Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
File: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft (raw, json)
Hash identifier: tTlaAo6NiI8Qp3pkeuAp7c301zmxOU2Sc/9tKx8WXHo=
Subject key identifier: D6:24:92:95:BA:AB:F7:6B:6B:7C:7F:FF:54:83:7E:64:CB:78:BE:1A
Authority key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
Certificate issuer: /CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Certificate serial: 019E1CEC085A93ECDACD285D2AC623253902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
Manifest number: 106D
Signing time: Tue 12 May 2026 16:01:31 +0000
Manifest this update: Tue 12 May 2026 16:01:31 +0000
Manifest next update: Wed 13 May 2026 16:01:31 +0000
Files and hashes: 1: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl (hash: h7W83P3QXrXiDHhYHRCV+bGeR+hty0KI6dk8u+fr97k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:08:5a:93:ec:da:cd:28:5d:2a:c6:23:25:39:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Validity
Not Before: May 12 16:01:31 2026 GMT
Not After : May 13 16:01:31 2026 GMT
Subject: CN=d6249295baabf76b6b7c7fff54837e64cb78be1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:2d:2e:4b:f9:4d:c4:b4:48:3b:19:85:10:
32:bc:ef:d3:fe:26:6c:0f:7a:48:58:80:4a:b2:86:
26:48:da:ec:bd:6a:0b:e3:be:51:b5:02:57:d4:50:
c2:4c:a9:8e:d4:d9:65:98:19:0e:d0:dd:d8:f6:9b:
c3:92:0e:98:80:16:20:e8:55:09:00:64:a1:18:29:
e4:27:a6:c2:da:e4:62:cb:6b:7d:3a:bb:95:d4:31:
d3:b2:b1:3c:85:89:0f:67:62:dc:c1:d7:a2:53:5b:
dd:34:fb:2e:ac:b8:f6:2a:4d:9b:65:cb:d7:7c:89:
de:af:b5:8f:0e:7e:9c:e4:2b:ed:70:e7:fa:2c:89:
4e:01:f9:f2:a1:3b:fe:70:01:f1:14:0e:32:c9:48:
ff:43:af:b8:69:16:21:69:07:33:35:1c:f7:4c:aa:
10:1d:21:aa:ad:8a:5c:88:c5:04:88:98:c7:65:6f:
51:41:51:b6:1d:e3:aa:90:d6:e5:45:14:1e:9e:8d:
ab:99:89:85:e4:e6:01:70:4e:42:50:0e:a3:18:02:
f0:8a:11:35:bd:b0:a3:7a:5f:16:aa:76:ba:23:17:
9c:0a:dd:93:c8:81:1a:9a:1d:3c:c2:fc:b4:61:f0:
cd:29:b0:f4:11:92:74:22:70:8b:ad:36:d7:d8:8f:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:24:92:95:BA:AB:F7:6B:6B:7C:7F:FF:54:83:7E:64:CB:78:BE:1A
X509v3 Authority Key Identifier:
keyid:DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f2:fb:7e:a5:63:7f:c4:cc:d1:01:2b:b5:ad:7f:e2:aa:df:
70:f1:fc:7b:9f:12:7b:cf:b9:ee:ea:ab:35:59:05:d2:d6:6d:
cc:08:47:ec:70:e9:0d:a5:c8:99:72:0f:29:65:2e:7f:c9:3d:
0b:05:f3:f7:a8:88:a7:54:66:23:4a:9b:64:f7:cf:96:20:2e:
8f:f6:eb:5d:1e:39:2c:e7:9c:bb:26:c8:78:4a:82:e4:2c:6c:
dd:cf:ca:42:00:51:bd:a0:3d:d1:d8:a5:ba:f6:f8:62:89:d0:
83:9d:fc:29:06:8d:76:29:a9:15:c5:f5:e2:42:36:ea:1e:6d:
f4:c1:03:b9:37:d4:b1:33:69:66:34:5f:fc:bd:6c:22:63:c2:
bd:9e:10:37:c9:1d:6a:d7:df:27:3d:40:ee:b8:44:65:c6:74:
3f:a4:04:1f:ca:bd:d1:e4:7f:4f:cd:db:06:22:3d:aa:4a:20:
49:3e:c2:44:78:98:1c:74:ab:be:13:dd:c8:4e:c2:01:0f:7a:
a8:b3:cf:7a:ea:27:71:23:41:f1:4b:0d:e7:d2:57:e6:3c:88:
39:10:8c:f0:3a:f3:b2:7d:35:71:05:b2:22:ce:f7:97:a2:99:
c7:50:fb:b0:99:53:10:54:ce:e4:19:38:a5:31:04:b4:89:7c:
d9:c4:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:49:16 2026 by rpki-client