Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
File: 31rDE7L3xc3GUDLKoGSK1zjwdds.mft (raw, json)
Hash identifier: uBK60dJd9W0FxfU2xXFXvEDrsC7462wCfXx1BLJ8U5I=
Subject key identifier: A1:8D:7C:A6:55:24:7C:54:26:4E:FB:E1:1F:1E:7E:64:55:D8:04:50
Authority key identifier: DF:5A:C3:13:B2:F7:C5:CD:C6:50:32:CA:A0:64:8A:D7:38:F0:75:DB
Certificate issuer: /CN=df5ac313b2f7c5cdc65032caa0648ad738f075db
Certificate serial: 01A18E66DFDCC982E71687084FCD91EF0251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
Manifest number: 017B
Signing time: Fri 30 Oct 2026 20:01:08 +0000
Manifest this update: Fri 30 Oct 2026 20:01:08 +0000
Manifest next update: Sat 31 Oct 2026 20:01:08 +0000
Files and hashes: 1: 31rDE7L3xc3GUDLKoGSK1zjwdds.crl (hash: D6NQSM0WpKoB+wGKWlAIBWeI105YP/e2DIObRQckPRo=)
2: 7kBOew20AqCcSN7unx6uuoSngeg.roa (hash: oLLPx2wFkNsUiyxMXNv8D1J8xAnpI1BWVugs3oA0gdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:66:df:dc:c9:82:e7:16:87:08:4f:cd:91:ef:02:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df5ac313b2f7c5cdc65032caa0648ad738f075db
Validity
Not Before: Oct 30 20:01:08 2026 GMT
Not After : Oct 31 20:01:08 2026 GMT
Subject: CN=a18d7ca655247c54264efbe11f1e7e6455d80450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:ad:14:e8:48:a3:78:e7:2e:ea:be:7d:0d:
19:0a:de:49:75:72:87:fe:b8:a8:5b:ca:b4:38:ba:
4e:bc:f5:91:e6:57:33:2f:7c:3f:07:18:6a:3c:9c:
38:c9:75:f2:b5:e1:3a:20:ea:dc:ea:6d:bb:3c:7e:
64:62:75:bc:8a:5f:d4:bb:69:d4:5f:04:c7:10:5b:
a3:88:4e:49:b0:e3:57:7d:e5:a3:6e:be:0c:5c:5e:
cf:8a:43:c5:ec:af:d7:47:10:a2:95:3b:0e:2c:1d:
b3:ee:1f:f8:f9:3d:56:dc:3e:38:cb:39:f1:62:4d:
72:20:70:d6:cd:77:b2:12:a6:50:73:3a:75:5b:d2:
ff:9d:19:24:78:fa:dd:2d:85:40:5e:e3:28:9b:a4:
d8:3b:d6:c3:4d:94:23:f6:6f:5f:87:61:f8:9c:c7:
6a:76:ca:3b:c8:44:84:b5:65:ef:89:6e:86:1f:3a:
b2:67:68:18:07:1d:9b:6e:df:f1:22:ec:ea:b0:85:
29:5f:a8:64:04:97:ed:50:d9:18:d4:71:72:42:d2:
4d:dd:db:33:dd:37:4a:ea:c7:ba:4b:81:b1:07:da:
75:ec:63:31:74:26:43:73:57:9e:a8:f7:7e:9a:cb:
b9:bc:a7:70:73:05:d7:3a:98:fc:64:a5:d6:0e:1f:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8D:7C:A6:55:24:7C:54:26:4E:FB:E1:1F:1E:7E:64:55:D8:04:50
X509v3 Authority Key Identifier:
keyid:DF:5A:C3:13:B2:F7:C5:CD:C6:50:32:CA:A0:64:8A:D7:38:F0:75:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:28:19:6d:da:9a:06:10:33:2c:86:59:01:91:bd:a5:cd:c2:
5b:d2:05:d9:95:f3:1a:30:4d:9f:b4:3d:42:cd:43:3c:cf:bf:
91:db:32:b2:57:44:e7:49:47:5e:37:27:85:a8:95:f7:6a:99:
99:35:71:0c:24:31:44:59:89:c6:bf:2a:2a:06:98:83:c7:cd:
fa:4d:39:bc:d0:e5:86:3b:22:ad:e6:d3:aa:8b:84:1c:be:52:
ac:4c:d3:c9:13:36:f6:42:02:67:14:54:91:e6:ad:7d:04:41:
98:75:e3:46:54:2d:59:03:53:43:0f:06:34:bc:62:86:e7:f7:
51:f7:af:b3:3d:d2:26:1d:e0:96:64:b1:d3:de:06:27:43:a6:
7d:c3:25:47:74:16:ba:5d:6a:7a:78:c4:8e:1d:04:da:67:4c:
ab:7e:65:4a:2d:32:31:16:7d:33:68:32:87:dd:61:e9:40:a6:
69:f4:d5:57:19:78:8d:f9:21:d7:6d:bf:d0:c9:36:0c:91:b9:
55:4e:a1:62:2a:10:2b:f7:44:af:a6:78:d5:66:42:60:2e:d8:
a5:07:59:c9:12:ed:13:f7:54:09:ac:5f:c1:72:fb:c3:6f:cb:
9e:66:dc:e9:74:5c:fc:84:49:8b:8f:5e:72:bf:5f:c1:97:c3:
a2:32:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:20:25 2026 by rpki-client