Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier: narSsCkswRcx5RM67vA7T+EYjHHxQUDjV7eVtiFp3sc=
Subject key identifier: 1F:18:44:2A:E1:C5:68:A7:F6:AD:BF:EE:D9:47:C1:EB:70:42:23:AD
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer: /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial: 2405730C0DDAA61AEBE339E1E5BD9C9F6363ED8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number: 02F6
Signing time: Mon 02 Mar 2026 06:05:10 +0000
Manifest this update: Mon 02 Mar 2026 06:00:10 +0000
Manifest next update: Wed 04 Mar 2026 06:23:10 +0000
Files and hashes: 1: AS44355.asa (hash: jTQliZxgVlJWQCTLHvozwV5P3KAoGG8bCYGwmSr62sw=)
2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: D1PDCeu7EAmjeNBdCnOyOo+xHort5EVQy/Z21ASTC1o=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:05:73:0c:0d:da:a6:1a:eb:e3:39:e1:e5:bd:9c:9f:63:63:ed:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Validity
Not Before: Mar 2 06:00:10 2026 GMT
Not After : Mar 4 06:23:10 2026 GMT
Subject: CN=1F18442AE1C568A7F6ADBFEED947C1EB704223AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:a0:35:81:a7:7c:15:6b:44:c8:c2:f8:f6:
c6:58:d6:f0:0f:a1:f7:8d:15:b3:45:4b:01:4b:df:
51:b9:77:36:ac:1b:f6:25:32:ec:08:9d:dd:26:a5:
cd:bb:94:c2:cd:ac:20:c8:a8:93:77:6d:a3:6d:6d:
ed:09:a6:e0:b9:f6:ba:e1:ca:12:a9:8a:07:d4:e3:
b2:d2:5d:e5:ec:a0:f5:e7:86:f6:60:19:9a:ee:e0:
28:1e:1c:4d:f6:92:f6:c7:8b:58:72:30:3f:96:bd:
a4:aa:8d:f5:3e:8d:5c:17:c7:52:f5:4a:af:da:98:
64:3c:de:6f:b0:c1:36:a1:26:12:b6:21:3e:c2:26:
1d:43:b3:ca:4c:c1:8e:0e:ce:ad:d9:e1:ee:96:d6:
f8:8c:dc:a1:e2:ab:0c:cb:8f:cf:bc:c6:2d:a4:87:
c1:dc:66:a8:d3:f4:c2:e4:e2:85:c1:f9:d4:66:4b:
c2:63:80:72:0f:0a:95:ba:13:b8:3c:66:42:76:5b:
c6:bb:61:d4:b6:7f:74:27:33:29:02:40:15:69:04:
9a:9c:31:e7:f2:7b:80:85:3b:2e:a1:21:99:64:b7:
2c:46:21:25:4f:02:cc:bb:de:82:c2:96:76:07:2c:
89:6c:d5:a0:8c:23:e4:a7:17:8d:c6:53:a5:34:a4:
d9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:18:44:2A:E1:C5:68:A7:F6:AD:BF:EE:D9:47:C1:EB:70:42:23:AD
X509v3 Authority Key Identifier:
keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c1:7e:cc:f4:d1:aa:c6:43:c7:53:7c:aa:10:db:df:14:29:
69:96:08:14:51:87:1a:6c:6c:d9:34:c9:06:21:20:45:bf:95:
3b:d3:62:87:ac:41:30:86:9b:21:fa:c0:bd:18:57:59:d6:1c:
9f:7d:39:34:5a:ca:03:4c:f4:b6:07:c4:8d:b0:8f:f0:a9:59:
1a:19:8a:89:4c:9b:2b:0f:a5:12:39:43:c7:a6:9f:25:71:d7:
db:1b:5e:04:2f:aa:26:af:7c:5e:f2:27:d4:bd:97:67:cd:88:
f0:2c:a8:d5:76:e9:55:39:d8:5f:f2:51:b2:e8:fc:1b:e7:a7:
2d:49:b4:87:a3:2a:a5:a1:57:fa:ac:55:af:c1:3b:fd:f6:09:
ae:af:e5:6e:9e:d7:4c:8b:75:cd:6e:ff:63:93:90:8e:36:41:
e2:d4:3e:51:59:60:d5:7e:02:c6:ba:43:3a:f8:74:ca:8f:15:
ee:ed:58:d1:59:e9:a5:6f:be:a0:ca:f4:ab:86:3b:f7:b6:f4:
33:a5:8c:b9:6c:e0:02:91:c7:08:2e:c2:9d:06:e3:2d:3f:55:
8d:5a:2e:f4:36:79:09:eb:b4:75:ad:f3:25:c7:53:54:8e:ef:
df:8f:68:07:33:d2:ba:50:6f:c7:93:bd:e4:36:bd:15:6d:da:
b6:dd:1d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:25 2026 by rpki-client