Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: sZ4iO9ZgDEzwIxvhjBenfVQO89VHMZOn3T9knPHbu4E=
Subject key identifier: 2A:64:1F:AC:84:17:08:44:B4:CA:CF:92:9D:1D:A1:87:BB:51:D9:B8
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 019F91DAB1FDD7C81826FDB14FBEE2F74028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 02:00:56 +0000
Manifest this update: Fri 24 Jul 2026 02:00:56 +0000
Manifest next update: Sat 25 Jul 2026 02:00:56 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: Jy7bE3dWP0ICiilC5sWfYP+JQxzrp5BNWLGVt7XqOpo=)
2: jRSx240EFvikEXOWUrVqRyU2b0s.roa (hash: bVFXm7wLR7zi83z8MQIWEvOELjneGFr/AACpBxvKs98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:b1:fd:d7:c8:18:26:fd:b1:4f:be:e2:f7:40:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Jul 24 02:00:56 2026 GMT
Not After : Jul 25 02:00:56 2026 GMT
Subject: CN=2a641fac84170844b4cacf929d1da187bb51d9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:95:57:08:9b:11:96:00:bc:97:d4:26:4a:
6e:89:93:d0:81:7e:d5:92:39:0c:e0:51:f9:1c:a2:
77:5c:3d:4f:fc:a4:0b:2b:40:5b:c2:76:2c:3f:6a:
bd:75:ab:c7:96:ba:04:5f:8a:33:07:25:03:e5:d5:
b4:37:32:0f:26:15:57:91:9f:73:bb:59:fb:40:be:
66:f9:2d:2f:4e:b9:fd:40:27:ba:dc:14:5b:0c:64:
62:cc:1d:98:5d:d5:8d:e1:b1:4c:97:69:2a:26:21:
90:cd:00:de:35:ad:34:a5:c8:15:ad:55:11:b9:18:
6b:80:73:ed:3e:b8:6a:8d:0c:2f:df:13:59:33:18:
e1:db:3e:48:c1:dc:a3:2a:3a:8b:ee:a2:2d:3c:ad:
36:f9:b8:f4:2d:4f:e1:51:c7:b7:f5:53:dd:51:d5:
31:6a:50:b5:9a:6d:d5:20:67:4c:2b:1f:d0:79:bb:
2d:17:b9:02:30:8d:df:9e:60:3c:6b:69:2a:3f:9b:
fa:8f:0d:d5:8d:92:49:2b:42:55:c0:b5:9d:51:dd:
38:9a:9e:4d:24:7f:ef:87:69:e4:41:19:7a:5b:ac:
03:5e:66:f4:87:49:66:1c:95:01:a3:42:05:e9:33:
29:84:98:a6:69:01:2b:64:3e:9a:90:05:36:9a:55:
43:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:64:1F:AC:84:17:08:44:B4:CA:CF:92:9D:1D:A1:87:BB:51:D9:B8
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4b:21:0c:8d:1c:d1:83:19:1f:e6:6d:1d:04:76:43:a7:bd:
0e:04:4e:13:a2:61:3c:af:c4:25:c9:6e:70:f7:49:64:09:9f:
73:c4:82:08:92:ae:47:3a:ec:35:20:74:ef:d8:b2:52:43:da:
14:86:ec:45:65:76:16:fb:d3:d9:f6:bd:3a:ac:87:43:43:a8:
bc:34:c4:ae:ec:cc:01:72:e6:c7:1f:2e:c0:2b:08:fd:7d:cf:
75:88:a5:89:37:94:75:51:81:05:31:0b:1c:75:55:6c:1b:c4:
6d:ce:54:87:0d:bf:fc:70:42:91:96:74:01:7c:c4:d0:c6:d5:
0b:5a:74:2c:99:30:5b:0c:46:0f:33:e3:c2:07:91:32:4a:b5:
84:da:3e:fe:6d:99:a0:fc:91:32:ff:38:be:aa:74:ff:d3:71:
f5:e0:c1:d2:75:62:18:6f:22:d0:ae:cd:92:8b:94:16:00:b0:
89:a3:be:0d:b6:a8:9b:43:73:14:a5:d2:e5:1f:85:bd:45:b9:
9c:e5:5b:ab:f7:83:15:6e:b6:8d:2d:e1:25:16:9c:0c:a0:d3:
53:bd:87:93:e8:c8:8c:b8:e8:bb:8b:2a:31:a9:fb:ed:73:27:
ff:8c:7f:43:dc:94:ff:08:1f:26:95:75:ef:f1:7e:e9:20:02:
84:de:53:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:13 2026 by rpki-client