Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File: 317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier: R6cwPaNAXWVjhVFlDkz7vhzGR0fcn+dOtwWdxucEd8U=
Subject key identifier: DE:82:25:84:6E:74:B8:E6:7C:44:3E:99:59:92:04:96:24:C4:5D:F5
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer: /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial: 2FF0607E915492A3E1769FAF7FFA0FDC9DBAC346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number: 0172
Signing time: Tue 28 Jul 2026 08:31:48 +0000
Manifest this update: Tue 28 Jul 2026 08:26:48 +0000
Manifest next update: Wed 29 Jul 2026 09:23:48 +0000
Files and hashes: 1: AS207682.asa (hash: 7devBP0cyMapHDrObHNB1aOL7sdvquPHiL3KXnHdnos=)
2: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: pWeYajbaEgGkLZpPw7XPYulZIb5qdoGIUTQ+CO+4oXo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:f0:60:7e:91:54:92:a3:e1:76:9f:af:7f:fa:0f:dc:9d:ba:c3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
Validity
Not Before: Jul 28 08:26:48 2026 GMT
Not After : Jul 29 09:23:48 2026 GMT
Subject: CN=DE8225846E74B8E67C443E995992049624C45DF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:ad:04:a5:32:89:8e:ad:37:1f:d6:92:8c:
33:f3:f1:c7:e8:4d:79:e3:b5:51:c2:68:08:c3:ce:
b0:a9:f6:7f:df:ae:4c:f6:ba:19:42:db:fd:e2:f7:
ba:ae:48:1f:1d:04:85:d4:ad:66:9d:9a:0f:a9:26:
93:b8:68:94:1c:f2:31:01:fa:58:09:1c:bd:14:11:
c2:08:40:82:79:ee:de:be:bc:d7:40:31:9f:dc:0e:
24:dd:61:5e:ec:53:55:50:f8:a9:57:1c:4e:d7:dd:
1f:ce:b1:9d:c1:3a:dc:e8:3f:ee:53:8a:f5:3f:77:
72:83:36:e4:8f:04:3b:a0:54:b2:95:e1:bc:85:1f:
d5:6e:e8:4d:d3:35:3b:77:26:df:5b:4e:07:02:df:
f4:22:c2:73:25:5e:bc:80:3f:24:46:51:c9:07:3b:
f7:eb:50:e9:13:6b:b7:64:e5:44:6d:48:44:c1:fc:
50:36:99:2a:26:5d:a7:a9:7f:d3:7f:73:c1:af:ea:
29:30:86:a3:12:76:bc:9b:f9:cb:57:40:77:e1:07:
4f:fb:bd:8c:e4:c8:b5:1e:05:90:77:01:87:6f:a2:
f6:ba:a5:cd:af:dc:61:72:2c:c3:56:9a:f6:37:f4:
9b:1e:10:7c:6d:a6:5a:09:bf:17:6e:eb:bc:77:be:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:82:25:84:6E:74:B8:E6:7C:44:3E:99:59:92:04:96:24:C4:5D:F5
X509v3 Authority Key Identifier:
keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:39:29:0f:f2:c7:07:8b:1a:3e:03:9d:32:1c:6a:e9:af:70:
2e:e9:cb:9b:4c:4f:3a:00:fc:1b:57:01:cf:55:17:6c:aa:1a:
20:ab:71:60:1b:1f:ed:b1:e1:f3:d1:0d:74:93:a8:26:5e:c5:
4f:49:9a:8d:f8:b1:ce:9c:64:53:4c:85:d9:e9:aa:9f:58:63:
5c:23:81:33:38:32:c9:5e:dd:3b:17:8c:b0:87:04:9b:83:04:
18:cc:26:f5:8f:71:a6:3e:8f:8a:84:07:9f:db:2a:d9:99:b5:
db:5b:ba:c8:3f:5c:b3:16:24:44:b3:19:58:dd:c1:eb:fb:fc:
4e:27:fb:48:a6:39:ba:17:a8:89:16:4d:d6:95:fe:e8:c3:71:
26:2a:fc:b1:8b:8b:bb:9d:b2:d1:b2:a6:d4:cf:1b:82:be:e4:
b5:72:f2:f8:e1:72:4c:6e:f4:cc:e5:cf:5c:e9:39:e8:8a:9b:
e9:79:32:3f:6c:ef:19:bc:6c:fa:3c:39:85:2d:1f:46:51:c3:
d5:6d:c6:97:94:62:ac:e5:ef:3e:a9:bd:4d:a6:e4:75:4c:e0:
8b:28:b5:11:df:52:b2:a7:de:a8:69:0b:45:99:92:6b:27:31:
23:c3:7a:1b:01:c2:17:92:f5:55:83:9d:bb:75:40:ad:c9:6f:
c0:d4:30:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:52:47 2026 by rpki-client