Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: KP8KU1hw7b3P9It/oVhaj4UWXKE1jQo24Bd0XFt1QQo=
Subject key identifier: B1:6A:95:C0:AE:8C:5F:44:C4:3C:EE:9F:67:C9:E6:A2:3F:94:1B:3D
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 25A7A7C76BE301CAFD080A0159CB088EDB48CD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 031B
Signing time: Wed 25 Mar 2026 03:08:30 +0000
Manifest this update: Wed 25 Mar 2026 03:03:30 +0000
Manifest next update: Fri 27 Mar 2026 07:01:30 +0000
Files and hashes: 1: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: GZ3U/QjfKHdYUnqIRydVSfxBUZiSDs0bC16pn9ZuqxE=)
2: AS44355.asa (hash: jTQliZxgVlJWQCTLHvozwV5P3KAoGG8bCYGwmSr62sw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a7:a7:c7:6b:e3:01:ca:fd:08:0a:01:59:cb:08:8e:db:48:cd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Mar 25 03:03:30 2026 GMT
Not After : Mar 27 07:01:30 2026 GMT
Subject: CN=B16A95C0AE8C5F44C43CEE9F67C9E6A23F941B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:95:c2:54:74:d5:c7:9c:d3:66:80:f2:e4:
68:94:1f:4d:a6:68:c1:d6:b2:e6:2d:54:ad:97:84:
12:7c:cc:6e:f4:84:49:28:ed:cd:71:98:98:77:1a:
3f:e9:75:7e:e3:4f:c7:f6:aa:e0:8f:46:9a:1f:1c:
9f:48:6f:ce:5c:f2:c3:c3:79:f0:d2:04:e0:ea:ab:
54:0c:40:c8:1d:a5:f5:13:10:10:5b:c6:08:f0:d8:
dc:64:09:ef:8a:be:7d:93:db:c0:8f:57:6e:ba:c9:
26:70:42:ff:66:bb:f5:17:91:37:21:16:a1:49:1f:
e6:78:8b:d7:4f:d8:24:da:0f:92:41:a4:1a:c5:61:
ce:2b:75:bf:a5:f2:f5:aa:c1:33:97:01:39:e4:dd:
ac:c3:77:75:e9:5a:07:f1:c3:ea:88:f3:c6:d5:d8:
e9:9e:5e:a2:74:2e:e3:6a:1b:63:e8:c5:51:54:45:
45:94:77:ee:fb:12:ae:cc:32:55:6c:12:98:0e:76:
25:f3:35:da:f1:b1:3d:a7:08:66:eb:b0:f0:d4:41:
9c:72:33:5d:35:39:0e:b1:f7:4a:41:79:c3:81:cd:
03:8a:b9:82:82:ec:15:ac:65:9b:0c:f9:11:0c:21:
80:73:40:4e:20:7d:59:56:82:ae:67:8c:bf:7a:51:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6A:95:C0:AE:8C:5F:44:C4:3C:EE:9F:67:C9:E6:A2:3F:94:1B:3D
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2c:7f:3e:f7:17:be:fa:6b:1f:6f:76:bb:33:57:a9:32:84:
7e:25:fc:44:4b:fd:40:ac:98:20:84:d7:e5:04:a0:3a:d4:50:
b9:de:72:d9:c7:be:31:b6:9c:64:4e:ce:44:54:0b:da:e2:2e:
cb:dc:c7:88:9d:e2:1c:1b:66:1a:71:aa:6d:26:58:39:8d:d3:
f3:26:9a:ac:4b:01:d5:a4:9b:6c:b1:18:b9:9f:02:12:e4:ed:
be:9e:c6:4c:5b:fb:eb:41:6c:36:3b:34:42:6e:0f:4b:ae:a3:
77:fc:f1:11:b1:48:f8:80:cf:a1:88:2c:1c:14:31:c6:6b:75:
21:3e:4d:43:a1:ca:b1:63:7d:29:cc:a4:d1:b3:24:ba:99:89:
a2:94:3f:4e:d6:95:fb:7f:e3:14:3d:c6:8a:55:19:8e:76:15:
a1:e4:e7:3a:bf:84:42:a3:c7:dd:2a:aa:f6:1c:7f:48:f0:23:
55:7a:d5:46:72:23:24:94:48:cf:e7:ef:e2:75:6d:51:73:c9:
5b:52:21:8c:17:dc:c4:26:fb:54:4e:cb:6c:26:9f:8f:72:f7:
bc:04:4f:e0:d8:84:cb:3c:7e:7f:04:14:3a:77:30:db:b7:68:
56:1c:a0:8c:59:99:d7:46:4b:78:fc:2d:1d:24:65:d7:34:d0:
2e:fc:92:32
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJaenx2vjAcr9CAoBWcsIjttIzXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWRmZmQ0Nzc4NTdkMWU5YmU5NWI4MjcxN2E0MjdmMzVh
ZmE5YTdkNjAeFw0yNjAzMjUwMzAzMzBaFw0yNjAzMjcwNzAxMzBaMDMxMTAvBgNV
BAMTKEIxNkE5NUMwQUU4QzVGNDRDNDNDRUU5RjY3QzlFNkEyM0Y5NDFCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTn5XCVHTVx5zTZoDy5GiUH02m
aMHWsuYtVK2XhBJ8zG70hEko7c1xmJh3Gj/pdX7jT8f2quCPRpofHJ9Ib85c8sPD
efDSBODqq1QMQMgdpfUTEBBbxgjw2NxkCe+Kvn2T28CPV266ySZwQv9mu/UXkTch
FqFJH+Z4i9dP2CTaD5JBpBrFYc4rdb+l8vWqwTOXATnk3azDd3XpWgfxw+qI88bV
2OmeXqJ0LuNqG2PoxVFURUWUd+77Eq7MMlVsEpgOdiXzNdrxsT2nCGbrsPDUQZxy
M101OQ6x90pBecOBzQOKuYKC7BWsZZsM+REMIYBzQE4gfVlWgq5njL96USbJAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUsWqVwK6MX0TEPO6fZ8nmoj+UGz0wHwYDVR0j
BBgwFoAUrf/Ud4V9HpvpW4JxekJ/Na+pp9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzIvQURGRkQ0Nzc4NTdEMUU5QkU5NUI4MjcxN0E0MjdGMzVBRkE5QTdENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JmX1VkNFY5SHB2cFc0Snhla0pfTmEt
cHA5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x
OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvMi9BREZGRDQ3Nzg1N0QxRTlCRTk1
QjgyNzE3QTQyN0YzNUFGQTlBN0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyx/PvcXvvprH292uzNX
qTKEfiX8REv9QKyYIITX5QSgOtRQud5y2ce+MbacZE7ORFQL2uIuy9zHiJ3iHBtm
GnGqbSZYOY3T8yaarEsB1aSbbLEYuZ8CEuTtvp7GTFv760FsNjs0Qm4PS66jd/zx
EbFI+IDPoYgsHBQxxmt1IT5NQ6HKsWN9Kcyk0bMkupmJopQ/TtaV+3/jFD3GilUZ
jnYVoeTnOr+EQqPH3Sqq9hx/SPAjVXrVRnIjJJRIz+fv4nVtUXPJW1IhjBfcxCb7
VE7LbCafj3L3vARP4NiEyzx+fwQUOncw27doVhygjFmZ10ZLePwtHSRl1zTQLvyS
Mg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:10 2026 by rpki-client