Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: 16a/rM7UsPnSGXnNeLVYVUF70zSj3YDPxs6EHtr2VE8=
Subject key identifier: 98:78:BA:4A:90:CE:45:0B:04:30:B6:AE:1E:3B:82:C1:BC:45:03:B2
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 019D3940CD51266427CCC5DE9D262CE1F224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 11:00:41 +0000
Manifest this update: Sun 29 Mar 2026 11:00:41 +0000
Manifest next update: Mon 30 Mar 2026 11:00:41 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: 91VQNbI9wbkMTFKUD5hO7QEbY9jXxX2ZQYZncqoJ+zY=)
2: jRSx240EFvikEXOWUrVqRyU2b0s.roa (hash: bVFXm7wLR7zi83z8MQIWEvOELjneGFr/AACpBxvKs98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:cd:51:26:64:27:cc:c5:de:9d:26:2c:e1:f2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Mar 29 11:00:41 2026 GMT
Not After : Mar 30 11:00:41 2026 GMT
Subject: CN=9878ba4a90ce450b0430b6ae1e3b82c1bc4503b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:43:d3:e3:26:1f:f6:df:3e:64:9a:de:86:
43:03:ee:62:d9:5d:0f:cf:b2:e2:66:82:b8:1f:52:
48:7c:f1:7c:a7:f7:f8:cb:5e:da:c6:48:17:82:17:
dd:e6:dd:33:b3:e5:60:94:e6:f7:3d:02:1c:e1:02:
5e:78:74:6f:ae:84:83:6e:5b:b6:f7:06:d5:fa:1d:
f3:cb:01:df:5e:49:a3:f7:51:49:b3:62:28:b3:e7:
3f:cf:0d:25:5d:76:94:c3:5b:57:4a:44:e0:35:64:
12:fa:a5:bb:b7:87:09:f1:6e:03:d9:66:ba:3b:a1:
6e:c8:ab:c1:9e:9c:7b:48:de:f5:40:b5:1c:14:6b:
b1:26:b5:a9:4c:7a:a2:b6:cf:52:a9:7a:eb:a0:92:
a0:41:2a:8c:8f:f4:4c:3f:da:62:03:54:3e:e3:6d:
57:e9:a7:dc:cb:a6:25:9e:4b:fe:c8:d2:b0:1e:09:
24:ee:aa:3b:61:fa:61:e4:e3:cf:95:78:0c:a3:fb:
11:45:a6:85:49:ad:c3:6d:3a:72:03:24:01:cc:17:
2f:aa:c8:06:eb:c2:52:f5:c6:56:fe:97:4d:7f:11:
5e:f1:d8:b0:c6:e6:b5:69:66:09:85:9a:8e:27:f0:
84:1e:05:fc:07:91:12:8d:93:f6:2f:db:ce:6e:58:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:78:BA:4A:90:CE:45:0B:04:30:B6:AE:1E:3B:82:C1:BC:45:03:B2
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:04:65:56:b6:36:00:d2:f9:37:fa:99:2f:0c:8b:d4:6d:37:
be:22:0a:0c:26:9d:8a:9a:6d:42:f4:b2:bf:76:31:b3:86:11:
b2:98:af:bd:b0:c8:88:aa:d2:b8:97:62:a9:1a:e1:ac:8c:9a:
b7:66:dd:ce:f9:23:42:1e:bc:c6:8c:06:69:f0:07:1d:f1:24:
55:22:d6:cd:0a:30:e4:37:ea:2a:f7:be:b7:a1:19:f6:3c:ad:
43:e1:a9:fc:f3:5b:fc:dd:11:6d:bc:6c:84:0a:b4:65:e0:a0:
b4:60:f8:97:36:8a:4a:c6:ed:dc:ec:6b:a8:b8:42:2f:b0:0c:
fc:fa:d9:97:e1:a6:02:5f:06:db:95:6c:41:f7:11:9c:4d:b6:
62:88:14:c6:27:5d:f0:77:71:76:6d:c2:e6:df:bb:9d:dc:12:
8d:ba:09:b3:09:2a:bf:23:5f:2e:25:c0:d0:3f:02:e3:db:29:
4b:fe:30:a0:6c:1c:0b:af:41:ae:27:12:5b:62:f1:69:47:ef:
8d:b4:c4:76:4f:d4:bd:7b:5b:89:3a:e4:2c:2d:b0:1f:1b:f9:
dd:bd:4e:ce:cc:aa:90:36:3b:94:11:c2:bb:8f:76:10:34:f4:
fd:b5:c8:56:62:6a:24:73:79:02:7c:62:98:20:66:63:72:09:
82:ca:09:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:40 2026 by rpki-client