Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: 3eWurlbwLsL/WgoRUWNAOM8voGXr8Y8vIoILxxMKjC8=
Subject key identifier: 49:1F:55:66:2F:FD:54:70:F5:25:D5:A1:3E:5A:F1:F7:47:D0:A2:91
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 01A00101351AB4EB89E74B29956AF4B0752E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 16:00:50 +0000
Manifest this update: Fri 14 Aug 2026 16:00:50 +0000
Manifest next update: Sat 15 Aug 2026 16:00:50 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: cyGvycAyumFVmflfnorKz/XYNS7LsBuLQy5Gq1+1S+4=)
2: 6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa (hash: HsNpK7hPj6W6BnASMw5ZiyHooADbT1D1N/LoEYfC8k0=)
3: iQJQC_oWujo-15_GL75EM-stwEc.roa (hash: VM81RK3ZU1AzMrmtbRjQdCVVrAt7gS8cQsTq2NJoc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:35:1a:b4:eb:89:e7:4b:29:95:6a:f4:b0:75:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Aug 14 16:00:50 2026 GMT
Not After : Aug 15 16:00:50 2026 GMT
Subject: CN=491f55662ffd5470f525d5a13e5af1f747d0a291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:61:60:8f:a5:c7:d7:ab:45:2b:f3:3f:29:
d7:4f:98:a2:d9:b5:6f:92:cc:3c:e6:97:19:4f:98:
d0:ef:3c:c2:f3:0b:00:51:78:d7:43:46:50:67:4a:
25:5d:f2:ef:31:75:a0:c4:c5:64:09:cf:23:9e:a2:
9c:43:6a:52:06:78:37:ee:af:3d:7b:36:f4:5b:3c:
35:7c:01:73:56:95:f2:be:7a:a8:e9:89:61:7b:18:
d0:cd:29:32:98:a2:3b:48:2b:9d:81:54:97:05:c8:
8e:04:26:16:23:f0:ce:6f:14:b0:3c:0a:37:57:96:
a2:b2:f0:7c:fc:a2:e9:59:35:73:ac:d1:4a:d4:82:
31:21:c8:1b:6f:c0:64:e0:1d:0d:25:74:6c:f3:21:
d5:47:64:05:5b:6c:4e:0d:1d:7b:a8:8f:60:5b:62:
9f:9e:c0:f8:8c:cf:67:f2:ad:05:ea:ed:90:c0:2d:
08:2e:e0:d8:e9:4d:25:fd:7d:58:90:79:97:bf:45:
59:32:ab:12:71:2b:57:7b:95:10:35:37:d5:e9:39:
fe:73:30:82:ae:bb:6d:69:43:66:0a:67:19:21:2c:
fa:d7:47:3f:62:e9:94:f1:06:18:12:0c:0d:2b:a9:
27:46:82:e8:fa:0a:c9:20:8e:df:53:b1:ee:e0:5c:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1F:55:66:2F:FD:54:70:F5:25:D5:A1:3E:5A:F1:F7:47:D0:A2:91
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8a:74:51:43:e1:ae:65:92:a2:fe:75:2b:a5:fc:8e:7d:07:
2c:bd:be:89:6d:7e:ae:60:0a:15:91:59:4b:a4:a7:54:b2:57:
f3:33:bd:be:9e:61:8d:47:84:ad:33:8b:b3:42:e2:10:c0:77:
87:bc:81:a6:0d:bd:10:cc:53:c4:cd:bc:ab:bb:c6:b3:c0:e9:
01:5a:b0:fe:be:45:f3:d0:db:8a:86:7d:92:30:60:ee:61:64:
3b:9c:53:a4:e7:16:f7:1b:35:28:c6:a6:d9:e4:e7:8b:0d:26:
6d:bf:eb:c3:4d:4c:06:60:0d:ea:80:f7:e2:c5:66:8b:cb:46:
71:ff:0a:64:2a:77:d7:09:45:46:57:cb:71:b8:32:06:43:ca:
c6:1e:dd:16:c8:cb:42:a3:a2:6a:2e:ae:8a:fb:5b:55:0c:9d:
35:7f:72:a7:7b:4a:96:2f:a0:e6:7f:96:78:3b:6d:4d:54:49:
14:d1:1b:7b:97:d6:12:e1:e9:7d:de:41:8a:d5:42:45:24:8d:
f5:4a:ce:51:bd:91:c0:9a:db:33:22:83:9d:02:4b:51:d7:c7:
49:ef:e9:97:fe:39:5e:a5:2d:62:fb:c9:7b:65:df:5a:5a:a2:
ea:5e:f1:fb:05:65:02:7c:d1:9d:14:6c:75:b3:f8:99:b4:2d:
a9:09:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:08 2026 by rpki-client