Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File: 317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier: Ewr2oSUEu2WJRr2TxnanOEE4WQP5wnCbwjXLqpKBD8o=
Subject key identifier: B8:7E:52:63:25:BE:44:30:1D:50:69:47:BE:16:6F:7D:4E:8D:CA:7A
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer: /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial: 44AB72C9DE37B77DEBA510CCF403901325BAB9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number: 95
Signing time: Sun 01 Mar 2026 09:19:46 +0000
Manifest this update: Sun 01 Mar 2026 09:14:46 +0000
Manifest next update: Mon 02 Mar 2026 11:52:46 +0000
Files and hashes: 1: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: PuiPDw4FMO/PX4ydg8cIZG71Fa4QZAMq7HZPgDHuMdg=)
2: AS207682.asa (hash: yNMgsZTlVBgZuwAny+gfftheJcltZQ2eLBjscmcmhhI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 11:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ab:72:c9:de:37:b7:7d:eb:a5:10:cc:f4:03:90:13:25:ba:b9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
Validity
Not Before: Mar 1 09:14:46 2026 GMT
Not After : Mar 2 11:52:46 2026 GMT
Subject: CN=B87E526325BE44301D506947BE166F7D4E8DCA7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:de:4e:5d:73:e7:6e:76:4d:6a:e4:29:b4:7d:
60:ed:1f:ac:cb:2a:d3:95:6b:7d:24:9c:4e:6c:a5:
c3:40:0a:98:60:05:34:27:85:34:66:d7:b8:fe:9b:
8f:8c:9f:f7:9f:a4:57:7c:ff:8f:9b:c6:06:08:2d:
89:90:a3:3b:93:2e:e7:09:99:b4:da:77:f7:6a:47:
e9:07:d2:b7:96:37:2a:71:49:27:29:85:a7:ad:64:
b0:af:72:5d:90:5a:22:25:47:22:51:7e:c5:25:0b:
8c:4f:15:7b:1c:77:71:0e:7a:64:35:20:33:3b:b3:
79:ca:56:cf:2d:a6:14:e5:27:16:d6:85:60:5e:1a:
bb:8b:b9:4b:d8:e9:f5:ef:7b:67:41:32:64:88:a8:
b2:69:55:ff:e1:a7:c8:32:b0:be:3c:c9:06:63:cc:
50:a8:63:56:a4:99:f9:4f:dc:4f:dd:a9:eb:ef:44:
d4:20:db:de:3e:ae:bd:e6:b6:ba:86:fc:d5:1e:9b:
b9:cd:8f:53:f2:70:2b:97:1e:19:25:ce:c6:4d:88:
a5:93:13:30:b5:43:bb:86:78:9f:81:99:05:8e:ff:
de:17:aa:7d:f3:56:04:2e:b3:ec:2c:b6:ea:6c:c7:
6b:a4:97:28:1b:71:a1:e9:a3:50:dc:31:3e:8e:5e:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7E:52:63:25:BE:44:30:1D:50:69:47:BE:16:6F:7D:4E:8D:CA:7A
X509v3 Authority Key Identifier:
keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:14:93:4e:82:79:5a:e7:4e:cb:d9:e2:b4:2a:0d:04:d4:b2:
14:2c:88:20:fa:67:2d:ea:be:85:d4:0a:5a:fc:59:ca:a4:10:
57:5a:b7:e5:1b:cc:3b:bc:f0:69:cf:88:9b:01:b3:9a:ce:96:
c0:35:cc:e5:ac:60:df:f8:fc:7c:b4:db:2d:10:ed:2f:39:ee:
d9:c7:9f:47:5a:96:7d:c9:c0:b2:37:48:d8:c6:66:b8:36:6a:
0c:8d:fc:8b:37:9f:46:b7:c8:df:9e:5c:4f:f9:91:ae:73:2a:
af:e5:24:cd:ec:b4:ef:3f:84:64:43:e3:2f:cb:f9:13:e2:8b:
22:e6:c9:58:94:b4:84:5b:8c:7d:55:f5:cd:da:4d:a9:9e:33:
74:d1:58:6b:7d:b9:af:ab:88:c5:fc:28:6f:df:6d:47:ee:a0:
46:6a:b0:5f:32:55:a0:2c:b5:44:7f:ae:24:4a:a3:2f:29:5b:
85:c1:a5:5d:47:a0:73:4d:86:0f:db:5d:72:df:1a:37:1f:6d:
e8:ca:78:a6:b4:5c:29:42:b8:cd:29:4f:b4:38:40:0d:3d:5f:
1b:37:bd:7c:4f:b9:f6:54:89:3d:cc:99:53:e7:83:b5:c9:39:
c1:ae:84:f8:c2:8f:98:7a:e0:35:f0:26:c9:83:3f:b8:e1:fc:
10:18:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:42 2026 by rpki-client