Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
File: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft (raw, json)
Hash identifier: 1xJj3vKUQH55rFdTga/nm2lvbNZ2ecr5q+0QMf33zgM=
Subject key identifier: 24:23:A2:80:1F:07:66:B9:5D:87:62:CD:40:5E:8A:CB:D7:0C:71:2B
Authority key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
Certificate issuer: /CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Certificate serial: 019F8FB57D51D13512D2B669C53C292834A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
Manifest number: 112D
Signing time: Thu 23 Jul 2026 16:01:03 +0000
Manifest this update: Thu 23 Jul 2026 16:01:03 +0000
Manifest next update: Fri 24 Jul 2026 16:01:03 +0000
Files and hashes: 1: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl (hash: O6NSGNWdVOBKXMjqVPqK5pAO71t2b0UHVZYLrGBnERw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:7d:51:d1:35:12:d2:b6:69:c5:3c:29:28:34:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Validity
Not Before: Jul 23 16:01:03 2026 GMT
Not After : Jul 24 16:01:03 2026 GMT
Subject: CN=2423a2801f0766b95d8762cd405e8acbd70c712b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:f2:a7:3b:3a:ff:35:87:4f:dc:5e:25:bf:
f2:1f:90:a1:2f:26:b7:37:2b:62:47:d2:02:fd:01:
6d:60:45:6b:66:01:70:6b:df:c5:5f:75:cb:4a:3b:
6c:9a:b2:9b:28:24:34:e4:a9:38:9b:ff:04:49:2b:
b1:0d:59:6b:f3:24:88:23:e2:91:29:b7:c3:27:37:
2f:ad:e7:54:5a:68:1a:d4:df:dd:0f:73:d1:f7:cb:
12:31:91:99:8b:32:27:5b:32:8b:96:5f:83:11:8a:
67:24:5a:30:13:a7:56:97:6f:f1:b7:eb:a6:48:1f:
b2:7d:8b:fd:8a:5e:8c:83:0e:5f:d7:33:39:94:42:
82:55:41:a3:c8:11:34:a5:a3:9f:af:aa:85:1b:48:
b9:92:22:48:e3:cf:f4:17:9b:52:67:d1:65:37:46:
26:40:12:92:1a:50:63:07:82:09:3f:4c:cc:14:00:
66:9f:70:05:ff:be:46:85:7a:56:18:51:d7:60:7d:
6f:08:53:d7:01:01:4a:b1:dd:c5:9a:a2:63:91:1b:
e1:6d:f1:40:ac:30:cc:c5:34:d0:b1:b6:e0:d6:d2:
2f:95:bc:da:20:78:df:92:95:f4:e1:28:af:7b:f4:
77:96:22:f2:9f:3e:4b:39:6a:55:26:dc:eb:8b:6b:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:23:A2:80:1F:07:66:B9:5D:87:62:CD:40:5E:8A:CB:D7:0C:71:2B
X509v3 Authority Key Identifier:
keyid:DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:75:6c:37:20:3f:29:b8:e5:88:f2:39:ed:dd:29:23:80:05:
ee:62:25:c0:2c:85:07:be:6d:c8:b3:59:03:d4:17:94:d8:a0:
ad:16:61:89:1c:10:aa:8a:8d:11:3c:11:e8:56:5d:d1:8e:11:
62:1d:40:2c:dd:6e:c0:cb:b2:a2:96:f3:da:64:9b:75:2e:db:
27:a8:2c:fe:d2:aa:ca:ba:41:20:a5:ff:be:83:4b:7f:19:d6:
13:24:09:07:23:91:66:26:9d:fa:a8:8c:9c:bf:ed:91:b7:a5:
a6:89:a9:4e:1a:d0:79:2c:c7:4a:d9:65:af:7e:10:78:41:11:
af:44:ce:21:4b:93:72:ff:b2:34:a6:14:36:45:f4:ce:bb:ff:
f9:2b:bd:2b:77:2f:7b:c5:28:5f:3c:0d:70:dc:3e:33:c1:95:
cd:ca:de:8a:e5:83:68:ac:6d:ba:ee:86:3e:52:9c:00:a2:0b:
56:a3:d3:41:0d:42:b1:e6:d6:2b:9a:f3:57:cc:75:e8:11:80:
77:99:c2:ef:c1:3f:a0:69:ab:d0:34:39:53:e5:4d:80:7f:95:
4d:bc:27:66:d4:84:9e:c5:c4:aa:af:32:b2:ee:24:94:c4:1c:
55:05:58:bc:30:56:1c:f4:97:45:be:cb:a0:7d:09:23:7b:ef:
02:c3:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:16 2026 by rpki-client