Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: w3ao5UzvACRF4ZeI5Knb/0Db+hfnFgy7RQmeS/GVKAM=
Subject key identifier: 40:F1:F1:72:9F:2F:13:F2:EE:DF:B4:CD:70:FB:C0:C7:5F:B4:64:BD
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 01A13DB84D7BD64D720C9C58B04CB5900DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 04:00:50 +0000
Manifest this update: Thu 15 Oct 2026 04:00:50 +0000
Manifest next update: Fri 16 Oct 2026 04:00:50 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: vm/V5gqUu/gVsyq4sx8tIUEbxVmFC1f1eem5mFaesO8=)
2: 6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa (hash: HsNpK7hPj6W6BnASMw5ZiyHooADbT1D1N/LoEYfC8k0=)
3: iQJQC_oWujo-15_GL75EM-stwEc.roa (hash: VM81RK3ZU1AzMrmtbRjQdCVVrAt7gS8cQsTq2NJoc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:4d:7b:d6:4d:72:0c:9c:58:b0:4c:b5:90:0d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Oct 15 04:00:50 2026 GMT
Not After : Oct 16 04:00:50 2026 GMT
Subject: CN=40f1f1729f2f13f2eedfb4cd70fbc0c75fb464bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:a0:60:a5:4a:5d:0b:f9:e0:03:fc:d6:1d:
ec:20:8e:f4:6f:5e:a9:91:28:ae:61:58:2b:db:b2:
25:f6:af:54:9a:a0:df:87:3c:6c:68:0f:54:eb:a4:
4b:0b:ba:e2:6d:1a:ea:23:73:c1:61:e1:14:8e:b9:
e8:88:da:a6:33:56:81:cb:41:5a:2d:39:1e:a8:aa:
06:a7:f8:4a:8a:fd:1a:3d:68:c4:e1:51:fd:3b:4e:
43:37:59:c1:9a:87:d7:72:d0:7d:21:0d:af:c6:59:
34:84:1e:4d:d1:e6:f4:34:b0:17:0c:6a:d2:00:8d:
f0:61:8e:9e:77:af:66:bd:0a:8c:96:ee:b1:1d:2d:
2a:8f:12:4c:98:f4:2d:e4:06:08:8a:d4:38:57:92:
3d:2a:18:52:21:00:c3:ef:88:56:fb:7d:f1:83:e6:
81:d6:22:9c:9b:8d:af:aa:67:b5:4f:2b:b4:23:84:
b9:a3:f5:8b:bb:be:a3:c1:de:d8:a3:01:ab:a5:33:
fc:4e:44:96:2d:a9:2c:86:1e:83:95:58:2c:d7:3a:
4a:22:0d:32:bc:75:22:d3:13:a0:52:a1:8f:a9:4c:
e4:0b:e0:18:59:8a:fb:15:3e:66:b9:96:94:2f:8a:
a6:42:47:58:5a:91:fe:c0:0e:b0:93:39:d4:1a:bd:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F1:F1:72:9F:2F:13:F2:EE:DF:B4:CD:70:FB:C0:C7:5F:B4:64:BD
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:93:8b:ae:4a:6d:1e:75:79:dd:bf:ae:ca:c7:09:82:5b:4f:
16:57:5e:5c:2b:65:ca:f7:99:fb:61:5a:ee:be:af:a0:f1:9a:
d4:d3:56:2a:6d:b3:7d:fa:0f:c0:25:d0:39:15:e4:d3:24:87:
45:b7:8e:8e:84:58:a8:80:3f:b1:18:de:ee:4e:30:40:df:d6:
58:3e:f2:d3:1c:62:70:53:eb:ca:95:79:a0:af:1a:2a:c1:19:
e1:8a:47:00:65:3a:7a:98:33:26:7f:71:57:db:98:d7:c9:11:
f9:f4:da:ce:08:45:92:4d:18:73:ed:9c:05:f3:18:80:4e:3e:
6c:28:e9:cf:87:3b:b4:37:ac:6a:ee:8e:67:34:3c:6a:6a:6d:
1e:6e:9f:ca:47:66:3d:41:a1:52:a5:88:2e:e2:31:01:32:bf:
4e:8d:66:b9:57:23:78:92:fc:b5:0b:19:7f:46:b4:fd:d5:3d:
2d:40:7c:8a:fb:2f:ec:0f:a5:3e:5b:01:09:ee:fa:9b:cc:06:
27:1f:dc:4a:6e:4f:b7:65:59:13:86:5b:75:8a:e6:3a:ee:85:
28:c5:51:08:b3:22:c0:03:99:4b:b3:fa:8c:09:ba:74:2f:cf:
69:db:82:49:f6:fe:62:b3:28:f3:3e:2b:6f:62:3c:4c:46:4d:
c3:dc:61:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:21:38 2026 by rpki-client