 30 08:02:57 2026 GMT
Not After : May 2 11:58:57 2026 GMT
Subject: CN=16147B9928FF6A5A61A5E728B6ED6709C0EA8C52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:bd:f8:9d:56:d1:2e:d9:55:22:2b:21:da:
4b:ec:a8:2a:d1:b3:5a:3d:e6:02:d6:ce:a0:e1:46:
59:3b:d9:d1:de:83:c8:d8:26:bf:de:ab:66:99:e1:
cc:7a:d1:5d:0a:02:32:80:8c:c1:bf:16:dd:bd:57:
31:2f:c7:be:70:d1:65:c7:22:06:97:2f:b2:c0:09:
a9:2d:7f:30:4f:c2:d1:68:cf:3e:75:9a:3d:1a:13:
e8:91:e8:6b:88:87:1d:52:c2:d0:a1:a9:f6:95:f4:
e8:f1:fc:1a:53:18:5c:5a:e1:e3:98:d0:00:f6:78:
fd:93:53:c6:f4:4e:75:e6:ef:49:56:3e:3a:59:01:
9e:c2:ec:8b:08:fb:01:50:1c:e2:98:09:df:64:cc:
b0:55:a5:fd:b2:c6:9d:cc:d8:34:c6:13:ea:19:bc:
25:75:8d:fd:1c:7c:8b:74:16:2d:22:f1:47:6c:32:
e7:7e:e3:08:56:96:a9:fe:b1:7f:02:95:7c:69:d7:
72:8a:6c:c2:98:8a:e1:8b:b4:ef:2e:cb:45:ed:77:
76:19:77:c2:dd:02:6e:b9:00:5b:62:92:ea:7c:74:
8e:f0:55:51:6a:c9:9f:fa:e1:bf:98:5b:30:d8:34:
31:4b:5e:5f:4d:d6:27:8b:1c:b8:70:62:f2:86:86:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:14:7B:99:28:FF:6A:5A:61:A5:E7:28:B6:ED:67:09:C0:EA:8C:52
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:38:5f:00:b6:d5:0c:fd:68:c8:08:5c:c0:4b:61:c1:e7:e2:
60:ef:ef:ac:6d:ac:32:dc:46:e7:75:a0:20:a8:14:7f:f9:4f:
c7:e3:05:65:da:33:be:e7:8a:5f:f2:03:34:22:8d:ae:ee:79:
25:3d:5b:e2:58:47:94:59:a8:37:af:b4:09:ee:0b:25:50:20:
fe:72:b7:ba:86:1f:97:46:a1:40:61:55:90:54:1b:7e:6c:73:
2a:f5:41:1f:2a:32:bd:16:0a:79:0d:64:69:75:72:90:34:c1:
22:3b:d5:1d:97:8b:e4:ff:12:1d:4a:db:93:4b:62:42:ea:49:
0b:84:59:66:ce:f8:4c:c1:0a:b3:88:08:d4:3d:d3:fd:1f:a7:
f0:f8:ad:8f:df:43:27:00:ff:1a:97:54:05:79:72:af:93:0e:
2e:84:ab:2e:dc:b1:62:43:ca:1c:15:b8:3f:69:9e:fd:65:4c:
0a:34:9a:a3:b9:df:95:67:50:33:ef:35:df:76:9b:a0:0e:9e:
83:ed:2f:b1:4d:e8:67:ab:e9:12:af:91:9e:12:ad:ab:1b:43:
17:43:43:19:56:e9:be:ab:b5:46:88:59:c1:9b:f0:eb:07:9b:
4b:65:fd:79:40:ba:02:83:71:9a:77:8d:77:32:00:88:99:4f:
42:aa:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:57:12 2026 by rpki-client