Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/31A97B97CB23BCCA5D187F8E2BD8FAAA03B98D6F.mft
File: 31A97B97CB23BCCA5D187F8E2BD8FAAA03B98D6F.mft (raw, json)
Hash identifier: F9OBzr7ye+Pc3IvarJ6xm+RHFAhGF87qP8a01+wrA4I=
Subject key identifier: D7:B3:4A:20:86:F3:D8:64:4D:4B:C3:DC:AB:F8:FF:5C:82:62:80:C4
Authority key identifier: 31:A9:7B:97:CB:23:BC:CA:5D:18:7F:8E:2B:D8:FA:AA:03:B9:8D:6F
Certificate issuer: /CN=31a97b97cb23bcca5d187f8e2bd8faaa03b98d6f
Certificate serial: 4C1FCEEA3E998BCDAB2B81F0490E7A90D1317C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mal7l8sjvMpdGH-OK9j6qgO5jW8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/31A97B97CB23BCCA5D187F8E2BD8FAAA03B98D6F.mft
Manifest number: 2D
Signing time: Mon 15 Jun 2026 03:46:11 +0000
Manifest this update: Mon 15 Jun 2026 03:41:11 +0000
Manifest next update: Tue 16 Jun 2026 06:00:11 +0000
Files and hashes: 1: AS214556.asa (hash: Aw9l9ZYJmTa2uMEPW4o4hfRmjL05atwpZnEolAWMcWc=)
2: 31A97B97CB23BCCA5D187F8E2BD8FAAA03B98D6F.crl (hash: r7KcWM/wDVPb8l1oeZwmKaR04IPIizRpk3sJ5iukFf8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:1f:ce:ea:3e:99:8b:cd:ab:2b:81:f0:49:0e:7a:90:d1:31:7c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a97b97cb23bcca5d187f8e2bd8faaa03b98d6f
Validity
Not Before: Jun 15 03:41:11 2026 GMT
Not After : Jun 16 06:00:11 2026 GMT
Subject: CN=D7B34A2086F3D8644D4BC3DCABF8FF5C826280C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:78:7e:52:a1:6b:e5:da:94:73:40:31:05:
6d:cd:7c:f5:11:98:74:15:13:72:2b:40:d1:40:51:
2c:a1:61:26:d6:50:da:ab:65:0c:be:98:c0:cc:d6:
e7:41:ff:fe:bc:ef:5c:51:76:03:09:95:7f:49:1f:
95:ca:cf:99:e1:d4:3a:f4:0a:47:86:43:9c:7f:d4:
d4:77:62:77:56:3e:78:84:79:5d:a5:98:64:dd:ca:
5c:70:d2:b0:2a:46:c5:ab:d7:bd:1b:0b:51:bc:2d:
94:f0:97:29:73:e6:95:fa:b0:44:d5:8f:5b:76:b8:
9a:27:0a:65:d1:98:3c:c6:56:11:1c:6f:b5:c1:7e:
25:6d:9e:2b:f6:58:1f:84:82:be:c0:76:75:70:c8:
26:76:c8:de:c6:e5:3c:e3:07:4c:9e:fa:39:0c:dd:
8d:57:d7:70:53:06:fb:2d:b2:df:2e:f3:96:83:d3:
4e:53:b1:87:68:3f:80:d0:1f:08:70:34:cd:86:9d:
8e:b9:a7:7e:0d:d7:19:67:86:0c:7d:79:9a:7a:2f:
c0:33:d8:ba:be:01:8e:cc:57:29:52:f7:c7:2b:2f:
56:55:47:cd:0e:5f:b1:93:70:dd:29:f2:da:ad:8f:
53:7c:8f:bd:4d:6c:5f:82:e8:07:a2:0c:9e:f0:e0:
cd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B3:4A:20:86:F3:D8:64:4D:4B:C3:DC:AB:F8:FF:5C:82:62:80:C4
X509v3 Authority Key Identifier:
keyid:31:A9:7B:97:CB:23:BC:CA:5D:18:7F:8E:2B:D8:FA:AA:03:B9:8D:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/31A97B97CB23BCCA5D187F8E2BD8FAAA03B98D6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mal7l8sjvMpdGH-OK9j6qgO5jW8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/31A97B97CB23BCCA5D187F8E2BD8FAAA03B98D6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f7:1d:ef:7e:ae:3e:ec:26:95:92:bf:2c:f2:db:84:20:9c:
55:5a:97:bd:35:a5:ec:e5:73:8b:d8:1b:af:38:4f:0c:77:ad:
e9:9d:24:0d:d4:e3:24:54:09:de:9a:c6:30:0b:16:16:6d:54:
7b:d8:82:52:6e:a2:08:1d:03:b6:d3:55:c3:cf:16:31:41:5a:
cd:f0:08:7e:32:ae:9d:69:58:46:8e:75:79:50:00:56:52:fe:
34:cc:71:16:ef:2c:4b:31:d4:7c:a8:42:ea:4c:40:55:37:68:
57:26:66:f2:2f:2b:d9:fd:8a:de:e8:09:cf:1d:f7:42:12:9b:
0b:82:30:2a:54:e5:87:37:c1:d5:2c:0c:90:b7:20:42:e8:3b:
89:96:7b:53:16:60:ad:34:39:b3:10:7d:ed:1e:46:7c:93:0a:
1e:f4:6c:a7:7a:bd:a4:fb:97:f0:d4:a4:29:dd:8c:2c:85:5b:
35:0f:4c:9f:dc:61:c4:06:53:ce:2b:2f:37:8a:f9:aa:f7:02:
e7:04:e6:68:2f:b2:a7:4c:5b:3c:e1:94:80:a9:64:f1:9b:9a:
66:3a:87:bd:07:31:a3:00:09:90:c1:c0:68:0d:71:70:f2:5e:
67:ea:fa:d5:14:08:37:e4:0b:b6:47:c4:c8:eb:ea:c0:b6:fa:
cc:5d:66:b1
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTB/O6j6Zi82rK4HwSQ56kNExfAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFhOTdiOTdjYjIzYmNjYTVkMTg3ZjhlMmJkOGZhYWEw
M2I5OGQ2ZjAeFw0yNjA2MTUwMzQxMTFaFw0yNjA2MTYwNjAwMTFaMDMxMTAvBgNV
BAMTKEQ3QjM0QTIwODZGM0Q4NjQ0RDRCQzNEQ0FCRjhGRjVDODI2MjgwQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCidHh+UqFr5dqUc0AxBW3NfPUR
mHQVE3IrQNFAUSyhYSbWUNqrZQy+mMDM1udB//6871xRdgMJlX9JH5XKz5nh1Dr0
CkeGQ5x/1NR3YndWPniEeV2lmGTdylxw0rAqRsWr170bC1G8LZTwlylz5pX6sETV
j1t2uJonCmXRmDzGVhEcb7XBfiVtniv2WB+Egr7AdnVwyCZ2yN7G5TzjB0ye+jkM
3Y1X13BTBvstst8u85aD005TsYdoP4DQHwhwNM2GnY65p34N1xlnhgx9eZp6L8Az
2Lq+AY7MVylS98crL1ZVR80OX7GTcN0p8tqtj1N8j71NbF+C6AeiDJ7w4M0PAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU17NKIIbz2GRNS8Pcq/j/XIJigMQwHwYDVR0j
BBgwFoAUMal7l8sjvMpdGH+OK9j6qgO5jW8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGM3ZTZkODgtMGIzOS00YjY1LTkzN2EtYjEwMDQyNTQw
YjdiLzAvMzFBOTdCOTdDQjIzQkNDQTVEMTg3RjhFMkJEOEZBQUEwM0I5OEQ2Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01hbDdsOHNqdk1wZEdILU9LOWo2cWdP
NWpXOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YzdlNmQ4OC0w
YjM5LTRiNjUtOTM3YS1iMTAwNDI1NDBiN2IvMC8zMUE5N0I5N0NCMjNCQ0NBNUQx
ODdGOEUyQkQ4RkFBQTAzQjk4RDZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPcd736uPuwmlZK/LPLb
hCCcVVqXvTWl7OVzi9gbrzhPDHet6Z0kDdTjJFQJ3prGMAsWFm1Ue9iCUm6iCB0D
ttNVw88WMUFazfAIfjKunWlYRo51eVAAVlL+NMxxFu8sSzHUfKhC6kxAVTdoVyZm
8i8r2f2K3ugJzx33QhKbC4IwKlTlhzfB1SwMkLcgQug7iZZ7UxZgrTQ5sxB97R5G
fJMKHvRsp3q9pPuX8NSkKd2MLIVbNQ9Mn9xhxAZTzisvN4r5qvcC5wTmaC+yp0xb
POGUgKlk8ZuaZjqHvQcxowAJkMHAaA1xcPJeZ+r61RQIN+QLtkfEyOvqwLb6zF1m
sQ==
-----END CERTIFICATE-----
Generated at Thu Jun 25 09:34:30 2026 by rpki-client