Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File: 317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier: kKZ3zwtzK5g1Nlo/c7Ta/F8YCt3kkKbX0OXTPEa1euY=
Subject key identifier: 7D:C9:AB:33:A0:59:C4:E2:B9:9F:80:7E:E3:34:22:5A:42:97:CC:3A
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer: /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial: 654E85B8BE4C0660E70A20AE1B652B14250A8BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number: FE
Signing time: Tue 12 May 2026 13:40:14 +0000
Manifest this update: Tue 12 May 2026 13:35:14 +0000
Manifest next update: Wed 13 May 2026 16:21:14 +0000
Files and hashes: 1: AS207682.asa (hash: fhh2Ure3D/HKdju+AW1OTNtro0XkWU+JYMcNSc6CWO0=)
2: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: TlxK4RgEYI0JEG3QX93/XM5A3Si/8awFVw0GQzFkrQM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:4e:85:b8:be:4c:06:60:e7:0a:20:ae:1b:65:2b:14:25:0a:8b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
Validity
Not Before: May 12 13:35:14 2026 GMT
Not After : May 13 16:21:14 2026 GMT
Subject: CN=7DC9AB33A059C4E2B99F807EE334225A4297CC3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:43:6f:07:c5:bf:41:d2:80:cb:13:28:2d:
5a:96:ac:b5:20:0a:c1:f6:4d:8f:4a:8a:22:39:55:
a2:c2:8a:bc:a3:e2:38:05:8c:05:8c:71:18:38:29:
c5:1e:d3:15:73:2a:a9:49:8c:d0:e1:c7:f7:48:06:
66:9a:34:dc:cc:cc:3c:9f:68:f5:5f:a8:41:5e:8d:
e3:ea:0e:b9:b5:c8:12:ef:36:ba:e0:97:42:40:81:
de:18:82:4f:2d:a3:7c:21:af:81:19:3a:fa:da:6d:
25:94:cf:cb:fa:45:b2:65:bd:18:3f:bd:68:20:d7:
84:e4:d1:a6:45:b3:3f:4d:73:76:d8:58:fc:31:7d:
96:32:22:62:50:50:02:c0:23:dc:ec:40:e7:71:7b:
1d:89:58:13:77:58:76:91:48:98:22:21:0e:5e:ee:
c3:81:3d:e3:a1:b8:df:b0:26:1d:4e:a0:6c:85:6f:
24:b0:8e:90:0e:29:da:e3:dc:2f:04:be:7a:53:ee:
43:ee:43:12:6c:ce:2c:5d:4d:e0:23:8e:90:13:1d:
ff:4e:e8:07:bb:c9:f4:69:ce:21:42:e7:aa:70:66:
14:9f:5c:97:46:dc:d1:05:c9:46:aa:51:e2:fc:54:
e1:3f:f1:3e:9d:4a:de:6f:79:b9:ef:72:17:4b:f4:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C9:AB:33:A0:59:C4:E2:B9:9F:80:7E:E3:34:22:5A:42:97:CC:3A
X509v3 Authority Key Identifier:
keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:94:10:70:fb:22:48:80:27:6f:03:c5:19:5c:a3:7c:06:d0:
3b:0c:68:51:4e:19:21:c4:f2:ba:db:58:62:c6:46:2e:f9:82:
7d:b1:ec:2a:97:29:1b:48:60:e1:52:9c:89:04:77:f9:78:d9:
85:53:96:68:19:f8:3a:5a:17:3b:f1:9c:a5:12:6f:a7:31:9c:
df:ee:55:7a:41:f0:a7:39:54:e4:19:67:16:f0:a1:8a:7d:5f:
6b:ee:04:48:d4:dc:b5:11:f1:7b:1c:05:21:7d:19:9c:a6:78:
25:14:6d:3f:b3:fc:3d:6f:35:77:7e:14:a3:51:93:e9:00:f5:
4c:ff:02:12:46:c1:01:c5:04:d9:40:74:6f:b9:f2:86:87:78:
44:b7:77:98:1a:84:76:61:41:65:06:28:33:78:f6:ed:bc:41:
28:ea:c0:8f:51:46:31:8e:fc:df:49:41:b0:30:b3:84:f6:59:
f6:e7:39:f1:a8:36:d3:6a:6a:0b:56:fc:78:76:b5:27:fc:4f:
5f:93:a4:f2:c8:d6:2b:21:e1:ba:39:06:0f:b0:13:46:18:5a:
3b:a1:fc:50:d9:43:6e:b6:27:f5:c3:c0:82:ae:68:a1:a8:44:
84:c2:60:b9:af:b4:75:96:e2:b2:dc:c3:19:62:64:fc:1e:9e:
c5:fd:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:54 2026 by rpki-client