Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier: vakpVOWdtf3kAx7bQNOjXMIg/pGj2JY/qxAdwRkA6OU=
Subject key identifier: 5C:EC:5B:1B:89:A2:35:37:5D:76:AD:3A:6E:D6:B5:7B:C7:6A:26:FA
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 019D273B37E94F1FD4DCAC76D688A4D99B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:25 +0000
Manifest this update: Wed 25 Mar 2026 23:01:25 +0000
Manifest next update: Thu 26 Mar 2026 23:01:25 +0000
Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: A6/YOTnQdsHsfZa7eJAOGsCBV2pHaxpY1UbtL1UZgO0=)
2: bFzdMPznlOjSbXFpquaFvhugI8E.roa (hash: K3/O8FhhB6ddNanECmUzETBKUHzHCD/aSiUCGY1B2qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:37:e9:4f:1f:d4:dc:ac:76:d6:88:a4:d9:9b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Mar 25 23:01:25 2026 GMT
Not After : Mar 26 23:01:25 2026 GMT
Subject: CN=5cec5b1b89a235375d76ad3a6ed6b57bc76a26fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:4f:f2:f0:9b:28:1e:fb:f1:d7:bd:c2:a8:
73:17:a4:73:aa:1d:dc:a2:39:98:e8:a7:af:46:6c:
0d:67:08:56:aa:a6:a3:47:03:a7:23:a3:07:06:78:
9a:df:58:26:e3:cb:d7:ad:18:75:0d:1a:9b:a3:90:
41:21:38:9b:07:0c:06:94:cb:58:7a:bf:9c:47:0e:
24:1b:16:f4:66:fc:45:e0:55:39:6b:a8:19:d9:98:
63:7a:66:7d:83:fa:31:b0:17:eb:bb:4c:89:f9:de:
8f:d5:4d:5b:a4:f8:e8:53:10:f0:9d:ee:85:1b:e8:
a9:13:24:8c:3b:61:4b:f0:2f:8b:27:3e:f6:6b:99:
97:18:08:8e:af:c0:79:54:9d:5d:fb:a1:3a:86:b2:
5c:bf:da:ba:53:e4:a1:a0:6e:bb:31:de:a8:ed:60:
06:56:b1:9a:a2:90:6c:23:49:58:22:11:21:7a:21:
12:6b:63:ea:43:32:bc:f5:2f:e3:09:60:84:01:9c:
7f:90:f2:bf:ff:f8:97:99:7c:b3:56:c3:f3:32:02:
f8:7b:ec:cc:08:b2:bf:89:37:4a:7c:10:bd:1e:60:
95:20:bc:d4:70:ea:fa:4f:54:fe:6c:bf:20:e1:30:
5c:1c:1c:d8:ca:52:76:15:8e:d4:3f:75:af:17:7a:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EC:5B:1B:89:A2:35:37:5D:76:AD:3A:6E:D6:B5:7B:C7:6A:26:FA
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:42:58:60:58:27:28:14:e7:d0:f4:fc:a8:b8:0c:6e:ec:00:
d4:4b:09:5d:a6:7e:0e:cc:5f:6a:e5:ae:15:f0:b5:17:bd:2c:
42:04:16:a5:0f:fc:69:01:3b:04:2d:25:68:d5:47:94:ca:6a:
23:ab:c6:e4:41:f2:1c:d5:b1:32:25:a9:49:16:fe:12:9c:e5:
77:bc:db:8c:21:f7:b7:b5:f1:2d:37:a6:6a:ef:77:28:0a:01:
9c:d9:40:b8:eb:5e:59:32:f1:d8:31:11:4f:ae:b5:90:6f:9d:
30:a5:ee:01:24:7c:32:3a:85:83:f8:f0:5f:fe:e2:1d:f0:61:
0f:c3:f5:8e:63:32:4e:41:88:df:c8:a2:6f:50:ad:c7:e9:81:
cc:74:8e:38:ce:49:b6:96:3c:09:d9:81:a6:af:34:94:ec:6a:
8e:f8:1c:ec:8e:ab:e9:8a:8c:b7:51:4b:87:49:9c:b3:7d:29:
9b:d8:06:c4:50:53:d0:fb:57:49:30:89:27:4e:b7:23:89:8c:
e9:26:50:e6:56:8b:8a:4f:f8:de:4a:41:96:3e:9c:61:76:27:
3d:0a:3d:85:21:45:6b:c2:76:27:00:1e:ca:da:1c:41:06:16:
4d:69:33:e5:6e:e1:9f:dd:a3:b8:77:aa:83:54:a6:e4:b7:10:
d1:3d:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:33:04 2026 by rpki-client