Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: 8TUsj3CNITKRtvXjuOO5Ve1vKIvFdFEZnol95m0USvE=
Subject key identifier: 6D:1C:7B:98:89:3B:DA:B0:98:5A:D1:D0:88:FE:D6:D9:B1:E9:CB:A3
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 36CBC7CCE3F543A59F51A53BAD2E71FB893891C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 031C
Signing time: Thu 26 Mar 2026 04:28:53 +0000
Manifest this update: Thu 26 Mar 2026 04:23:53 +0000
Manifest next update: Sat 28 Mar 2026 05:58:53 +0000
Files and hashes: 1: AS44355.asa (hash: jTQliZxgVlJWQCTLHvozwV5P3KAoGG8bCYGwmSr62sw=)
2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: tP1n+3JVIYrI07rzQKTtboLWe9CV0wQoh6BrE/D9DJ4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:cb:c7:cc:e3:f5:43:a5:9f:51:a5:3b:ad:2e:71:fb:89:38:91:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Mar 26 04:23:53 2026 GMT
Not After : Mar 28 05:58:53 2026 GMT
Subject: CN=6D1C7B98893BDAB0985AD1D088FED6D9B1E9CBA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:a1:31:31:35:eb:26:a4:d4:79:48:6d:22:
07:ed:f4:18:cf:2d:36:ab:25:c3:2a:4d:6e:fb:49:
a4:a2:f9:d6:de:8c:73:46:0e:38:f0:42:17:2e:86:
64:05:16:5c:47:1f:50:08:2c:91:a1:93:66:6a:fd:
01:42:58:fb:a1:91:9a:ea:1f:0f:71:41:7d:c7:0d:
95:de:b6:86:fb:ed:91:1e:96:ad:d3:aa:1f:e6:81:
10:c8:8e:a5:b8:ac:b2:47:6f:5a:d7:5d:59:d7:18:
af:09:39:d9:19:b9:2d:04:ec:76:00:01:6c:56:d7:
d6:8c:6b:16:06:28:0b:4e:68:e2:74:49:3f:d9:f2:
a2:9f:2b:9b:22:04:d3:a4:69:e2:a6:75:19:9b:6e:
29:b0:6c:41:aa:c6:36:64:49:ef:8b:bb:d5:d5:e0:
92:8f:6e:26:08:ee:4b:e8:e4:13:78:ed:24:b7:e7:
df:82:26:a4:be:e5:cb:1a:35:72:5c:16:9c:33:5e:
65:68:7b:b5:a3:21:e3:b1:ec:a2:17:22:3b:3f:ef:
b7:b2:ed:e4:95:77:3b:66:ca:36:18:56:71:f6:96:
c2:7e:fb:30:26:c0:44:1e:e6:ff:f2:bc:96:cc:d3:
de:cf:96:fe:29:64:28:67:e2:ed:65:f9:d7:75:9e:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1C:7B:98:89:3B:DA:B0:98:5A:D1:D0:88:FE:D6:D9:B1:E9:CB:A3
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8e:46:9a:f0:ad:4c:c1:ca:1a:44:f0:c2:3d:78:b8:fd:8a:
b8:25:0d:a0:36:71:bc:2d:f5:f8:14:62:dc:1d:a0:7f:0b:bc:
f6:4b:21:e5:2a:5b:37:38:ca:a4:8e:db:28:fe:d9:69:15:ed:
66:0e:ca:b4:9a:09:c5:90:37:9b:35:73:ac:a0:da:31:9c:5c:
c4:f2:54:22:ca:7f:8c:d2:ad:a8:b9:5c:51:8f:00:12:b5:d5:
a0:bc:1b:f1:22:f5:44:46:f2:ac:26:d9:1c:d8:5a:d4:da:41:
24:3e:c9:4a:08:9a:e0:3e:a6:84:94:14:a4:0b:61:17:8b:bd:
f7:a8:f6:ac:23:66:5a:a4:cd:a8:79:ad:33:0e:1e:ff:cb:08:
18:af:63:fd:09:fb:dd:0c:24:13:c5:33:9e:5a:1c:d3:64:02:
a7:dc:bc:85:50:fe:40:4f:bf:b9:02:e0:6e:fc:a4:f2:fa:89:
2e:c8:32:e5:60:06:a5:62:74:ca:00:ac:c8:e5:1a:71:09:8b:
02:f1:e4:2f:a8:43:b3:81:71:fa:f0:58:be:8b:14:f4:ff:2e:
3b:86:69:3e:6e:08:40:a3:ce:0c:15:e4:9f:43:f5:3e:7e:aa:
92:f4:ff:79:1d:2e:8d:55:d6:72:31:a8:12:b4:b7:ef:51:55:
4f:33:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:57 2026 by rpki-client