Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
File: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft (raw, json)
Hash identifier: DXuslOKed3KSnldkQk+joQAJ3kXRyzmZFr2ksoP2s1U=
Subject key identifier: B1:0F:7B:C6:2A:76:BC:21:71:23:90:38:1D:FB:27:38:8B:49:32:E8
Authority key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
Certificate issuer: /CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Certificate serial: 019D27A920F9BD1FF53D4E4096A45F542E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
Manifest number: 0FEE
Signing time: Thu 26 Mar 2026 01:01:28 +0000
Manifest this update: Thu 26 Mar 2026 01:01:28 +0000
Manifest next update: Fri 27 Mar 2026 01:01:28 +0000
Files and hashes: 1: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl (hash: PR6vut/mS39IsDeIB48DbW07HSAf4tfbtPFuwWo6IWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:20:f9:bd:1f:f5:3d:4e:40:96:a4:5f:54:2e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Validity
Not Before: Mar 26 01:01:28 2026 GMT
Not After : Mar 27 01:01:28 2026 GMT
Subject: CN=b10f7bc62a76bc21712390381dfb27388b4932e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:4e:ce:74:ce:40:1d:be:a4:a3:76:63:d3:
95:57:2c:f9:76:5f:d9:00:5f:66:8a:9f:be:87:63:
f7:a2:e4:e5:26:e1:8d:c3:44:5d:80:8d:ad:2a:97:
d4:dd:da:18:81:b8:d8:bc:2d:e0:81:37:7c:b2:74:
e1:0d:5d:84:b5:ec:30:87:5b:1b:bc:04:07:60:7f:
23:38:8d:f6:f4:01:2d:03:1d:87:b0:bb:0d:da:6b:
eb:88:87:9e:79:bd:b9:97:9f:29:c5:c0:8a:ad:4d:
cd:0f:97:9a:36:2c:b1:8e:55:0a:d9:22:33:ee:3d:
ad:bf:d7:7e:7e:03:72:ca:0c:6a:f3:57:f5:76:1b:
e2:1f:1f:db:4c:90:a0:d4:1a:a8:47:54:d9:4f:e5:
c2:5f:58:c6:6d:c5:95:83:7f:5d:f7:96:75:a9:9e:
60:a2:0e:44:fe:8d:c5:bf:0d:d1:d9:bd:cd:c3:5e:
0c:73:af:da:61:e7:9d:27:69:cc:4b:7a:82:70:6e:
f2:e1:e6:76:22:de:dc:a1:65:6a:3b:1b:99:63:dd:
56:e9:92:95:3f:3b:34:56:7c:46:9c:5d:10:6d:f7:
63:06:1f:b2:d8:2d:af:52:e1:22:50:fa:b9:08:cc:
e6:6e:ff:79:3f:dd:a2:fa:03:e0:15:7d:f5:d6:5f:
c6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0F:7B:C6:2A:76:BC:21:71:23:90:38:1D:FB:27:38:8B:49:32:E8
X509v3 Authority Key Identifier:
keyid:DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8b:cc:b0:bb:2c:75:7a:63:a3:83:ce:36:c1:7d:b1:0e:6f:
14:6c:3a:92:bf:9d:5d:e0:73:f6:c6:b2:21:9d:9f:50:2e:cb:
84:ee:1e:50:7a:66:2c:79:2e:5d:43:af:d8:c1:f2:3d:25:72:
bb:6a:c2:e1:7a:bd:cb:01:7c:d7:40:1c:79:ca:b5:88:60:1d:
40:c1:18:9a:cc:1c:4e:61:ea:42:d3:95:20:61:c8:80:3b:17:
29:01:1b:95:ab:51:34:34:c9:0d:59:a5:4c:fd:bc:3c:26:24:
4e:87:98:78:28:2d:2e:12:e0:e7:bf:06:ba:8c:2e:a0:52:94:
5a:bd:5b:a0:49:ea:73:60:6b:9e:ed:f5:2a:20:7b:95:6a:02:
61:24:c4:78:ac:e1:a3:f6:ea:6a:24:eb:27:99:91:d3:77:3a:
83:32:4a:d7:13:85:0b:30:f2:9b:2e:fa:58:f2:9e:95:1f:3d:
31:6d:38:32:10:da:f0:82:83:9c:e6:78:dc:44:d7:a1:f4:55:
f3:fd:8a:06:bf:cc:6c:b4:ef:7a:86:f1:31:81:5b:e5:f4:80:
80:d3:5a:ac:9d:93:48:d4:1b:fd:ce:14:2b:c6:8a:0e:c3:e6:
e1:89:89:48:53:47:d3:da:3c:19:98:47:0e:d5:91:7f:06:62:
62:94:ec:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqSD5vR/1PU5AlqRfVC54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTI1MjZmM2QyODI3NjUzMjVjMTVhNmU1NzY1ZDdjZDdm
MWY4OWUwHhcNMjYwMzI2MDEwMTI4WhcNMjYwMzI3MDEwMTI4WjAzMTEwLwYDVQQD
EyhiMTBmN2JjNjJhNzZiYzIxNzEyMzkwMzgxZGZiMjczODhiNDkzMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2stOznTOQB2+pKN2Y9OVVyz5dl/Z
AF9mip++h2P3ouTlJuGNw0RdgI2tKpfU3doYgbjYvC3ggTd8snThDV2Etewwh1sb
vAQHYH8jOI329AEtAx2HsLsN2mvriIeeeb25l58pxcCKrU3ND5eaNiyxjlUK2SIz
7j2tv9d+fgNyygxq81f1dhviHx/bTJCg1BqoR1TZT+XCX1jGbcWVg39d95Z1qZ5g
og5E/o3Fvw3R2b3Nw14Mc6/aYeedJ2nMS3qCcG7y4eZ2It7coWVqOxuZY91W6ZKV
Pzs0VnxGnF0QbfdjBh+y2C2vUuEiUPq5CMzmbv95P92i+gPgFX311l/GCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEPe8YqdrwhcSOQOB37JziLSTLoMB8GA1UdIwQY
MBaAFN9SUm89KCdlMlwVpuV2XXzX8fieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFKU2J6MG9KMlV5WEJXbTVYWmRmTmZ4LUo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wYmY2ZGItY2M3ZC00Njk3LTlhZWMt
NjIzZTZjOWM0NDY0LzEvMzFKU2J6MG9KMlV5WEJXbTVYWmRmTmZ4LUo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wYmY2ZGItY2M3ZC00Njk3LTlhZWMtNjIzZTZjOWM0NDY0
LzEvMzFKU2J6MG9KMlV5WEJXbTVYWmRmTmZ4LUo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIvMsLss
dXpjo4PONsF9sQ5vFGw6kr+dXeBz9sayIZ2fUC7LhO4eUHpmLHkuXUOv2MHyPSVy
u2rC4Xq9ywF810Acecq1iGAdQMEYmswcTmHqQtOVIGHIgDsXKQEblatRNDTJDVml
TP28PCYkToeYeCgtLhLg578GuowuoFKUWr1boEnqc2Brnu31KiB7lWoCYSTEeKzh
o/bqaiTrJ5mR03c6gzJK1xOFCzDymy76WPKelR89MW04MhDa8IKDnOZ43ETXofRV
8/2KBr/MbLTveobxMYFb5fSAgNNarJ2TSNQb/c4UK8aKDsPm4YmJSFNH09o8GZhH
DtWRfwZiYpTsfg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:18 2026 by rpki-client