Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier: MnrI1YgwWhjKwKfuw0pVbcKUyx51f+t3daKyuzAKZbk=
Subject key identifier: C8:8B:9F:74:C3:8A:60:46:7A:94:BB:77:3F:AC:33:0D:52:59:23:8E
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 019D389C304F89B131B33E64A97B22D0C903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:53 +0000
Manifest this update: Sun 29 Mar 2026 08:00:53 +0000
Manifest next update: Mon 30 Mar 2026 08:00:53 +0000
Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: qhxzMUwJi1XnuG3GzW0zgoQBrsBsXzHvYpJCNhkiBk4=)
2: bFzdMPznlOjSbXFpquaFvhugI8E.roa (hash: K3/O8FhhB6ddNanECmUzETBKUHzHCD/aSiUCGY1B2qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:30:4f:89:b1:31:b3:3e:64:a9:7b:22:d0:c9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Mar 29 08:00:53 2026 GMT
Not After : Mar 30 08:00:53 2026 GMT
Subject: CN=c88b9f74c38a60467a94bb773fac330d5259238e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:30:19:1e:b7:14:49:2e:36:57:79:7c:88:
2f:1c:16:c1:98:cd:0d:83:c0:81:9b:de:82:8b:d8:
a1:3f:c0:76:62:0c:3f:5d:5c:68:a5:59:3b:b0:b1:
2b:48:eb:d5:94:5d:f9:1f:57:5a:d7:0b:46:a9:82:
5a:4f:09:be:8b:9c:84:d6:0a:66:fa:da:1b:46:b8:
d0:0a:57:5a:fc:e3:d7:de:c4:6f:3f:29:a0:4e:b8:
a8:40:12:58:fe:ec:c0:b8:e6:b3:32:ef:b6:f4:d6:
70:ca:66:29:08:da:e6:f7:f8:46:5b:84:0f:5d:db:
3f:a5:f7:98:50:bf:89:bd:bf:de:3e:21:52:24:67:
27:31:00:5b:cb:cc:6e:1c:2f:ac:57:dc:8a:98:de:
13:25:cc:5c:ae:41:b6:a5:84:9e:db:f7:b0:ee:54:
f5:8d:9f:2a:1c:03:3d:7d:be:63:e0:7b:af:f3:2d:
70:04:ca:fd:04:16:4b:d6:f5:25:e2:e6:1d:df:f7:
95:68:2f:9b:59:cb:ca:dc:65:24:97:9f:06:de:7c:
4f:02:80:c6:dc:70:21:a5:85:2e:b2:2a:d7:2b:f3:
07:24:ea:6a:37:d1:06:81:97:c6:a8:3e:f8:43:5c:
e4:02:34:5e:62:e4:f5:3d:33:e9:ae:30:cb:c2:e5:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8B:9F:74:C3:8A:60:46:7A:94:BB:77:3F:AC:33:0D:52:59:23:8E
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:96:f1:27:81:6a:fb:4f:80:31:2d:20:9b:4c:a3:bf:74:86:
48:09:a3:aa:17:50:48:61:01:4f:ca:64:8b:34:07:41:6d:99:
10:03:c0:98:71:11:66:9a:2d:57:d2:a8:c3:1c:bf:cc:b6:ad:
0c:49:62:60:03:83:74:72:5c:84:04:5b:bf:5c:39:e8:6e:90:
e5:0e:a5:08:7f:d8:5e:f7:7b:b1:22:1f:81:f5:d0:c8:11:a7:
65:6e:2f:d9:46:86:bf:d4:db:cd:de:53:22:c1:b2:57:c4:b0:
24:a7:66:12:5c:eb:01:b7:04:b7:2b:ba:9c:4b:74:2b:cd:4d:
34:10:c8:2e:d0:85:21:0b:57:57:38:bc:8e:49:df:91:88:61:
80:5a:2d:fb:f4:a3:3d:02:30:ca:de:4e:6b:28:5c:00:f2:ea:
ab:84:7d:c2:9a:45:37:d6:b4:5a:9c:3c:93:3c:9b:f0:23:0c:
76:ed:4e:47:be:21:0f:0a:6d:3a:cf:b9:ab:f5:25:c8:17:ea:
b0:12:4c:6d:26:18:c1:31:fb:3e:00:08:96:34:5f:d7:71:14:
74:dd:ac:c8:37:5c:b2:a2:ac:fa:2b:ba:c1:c3:86:6b:14:dd:
e7:f3:af:61:ed:cf:46:24:d2:0e:50:6e:6f:bb:d7:d6:2a:0d:
94:2f:e5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:44 2026 by rpki-client