Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
File: 31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json)
Hash identifier: X2PdT46vjNcLmkjsBdakFB81oI3yEnuDCQXIL3FU9ao=
Subject key identifier: DE:29:45:62:23:A3:B5:CB:DB:64:41:D8:75:14:0A:B3:DA:27:3C:79
Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
Certificate issuer: /CN=df512010611f91b16296728a94d1a665b4ab7570
Certificate serial: 019D38D3391DB64D71F15B6CE8BF8DEB2D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: FjaVkHFFgCUoaqphL+lDWvqKwQSI61wokKOoZ+szppk=)
2: KwvgmxkuN2Vb_g5rfP-r60wn56s.roa (hash: pRgKb7xCV6ebEVi6C792sZZDSzLwlu0u5goqcmXhzF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:39:1d:b6:4d:71:f1:5b:6c:e8:bf:8d:eb:2d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=de29456223a3b5cbdb6441d875140ab3da273c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:3e:c3:14:80:ec:c2:40:cd:b3:85:e6:43:
93:eb:42:c6:b9:75:f0:1b:eb:3a:ad:cb:57:8d:17:
92:68:a9:04:2a:2d:5b:1c:9b:2f:f6:d0:07:24:9d:
e6:74:c9:2c:09:e2:ca:16:0f:b4:05:59:a5:38:77:
d7:db:c6:35:9a:6c:a2:c3:03:3b:c4:3b:9e:e6:be:
97:72:88:a4:a1:4b:27:86:94:15:e7:c5:95:51:77:
a0:13:ba:03:af:76:2b:2b:47:78:bf:76:1b:4d:dd:
59:f5:ca:57:7f:9f:76:83:07:aa:ee:6b:29:1d:56:
eb:c5:a9:a5:d5:78:4f:d3:6b:78:7a:3b:d2:00:71:
83:dc:78:5b:14:01:d6:8f:32:38:1d:6a:5b:b4:3f:
fd:50:f7:ba:dc:72:d0:2b:50:15:61:c4:85:5b:97:
50:ae:a1:4c:85:47:7e:b4:5f:d9:35:d9:84:22:77:
fc:5f:62:9d:31:03:4c:91:0a:84:bb:49:d3:04:40:
79:70:32:10:eb:1c:4b:05:00:1b:f0:77:eb:5e:d1:
a4:a9:f2:4f:f2:bb:50:46:49:e3:69:8c:8a:21:11:
33:81:6a:14:37:ec:76:ae:f6:07:78:0a:29:7d:a8:
ed:fd:c1:52:41:e6:77:f4:ff:f1:36:6c:cb:8e:21:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:29:45:62:23:A3:B5:CB:DB:64:41:D8:75:14:0A:B3:DA:27:3C:79
X509v3 Authority Key Identifier:
keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f7:ed:3a:19:55:8e:8b:d6:1b:25:85:44:63:b7:33:8d:22:
60:d5:2f:95:81:cb:12:4f:c5:be:2e:8c:29:3b:05:bd:89:3c:
2e:26:33:14:d9:bb:ab:dc:76:d1:e0:26:3d:49:c5:d3:07:bf:
35:a8:bd:97:ca:e0:f9:c4:42:77:fc:8a:d9:0f:ce:c4:29:56:
02:ec:89:61:53:13:fd:b8:d0:d8:a3:eb:0c:5d:05:e2:0a:54:
6b:5f:f4:4f:04:21:04:98:65:a6:f9:db:16:ad:ff:69:5b:70:
0e:35:b3:ec:a5:40:57:dd:a3:b9:3d:94:22:c5:cd:ae:52:aa:
9d:92:a8:1b:e3:e5:10:e9:a4:61:87:cc:76:90:4d:a2:eb:d1:
b5:78:68:9b:40:15:b4:8d:2f:c9:6e:82:7f:ac:9e:95:c3:ed:
af:13:3b:e0:de:a7:74:47:8f:b2:2d:66:9d:82:eb:e5:01:89:
6e:7d:e5:8c:37:eb:39:a2:ae:ab:e0:11:37:57:c1:6d:9e:5f:
62:17:c0:54:b6:3c:88:f2:c1:3c:6a:e4:3a:99:38:06:52:d1:
5d:55:e4:f1:f4:ef:60:7c:c2:2f:17:30:ef:d8:88:38:e0:71:
62:4f:1f:80:9a:98:43:8c:b1:10:27:54:d3:8e:7a:2e:47:e1:
74:29:f3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:13 2026 by rpki-client