Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File: 317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier: 629FVJeEHtKpFvI9jb0S2wneD24SpoySHq11K2kxqaM=
Subject key identifier: 51:99:CC:07:CE:79:F2:6F:97:8C:11:DA:43:DC:B3:30:A8:0F:79:E5
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer: /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial: 3343ADE780DAE01DC299ABE47C16E65822B1A03A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number: DA
Signing time: Fri 17 Apr 2026 15:20:09 +0000
Manifest this update: Fri 17 Apr 2026 15:15:09 +0000
Manifest next update: Sat 18 Apr 2026 16:26:09 +0000
Files and hashes: 1: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: 7TAolAElPcKDALHwdUvbX3Mn8JxSCrG7P2LKOu3Jabg=)
2: AS207682.asa (hash: yNMgsZTlVBgZuwAny+gfftheJcltZQ2eLBjscmcmhhI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:43:ad:e7:80:da:e0:1d:c2:99:ab:e4:7c:16:e6:58:22:b1:a0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
Validity
Not Before: Apr 17 15:15:09 2026 GMT
Not After : Apr 18 16:26:09 2026 GMT
Subject: CN=5199CC07CE79F26F978C11DA43DCB330A80F79E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:98:a0:ac:34:95:db:de:98:f6:c1:46:a7:
85:ff:95:04:27:b8:19:a4:7f:00:16:9e:67:99:9e:
a2:43:ef:f6:0c:ee:9d:7d:53:27:85:4a:0d:b1:0c:
48:19:b2:af:11:fe:94:8d:dd:0a:73:69:b9:cd:c6:
3a:41:c4:8c:60:bf:72:76:c3:c2:cf:d2:8f:b3:e6:
7d:5c:f3:b0:7e:52:cd:e0:a5:5b:f4:9f:70:f0:a5:
a5:b2:0e:3f:f6:00:03:be:32:32:3f:90:02:21:e3:
be:13:3e:68:ae:69:95:67:c5:6b:2f:39:a8:dc:93:
5e:87:46:fb:56:73:21:da:80:41:a2:af:a7:37:b9:
83:dc:97:84:5f:b7:3e:49:1e:9d:3e:8e:a7:95:18:
39:99:0f:62:44:f1:23:c3:1b:f6:d8:d5:1b:43:69:
89:a4:cd:43:48:dc:ce:7c:ad:74:2b:25:8b:6c:5a:
3b:b3:cc:09:6a:83:57:4d:01:55:16:c2:e3:35:03:
3b:65:1b:54:05:e4:7f:6d:fb:ed:69:2c:22:9c:9e:
aa:6b:3b:8f:04:ee:b3:7a:a4:c6:da:56:24:29:c1:
b6:70:dd:27:96:6a:41:2b:5f:50:47:bc:f6:6d:de:
ef:21:a1:4d:92:e8:b5:e2:59:7b:3d:6e:2e:63:0d:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:99:CC:07:CE:79:F2:6F:97:8C:11:DA:43:DC:B3:30:A8:0F:79:E5
X509v3 Authority Key Identifier:
keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2a:1d:ce:24:04:0f:5c:e1:39:79:89:7a:b7:93:9f:9e:7f:
1c:dd:07:b8:60:a1:99:7f:af:6a:05:47:a6:57:1b:99:b8:ce:
f2:3e:e5:70:ad:81:01:63:3e:f7:8f:0a:23:c1:8a:7d:8e:70:
45:c6:31:d9:03:17:fb:40:97:fd:fe:dc:de:ce:04:69:a1:18:
00:97:de:d6:c9:7d:51:86:0a:6b:6e:08:62:66:d5:38:3b:12:
26:63:df:48:19:48:d4:fd:ea:05:39:0d:dc:ac:2f:5a:6b:11:
1e:72:19:ce:11:b8:ca:ee:94:2f:cd:21:a7:ff:d1:ea:ba:17:
81:5b:7d:b3:67:9d:0d:2e:58:5a:c2:00:10:3e:9e:8e:f7:6f:
17:6e:92:f2:60:57:63:68:6e:72:9b:b2:40:de:e4:fe:a9:e2:
d1:56:9d:a2:d1:8b:f3:64:b8:d6:fa:5e:38:1d:c6:c5:87:3c:
2c:e2:91:67:a1:bc:b4:01:db:b6:0d:5b:c9:43:4c:f7:e0:b7:
09:7f:c9:c0:03:25:16:53:3f:be:c1:9d:1a:aa:1d:50:db:47:
05:1c:bd:f8:eb:80:ec:89:9a:4d:42:02:9a:5e:6e:10:93:65:
87:93:75:c6:9f:72:fd:c4:87:f4:c4:17:be:7c:57:f3:82:7f:
0e:eb:77:f7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUM0Ot54Da4B3CmavkfBbmWCKxoDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE3ZWRiMzQxMDA1OGUwODYyMTdjNTBmYjk3MDA5ZGRl
NzBhNmYxYTAeFw0yNjA0MTcxNTE1MDlaFw0yNjA0MTgxNjI2MDlaMDMxMTAvBgNV
BAMTKDUxOTlDQzA3Q0U3OUYyNkY5NzhDMTFEQTQzRENCMzMwQTgwRjc5RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyH5igrDSV296Y9sFGp4X/lQQn
uBmkfwAWnmeZnqJD7/YM7p19UyeFSg2xDEgZsq8R/pSN3QpzabnNxjpBxIxgv3J2
w8LP0o+z5n1c87B+Us3gpVv0n3DwpaWyDj/2AAO+MjI/kAIh474TPmiuaZVnxWsv
Oajck16HRvtWcyHagEGir6c3uYPcl4Rftz5JHp0+jqeVGDmZD2JE8SPDG/bY1RtD
aYmkzUNI3M58rXQrJYtsWjuzzAlqg1dNAVUWwuM1AztlG1QF5H9t++1pLCKcnqpr
O48E7rN6pMbaViQpwbZw3SeWakErX1BHvPZt3u8hoU2S6LXiWXs9bi5jDZsHAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUUZnMB8558m+XjBHaQ9yzMKgPeeUwHwYDVR0j
BBgwFoAUMX7bNBAFjghiF8UPuXAJ3ecKbxowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2
YWJmLzMvMzE3RURCMzQxMDA1OEUwODYyMTdDNTBGQjk3MDA5RERFNzBBNkYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01YN2JOQkFGamdoaUY4VVB1WEFKM2Vj
S2J4by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03
ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMy8zMTdFREIzNDEwMDU4RTA4NjIx
N0M1MEZCOTcwMDlEREU3MEE2RjFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCodziQED1zhOXmJereT
n55/HN0HuGChmX+vagVHplcbmbjO8j7lcK2BAWM+948KI8GKfY5wRcYx2QMX+0CX
/f7c3s4EaaEYAJfe1sl9UYYKa24IYmbVODsSJmPfSBlI1P3qBTkN3KwvWmsRHnIZ
zhG4yu6UL80hp//R6roXgVt9s2edDS5YWsIAED6ejvdvF26S8mBXY2hucpuyQN7k
/qni0VadotGL82S41vpeOB3GxYc8LOKRZ6G8tAHbtg1byUNM9+C3CX/JwAMlFlM/
vsGdGqodUNtHBRy9+OuA7ImaTUICml5uEJNlh5N1xp9y/cSH9MQXvnxX84J/Dut3
9w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:50:00 2026 by rpki-client