Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File: 317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier: kx30asXADoPcf944yQTvLfRxW9HsDBOQXMGjeB4ifYY=
Subject key identifier: BA:3C:5A:03:F8:7B:27:B1:5A:03:54:E6:39:C2:7B:49:A7:BE:19:29
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer: /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial: 06FAC11599274911FBA87ECC2DE1D802F9A40106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number: 01E9
Signing time: Sun 11 Oct 2026 04:53:32 +0000
Manifest this update: Sun 11 Oct 2026 04:48:32 +0000
Manifest next update: Mon 12 Oct 2026 07:01:32 +0000
Files and hashes: 1: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: nYABlrY3Sb+MgKCA0fzyjO+rG1yjG2hNj9IjeM9z/g8=)
2: AS207682.asa (hash: FUZg42v9EHyvcEXvRaGXReUAPHPlAelEZVsqlXZS/XA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:fa:c1:15:99:27:49:11:fb:a8:7e:cc:2d:e1:d8:02:f9:a4:01:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
Validity
Not Before: Oct 11 04:48:32 2026 GMT
Not After : Oct 12 07:01:32 2026 GMT
Subject: CN=BA3C5A03F87B27B15A0354E639C27B49A7BE1929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:20:cb:7d:a1:35:57:28:83:e7:ac:78:17:
87:6f:16:04:aa:ad:e6:e5:cd:e4:04:5c:6d:16:84:
4b:ef:72:5b:b7:3c:2c:73:ad:7b:a4:b8:3d:ff:eb:
93:69:16:c2:15:e6:c2:45:19:66:d5:c3:5e:47:79:
cf:f5:ad:1c:c7:ac:05:7d:96:68:47:45:a8:bf:5f:
cb:c2:66:c1:df:17:bc:3f:a3:0c:64:b5:aa:d9:d3:
f8:da:27:67:84:27:a1:37:1b:a6:9d:dd:aa:b9:33:
f8:b3:93:2f:b5:3d:d6:e4:be:e4:27:02:ba:97:f0:
42:46:a8:ab:ce:df:72:2e:eb:ab:ea:f7:8c:5b:fe:
67:18:cb:12:75:97:9f:62:ac:40:a8:71:c5:9c:53:
7a:9f:0f:74:74:6d:33:47:cb:25:01:88:f3:3c:ad:
f9:b5:71:ed:49:a2:b7:a0:ec:c8:29:80:41:f1:ed:
f5:ee:71:52:9f:b2:76:1d:b5:2a:6a:b8:e2:9d:20:
9a:f4:38:36:4f:19:cf:ba:85:0f:df:54:47:76:65:
9f:29:ef:2d:e4:48:79:77:6b:3a:ab:4a:0f:1d:81:
62:a6:a0:a7:fb:2e:95:be:d7:e1:b6:54:50:6a:d9:
15:7f:f3:23:48:a3:70:be:40:12:76:94:a8:17:f8:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3C:5A:03:F8:7B:27:B1:5A:03:54:E6:39:C2:7B:49:A7:BE:19:29
X509v3 Authority Key Identifier:
keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:76:9f:f0:db:a4:30:15:fa:ca:5b:39:54:39:a6:a9:a4:c4:
f0:59:fb:f2:14:40:c0:83:e4:ec:78:8e:6b:72:2f:7f:37:ad:
1e:e8:cb:75:42:44:29:19:2e:fc:b6:e2:70:02:b4:c1:af:3a:
2d:3d:60:69:cc:e1:0c:03:18:c3:9f:d4:2a:a5:fb:b7:e1:a7:
eb:c4:32:66:28:2d:fd:e3:29:72:06:4f:c8:b5:0f:77:35:80:
bc:12:ef:3c:8a:4a:8b:99:ee:38:cc:e1:b5:e6:8b:96:1d:54:
0a:25:30:f2:29:9d:04:2a:e8:38:82:66:8d:10:bb:d0:34:28:
6d:e3:e4:7d:fc:e0:5a:0b:9d:46:fb:36:d6:9b:4d:bb:00:25:
ec:6e:a5:45:38:9b:c1:82:76:70:d1:33:29:d1:81:f3:aa:ce:
fe:c3:e3:da:36:b2:53:14:c2:1d:81:19:2b:98:71:af:db:0c:
bf:fc:fa:27:60:6a:f0:7f:3f:2b:41:26:cf:30:3c:43:1d:2e:
26:f1:b0:95:3f:f0:a8:14:9d:0a:04:3d:2d:84:e7:c7:fa:ae:
c5:ff:57:aa:16:b5:26:a0:0d:6c:a9:c2:52:71:23:36:8d:a8:
e5:ca:44:e7:bd:fb:81:67:35:07:dd:50:0b:73:a7:14:95:9b:
e5:5c:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:15:46 2026 by rpki-client