Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: aWNqExyA8MyOEppREPONjVSero8RAp241vqA5NzLgb8=
Subject key identifier: D2:E4:63:60:17:BB:23:36:98:8D:DD:A6:D0:B8:03:4B:E0:99:CA:46
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 356C8489DF787CC17DA547D1D809EC5B39C1AF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 0470
Signing time: Sat 26 Sep 2026 12:06:06 +0000
Manifest this update: Sat 26 Sep 2026 12:01:06 +0000
Manifest next update: Mon 28 Sep 2026 13:11:06 +0000
Files and hashes: 1: AS44355.asa (hash: jTQliZxgVlJWQCTLHvozwV5P3KAoGG8bCYGwmSr62sw=)
2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: QOGolhQjSt5jDMgwHLb/10KZO8L+NlOTMQ3PzvuAvuI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:6c:84:89:df:78:7c:c1:7d:a5:47:d1:d8:09:ec:5b:39:c1:af:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Sep 26 12:01:06 2026 GMT
Not After : Sep 28 13:11:06 2026 GMT
Subject: CN=D2E4636017BB2336988DDDA6D0B8034BE099CA46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:35:a3:7c:13:34:c3:83:91:ab:42:f1:bb:af:
99:be:ee:95:7d:5b:f0:90:05:ba:1a:83:44:bb:67:
17:66:da:7e:ad:2c:e9:15:98:f8:5b:65:b6:5f:1f:
fb:2a:48:2a:0d:ce:05:79:95:92:3b:7d:44:a6:b7:
df:d7:95:fa:ea:6a:72:ac:af:f4:75:2c:32:d7:83:
27:1b:86:90:34:7c:8d:1a:41:f2:2c:15:98:64:db:
63:d3:95:d5:d8:e5:15:92:d3:bf:89:f2:7c:75:02:
34:9a:a8:ba:38:ad:fb:29:1b:f8:5a:58:0e:2a:cd:
ab:29:3f:b2:f2:6d:95:e8:7b:d0:11:b2:05:42:4a:
8f:e4:ce:79:7b:91:ff:3a:d9:33:cd:48:09:c7:79:
10:fd:c0:c4:e3:4a:6d:ca:4f:a0:5c:ae:0a:4a:7a:
78:47:e2:8e:a2:58:66:0a:08:84:53:c1:5b:bc:53:
ae:1d:e5:77:ff:aa:86:0d:14:ff:8b:6f:63:4a:49:
85:ca:fe:5c:80:dd:d2:d4:37:9d:a2:79:cc:65:a5:
70:be:bc:6a:6b:18:a8:82:06:1b:d7:89:df:49:48:
aa:60:a5:66:f7:f8:67:75:03:2a:97:91:a4:72:08:
aa:c1:50:ba:0e:ba:f8:1a:43:d6:25:4c:a5:1b:80:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E4:63:60:17:BB:23:36:98:8D:DD:A6:D0:B8:03:4B:E0:99:CA:46
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:50:75:ca:53:ac:26:fd:a1:2f:0b:3d:7e:57:24:dc:29:6d:
76:d4:79:f7:30:42:a8:44:69:74:6c:56:84:e8:de:75:53:ab:
0b:df:fb:74:df:8a:c0:77:14:5a:1b:a3:c1:1d:c2:54:fc:a0:
55:e3:1d:29:47:69:3a:27:69:cb:44:50:92:1b:67:a7:58:b9:
57:00:49:e8:ed:ed:ad:72:88:45:a4:7b:24:ac:3c:2d:55:42:
ef:e2:2c:2d:ca:02:7d:b2:10:69:ff:f7:45:80:ae:dd:46:28:
3e:fb:65:43:8a:f0:60:5a:b4:91:55:75:ec:c5:2c:61:0e:31:
4c:e6:a1:13:19:cc:07:b6:65:05:47:8b:84:fa:74:2f:ed:41:
aa:24:22:29:91:3f:87:df:fe:06:37:16:43:52:14:18:4c:14:
42:ee:7b:58:91:24:9e:6d:6d:8b:17:8f:78:1a:23:54:4f:11:
5a:79:4f:8d:b1:b0:02:8c:26:b8:db:02:a8:8f:c9:20:9a:6c:
13:d0:63:97:d4:bf:24:a5:0b:06:02:36:d6:fc:27:8d:34:bc:
72:c3:26:f5:4f:d8:17:05:cc:f7:d0:5c:68:bd:d4:73:a3:49:
84:c1:62:1c:9b:88:41:65:cc:16:b8:76:f7:c6:5f:fc:12:31:
e0:62:23:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:27:27 2026 by rpki-client