Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: 1rQwE97nLfmUOIyI4zwHrYNZy5SaE8bBN96DgB9oefA=
Subject key identifier: B7:6D:C2:F9:CF:40:07:E4:96:BA:F8:0D:69:9B:69:4F:43:9B:B8:33
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 01A0D83C20C0F575CAAD2558150C3AB2FB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 1A02
Signing time: Fri 25 Sep 2026 11:03:34 +0000
Manifest this update: Fri 25 Sep 2026 11:03:34 +0000
Manifest next update: Sat 26 Sep 2026 11:03:34 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: pgNEcKSNkOPDgSDj06OFYeNwujG/m3zV1atBjdO3Rp0=)
2: jRSx240EFvikEXOWUrVqRyU2b0s.roa (hash: bVFXm7wLR7zi83z8MQIWEvOELjneGFr/AACpBxvKs98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:20:c0:f5:75:ca:ad:25:58:15:0c:3a:b2:fb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Sep 25 11:03:34 2026 GMT
Not After : Sep 26 11:03:34 2026 GMT
Subject: CN=b76dc2f9cf4007e496baf80d699b694f439bb833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:84:c6:ac:21:14:43:d5:a7:98:55:1e:fa:
32:51:3b:04:2d:d4:bf:1d:e3:c4:b0:b4:03:fc:55:
57:47:32:c2:d8:e0:16:50:68:13:bf:76:e1:29:40:
d9:a7:b1:81:b3:aa:d4:34:c5:e6:fb:55:13:f2:69:
c0:de:a0:45:49:06:72:8e:63:85:af:36:7d:db:db:
1c:41:98:aa:d2:55:91:49:82:84:4f:d4:06:64:59:
83:1d:36:6d:8d:13:23:6f:ee:09:80:3a:86:13:e1:
c8:81:05:2c:5e:cd:d4:09:f6:67:be:fa:1d:a6:b7:
df:0f:40:dd:e3:d2:06:f6:fe:bf:f8:7f:6d:21:12:
ef:f7:af:d9:a6:ce:4a:86:db:e0:45:eb:87:5f:02:
9e:86:cc:82:9b:37:35:2c:7a:7d:09:4d:47:82:58:
d8:ff:89:4e:75:ef:dc:25:f4:17:17:c0:82:cb:c1:
5b:a6:f4:57:ea:b6:8b:f5:fd:de:54:12:4b:36:69:
15:3b:37:46:4f:1d:7f:a3:1a:d2:f3:d8:44:dc:ca:
83:68:5a:fd:cb:1a:39:89:f4:c0:2a:a8:e8:6a:21:
10:dd:b5:ba:85:8a:34:7b:10:1b:98:aa:18:41:ca:
ad:c3:6a:b4:8e:c5:6c:8b:bf:e3:03:27:ab:f9:72:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6D:C2:F9:CF:40:07:E4:96:BA:F8:0D:69:9B:69:4F:43:9B:B8:33
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b3:b7:14:d1:00:d6:06:0a:6b:c5:c9:6e:14:e8:64:d4:26:
89:57:08:81:53:f5:71:b7:0d:f0:15:43:28:a8:da:2d:81:64:
b4:c9:5e:e1:a9:45:34:7c:ba:f7:aa:4e:f5:11:09:88:b4:b3:
49:0b:0d:ae:59:30:c6:de:b7:3d:55:54:78:a6:1d:a4:57:4f:
aa:18:d5:78:80:84:18:19:a2:9b:37:55:46:c3:95:5a:ba:41:
ab:a5:33:0a:11:07:01:45:bd:26:1c:e4:f1:04:8d:3a:4b:13:
a4:18:9c:1f:b5:6d:02:a8:87:08:9b:37:6c:aa:13:16:51:33:
cc:f8:af:1d:71:97:f3:ec:c2:41:04:77:50:01:18:09:d9:58:
8f:1c:18:58:fd:02:da:5e:e6:b6:ae:f1:e1:85:c3:57:00:5e:
cc:9e:61:aa:64:8c:07:6c:71:d1:c3:91:64:50:38:2b:f5:96:
76:ee:68:22:7e:0a:79:85:7d:56:fd:53:92:ae:88:f3:ca:9c:
73:40:88:2b:09:49:ad:2c:e6:5f:c6:e7:1f:a6:be:04:43:b8:
d2:66:5a:c0:16:cb:0d:04:3f:a6:ef:c1:9a:dc:7c:25:6b:96:
b6:86:c9:f6:7f:a6:a5:c7:7e:10:b6:45:21:76:d3:94:61:66:
ba:28:0c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:44:05 2026 by rpki-client