Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
File: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft (raw, json)
Hash identifier: 7JcsRXbaSwEqCxMNP+NMKRTNnK9IjJ2YoCFtmEV0bCA=
Subject key identifier: 43:07:C8:EA:8C:A2:7B:F2:4E:80:A3:85:E9:41:BF:CB:8A:E8:68:15
Authority key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
Certificate issuer: /CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Certificate serial: 01A0D236EFBE48F61F0B77BF7D5387331F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
Manifest number: 11D4
Signing time: Thu 24 Sep 2026 07:00:10 +0000
Manifest this update: Thu 24 Sep 2026 07:00:10 +0000
Manifest next update: Fri 25 Sep 2026 07:00:10 +0000
Files and hashes: 1: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl (hash: qpj2+H/6oY3Xg+BfIYOGEYqQvL6Jto+eXQsN7OhMex4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:36:ef:be:48:f6:1f:0b:77:bf:7d:53:87:33:1f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Validity
Not Before: Sep 24 07:00:10 2026 GMT
Not After : Sep 25 07:00:10 2026 GMT
Subject: CN=4307c8ea8ca27bf24e80a385e941bfcb8ae86815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:b2:d1:3d:3e:da:ef:da:c4:f6:03:ff:3a:
51:fe:03:a3:b1:cb:37:52:da:d0:de:8d:c1:a9:a6:
c7:c3:5e:8f:4e:6a:6b:74:79:64:f1:51:37:af:50:
bb:40:4b:92:97:9a:be:61:05:a3:3c:c3:60:70:10:
1d:fd:ca:e9:c6:ab:97:d1:b9:a4:f6:8d:c1:97:37:
27:2b:09:1a:c7:bf:0a:a0:41:89:1e:e3:df:a2:4f:
7a:ce:df:89:18:ff:92:6f:52:8c:fa:62:db:24:c2:
7e:f7:1b:7b:f4:88:ec:fa:c0:c7:5a:76:d3:38:30:
1f:7d:c8:5b:5d:2d:bf:f4:0c:02:93:ba:e6:12:80:
98:dd:b6:c1:ad:c2:80:43:d8:5a:b0:5a:dc:32:b3:
ad:01:94:59:9d:b8:94:4a:42:c9:7c:43:d0:a0:bc:
30:1d:c3:83:bf:07:d2:2b:16:70:0c:15:ba:64:b2:
04:1f:35:fe:84:47:d6:a6:5f:4b:c2:39:c3:14:96:
1e:91:7d:e1:e4:5a:c8:df:b9:e1:06:9d:68:1d:2d:
4b:f0:a2:1c:c2:89:08:bd:c5:40:d4:bd:2b:24:d8:
91:99:56:b1:de:76:54:f1:9e:8e:57:2a:0e:a0:f4:
0b:83:38:79:7f:7c:27:67:f8:b1:61:6e:c8:ec:3d:
29:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:07:C8:EA:8C:A2:7B:F2:4E:80:A3:85:E9:41:BF:CB:8A:E8:68:15
X509v3 Authority Key Identifier:
keyid:DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:16:f9:cb:72:8b:11:8c:7e:8f:d4:26:d0:62:bf:83:5f:30:
84:9a:db:34:eb:42:eb:bf:f9:4d:c5:d1:80:07:dc:7e:0c:99:
04:2f:14:15:48:6e:2f:35:54:3f:26:bc:7c:75:61:33:2d:78:
e5:8c:d1:36:72:62:db:05:60:9e:c9:a4:27:ad:f5:9a:50:10:
48:7e:14:cf:95:cb:4c:ce:6d:d2:4c:0e:c8:2c:8b:1f:d1:28:
1c:ef:3e:a1:c6:fe:23:31:65:4d:7d:fa:9f:b5:aa:06:7c:42:
04:54:10:fb:95:c2:6e:a2:fe:80:fb:ac:b6:bf:ad:d5:96:98:
65:cd:db:e9:b1:9b:16:11:e5:86:e9:ed:52:9a:66:6c:3d:a6:
c4:65:c7:f2:c3:d4:c8:34:5f:81:f7:b0:80:a2:24:77:a5:70:
9f:c4:83:b9:fb:da:71:0e:45:a9:ad:52:6d:37:91:2e:3f:85:
04:03:42:52:75:23:73:e8:06:40:6b:48:d8:29:d8:07:b9:1d:
37:ea:81:3f:b6:d9:4a:50:c6:94:70:e6:72:55:7a:a5:65:3c:
06:2f:39:64:a4:11:f9:91:0b:98:1f:8e:67:c0:05:cd:8e:40:
c7:75:3e:00:c8:6f:cf:89:c2:ec:a1:19:b9:79:bb:78:56:03:
7c:84:1c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:35:11 2026 by rpki-client