Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
File: 31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json)
Hash identifier: IFIrdm16xCuiafsmLd9069tsS6T/WzZivpmj+kU6184=
Subject key identifier: 9A:C8:5C:26:93:B9:E3:65:37:15:A4:3E:8E:E4:8E:F5:E2:52:3C:EE
Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
Certificate issuer: /CN=df512010611f91b16296728a94d1a665b4ab7570
Certificate serial: 01A0D7CBD3C11E77714272FE1A03592A4CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 09:00:54 +0000
Manifest this update: Fri 25 Sep 2026 09:00:54 +0000
Manifest next update: Sat 26 Sep 2026 09:00:54 +0000
Files and hashes: 1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: aw/B1fdmrq2L3gC2ScwXdgZvMerCArNnmbEuI8R9DnM=)
2: KwvgmxkuN2Vb_g5rfP-r60wn56s.roa (hash: pRgKb7xCV6ebEVi6C792sZZDSzLwlu0u5goqcmXhzF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cb:d3:c1:1e:77:71:42:72:fe:1a:03:59:2a:4c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570
Validity
Not Before: Sep 25 09:00:54 2026 GMT
Not After : Sep 26 09:00:54 2026 GMT
Subject: CN=9ac85c2693b9e3653715a43e8ee48ef5e2523cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:58:34:d0:99:8d:74:ed:33:2c:9a:7f:d5:70:
ec:8e:58:49:67:f0:68:3c:e6:23:7a:ac:a9:c4:9d:
51:ab:b9:0c:c4:12:a4:cf:05:26:0d:80:38:c6:41:
53:bc:dd:c9:a2:91:27:b8:7a:eb:53:d8:84:48:87:
3c:7c:21:8b:ab:b0:5c:11:7c:42:81:15:66:17:a7:
0f:1b:c4:cc:dd:5a:22:27:69:b9:85:21:39:15:5c:
34:6d:b0:2e:ed:c3:49:0f:c8:94:88:c2:90:16:13:
91:69:76:ea:87:41:50:47:30:23:a8:4c:cb:db:64:
67:35:23:9a:d5:89:ea:c6:0a:70:7c:aa:66:0f:15:
6f:80:78:1e:7a:93:09:35:a8:33:29:69:5c:af:59:
f6:d0:3a:90:4d:47:e5:a6:cc:8d:87:f6:b8:bb:60:
c8:6d:bb:00:6f:a4:95:45:9a:a2:c5:9e:c5:cd:b9:
df:53:a7:6a:c9:bc:54:97:bd:e3:a9:55:43:36:1c:
83:1e:8e:19:37:b5:10:69:51:e4:ec:9e:45:04:20:
8d:ae:9f:3e:d2:9c:4f:a3:b6:d5:24:fd:30:39:06:
91:37:75:38:df:a0:07:40:78:51:79:94:87:76:72:
6c:bb:86:5e:17:ca:df:8a:2c:b3:c4:32:2e:c3:f8:
b0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C8:5C:26:93:B9:E3:65:37:15:A4:3E:8E:E4:8E:F5:E2:52:3C:EE
X509v3 Authority Key Identifier:
keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:99:9d:8d:ab:4d:aa:d6:f8:4a:b6:5a:0f:59:6e:db:97:94:
b9:d1:2a:f5:75:29:35:2d:ce:fe:18:16:74:02:03:8f:ea:4a:
d2:1e:e6:d2:f7:c7:79:31:1e:6d:c4:10:b7:e8:3f:43:de:c2:
57:14:87:92:ff:36:98:62:d5:9d:93:7d:d2:d7:8e:32:6c:e2:
d3:e5:d5:17:e7:3c:b6:d8:de:8a:0a:82:4c:39:f0:e0:56:b0:
43:0b:30:ad:9c:e0:7b:c9:71:83:cd:17:8d:be:6f:94:cc:6e:
ee:0e:b2:78:85:3d:f7:35:cd:e3:0c:c7:a8:41:82:4c:cb:44:
63:6c:4a:3f:8a:5a:5e:f8:9e:3e:65:36:fd:25:f0:d3:e8:54:
b3:03:17:56:cb:ac:9c:02:06:2a:db:00:5d:28:22:85:f7:22:
43:0b:46:48:b5:ad:63:55:fb:df:18:3a:7c:33:62:df:16:ae:
2b:3e:e4:bf:ff:be:fd:43:ba:ad:64:41:02:d1:39:b4:25:ec:
ea:a4:35:4b:56:ff:62:57:bf:4b:87:e3:d8:b2:1f:a8:1d:84:
2b:de:f5:af:a5:2e:c3:5c:60:75:db:32:e4:64:ca:3b:f4:e6:
41:b6:ac:08:3f:d4:51:d9:a8:5f:26:c4:16:fb:c5:90:66:49:
88:cf:e6:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXy9PBHndxQnL+GgNZKkysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTEyMDEwNjExZjkxYjE2Mjk2NzI4YTk0ZDFhNjY1YjRh
Yjc1NzAwHhcNMjYwOTI1MDkwMDU0WhcNMjYwOTI2MDkwMDU0WjAzMTEwLwYDVQQD
Eyg5YWM4NWMyNjkzYjllMzY1MzcxNWE0M2U4ZWU0OGVmNWUyNTIzY2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglg00JmNdO0zLJp/1XDsjlhJZ/Bo
POYjeqypxJ1Rq7kMxBKkzwUmDYA4xkFTvN3JopEnuHrrU9iESIc8fCGLq7BcEXxC
gRVmF6cPG8TM3VoiJ2m5hSE5FVw0bbAu7cNJD8iUiMKQFhORaXbqh0FQRzAjqEzL
22RnNSOa1YnqxgpwfKpmDxVvgHgeepMJNagzKWlcr1n20DqQTUflpsyNh/a4u2DI
bbsAb6SVRZqixZ7FzbnfU6dqybxUl73jqVVDNhyDHo4ZN7UQaVHk7J5FBCCNrp8+
0pxPo7bVJP0wOQaRN3U436AHQHhReZSHdnJsu4ZeF8rfiiyzxDIuw/iwTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrIXCaTueNlNxWkPo7kjvXiUjzuMB8GA1UdIwQY
MBaAFN9RIBBhH5GxYpZyipTRpmW0q3VwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWIt
YjA2MmU5NzI1YjFkLzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWItYjA2MmU5NzI1YjFk
LzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJmdjatN
qtb4SrZaD1lu25eUudEq9XUpNS3O/hgWdAIDj+pK0h7m0vfHeTEebcQQt+g/Q97C
VxSHkv82mGLVnZN90teOMmzi0+XVF+c8ttjeigqCTDnw4FawQwswrZzge8lxg80X
jb5vlMxu7g6yeIU99zXN4wzHqEGCTMtEY2xKP4paXviePmU2/SXw0+hUswMXVsus
nAIGKtsAXSgihfciQwtGSLWtY1X73xg6fDNi3xauKz7kv/++/UO6rWRBAtE5tCXs
6qQ1S1b/Yle/S4fj2LIfqB2EK971r6Uuw1xgddsy5GTKO/TmQbasCD/UUdmoXybE
FvvFkGZJiM/mTg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:45:04 2026 by rpki-client