Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File: 317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier: 6Za77O28ysiYYdEnLbLRtpY/8wzBFE2/p8m9xzhOMk8=
Subject key identifier: 10:89:98:F1:76:A0:86:AE:73:58:3D:50:5A:3D:F3:8B:BB:3C:7F:C1
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer: /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial: 2D40F276069B9E6898081C4EE2313A57249C4229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number: BA
Signing time: Thu 26 Mar 2026 01:04:56 +0000
Manifest this update: Thu 26 Mar 2026 00:59:56 +0000
Manifest next update: Fri 27 Mar 2026 04:00:56 +0000
Files and hashes: 1: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: ZFJUGmm4XRQYJw8/zZz/ry3nZvoZrCtxscbtafWyVOQ=)
2: AS207682.asa (hash: yNMgsZTlVBgZuwAny+gfftheJcltZQ2eLBjscmcmhhI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:40:f2:76:06:9b:9e:68:98:08:1c:4e:e2:31:3a:57:24:9c:42:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
Validity
Not Before: Mar 26 00:59:56 2026 GMT
Not After : Mar 27 04:00:56 2026 GMT
Subject: CN=108998F176A086AE73583D505A3DF38BBB3C7FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:30:ec:08:0a:6e:28:92:d2:7d:d5:d4:35:
75:f6:24:f5:05:ac:61:c4:c2:54:16:eb:29:a9:b8:
7e:4c:fc:88:e1:0d:92:6f:09:2b:60:27:a5:b2:17:
70:4d:2b:39:2f:4d:48:5d:d4:5a:76:b3:d1:24:98:
f7:ae:00:c0:55:a0:b4:1b:db:c6:a6:4e:91:41:0c:
ea:f6:c5:bd:70:5c:be:a2:b1:a8:44:8a:35:08:13:
11:45:1c:62:10:b3:2f:05:f6:4d:8b:99:87:46:d4:
ce:c9:28:02:af:06:20:e0:a5:f0:15:3b:c8:43:4f:
2c:c9:ab:33:3e:c0:bc:43:02:3a:20:d0:b5:5a:a1:
e2:45:e5:ce:74:d7:ba:64:ba:83:f2:0b:e7:31:71:
5e:c7:29:c1:3c:92:28:fd:dc:2a:df:52:5d:8a:35:
bd:12:4f:d1:61:aa:9f:ed:25:0d:bc:6e:4c:b1:f2:
5a:7a:55:25:0f:1f:49:2f:18:2e:c6:b5:18:ee:c2:
be:29:07:94:ab:ed:8f:8a:db:ca:da:ee:8d:84:c0:
5f:41:b6:48:3e:70:13:79:41:b7:bd:19:9d:6a:d1:
49:98:db:33:66:23:e5:14:c4:9b:7b:a1:74:59:d4:
34:77:cd:95:fb:44:c2:50:0a:b2:35:f8:67:f9:18:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:98:F1:76:A0:86:AE:73:58:3D:50:5A:3D:F3:8B:BB:3C:7F:C1
X509v3 Authority Key Identifier:
keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c8:18:38:02:c3:cb:2d:39:db:f8:0b:06:31:5e:58:c7:4a:
4d:c6:b3:85:ba:48:ef:5c:36:66:46:d4:4c:0f:f4:b5:88:de:
a4:15:f4:94:3f:de:8d:3f:a6:a4:90:3a:d1:1b:ec:dd:24:36:
49:6a:04:d9:0d:68:3a:e6:53:85:58:01:1f:1d:fd:cf:4a:ca:
cd:aa:e3:3f:0b:4d:88:15:29:3a:4e:9b:c5:98:d3:99:32:0c:
52:63:d8:bd:20:19:64:39:f7:b4:cb:0d:76:ce:a7:6c:7f:20:
19:7d:39:22:c3:82:a4:1b:27:f3:9b:8f:da:61:b6:44:95:dc:
a5:33:2c:0e:c0:ec:a5:0b:26:31:da:eb:59:46:d1:6e:a3:dc:
fe:18:a3:02:d2:ac:ed:61:71:aa:40:52:c0:62:78:a7:37:2c:
d0:cb:34:fb:e8:19:61:8d:02:46:96:70:d5:df:7c:97:98:b2:
70:37:fa:38:36:69:36:d1:67:9b:98:44:7f:b3:b3:22:d1:b4:
cd:20:71:83:d3:30:bc:0a:f4:ea:f6:d5:f6:6c:4a:3a:1f:b7:
f6:49:79:e5:e2:2c:ec:fd:a6:e1:2c:e4:69:3a:14:80:cf:c3:
e4:da:14:72:e0:f0:fe:11:d1:c0:e6:9f:e6:42:e2:18:4b:1c:
c0:7f:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:43 2026 by rpki-client