Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier: p7CHME9TcH8xZ4OWGL+/QZ/W5ScWrg54HmayyS5ST98=
Subject key identifier: 9C:05:CC:8F:C6:B9:1E:F2:7C:79:05:6C:3B:27:92:F9:06:80:CC:D3
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial: 019D3940AB874C29BC9E648ABF1AA0E6F61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number: 1121
Signing time: Sun 29 Mar 2026 11:00:32 +0000
Manifest this update: Sun 29 Mar 2026 11:00:32 +0000
Manifest next update: Mon 30 Mar 2026 11:00:32 +0000
Files and hashes: 1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: 3WwsBZU9CNtbmUoY4LPog5ZmG0GJhUseOLkFww/vRwc=)
2: SKcH6GqAnwSkb7fUKCyzsH2pE4c.roa (hash: FlzY0BJvsluyy6RMybQuGpqHaLrEW1okMJt3+ASEjLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ab:87:4c:29:bc:9e:64:8a:bf:1a:a0:e6:f6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Validity
Not Before: Mar 29 11:00:32 2026 GMT
Not After : Mar 30 11:00:32 2026 GMT
Subject: CN=9c05cc8fc6b91ef27c79056c3b2792f90680ccd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:af:97:e7:21:84:24:22:28:86:f8:cf:ac:
b9:27:ea:a9:46:a3:d1:82:11:9e:25:b5:d5:fb:38:
9b:b6:84:08:fa:cd:3d:bd:00:a9:68:89:8b:48:06:
7d:11:1a:f1:cc:06:fe:04:4b:12:e9:98:05:6f:6d:
1d:0a:22:40:b8:f5:da:10:3e:4d:71:96:23:da:a5:
a8:2d:cf:d3:e5:5d:bd:e2:ab:26:07:bd:fd:9d:9e:
70:ae:79:e4:1b:0f:03:0b:76:5e:c7:79:a6:25:ed:
1a:60:aa:67:ad:a2:00:18:ed:9d:c9:26:97:18:e4:
b1:65:0a:8c:6e:cc:73:91:0b:9c:19:29:b9:8d:6e:
e1:da:47:20:cc:8b:b0:1b:45:ee:7a:78:57:73:8f:
14:c3:a6:f9:8a:bb:49:90:fa:b9:73:34:22:fa:fc:
e9:1d:8c:b3:03:d2:7b:e7:ce:f7:70:22:3a:4a:84:
fc:ab:83:ca:92:61:aa:06:55:f4:d0:89:aa:7e:d7:
0f:8c:45:32:ff:6f:a8:3c:7b:44:c4:24:75:01:f6:
fa:63:96:d6:31:1d:ad:c9:e9:d8:88:c0:66:4e:6c:
73:a9:32:e8:87:7a:ba:50:f1:16:64:a4:0e:a9:d9:
f1:d3:74:b9:71:39:b4:04:9e:0f:9a:89:b6:30:31:
56:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:05:CC:8F:C6:B9:1E:F2:7C:79:05:6C:3B:27:92:F9:06:80:CC:D3
X509v3 Authority Key Identifier:
keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:99:df:20:5d:b7:42:22:97:3f:46:a7:75:95:25:a2:eb:15:
d7:b9:00:90:24:57:b0:00:68:93:20:7c:e0:41:3d:a1:55:7b:
c1:ad:69:0f:08:71:94:90:ed:37:ce:8d:af:bb:32:4f:f0:66:
a7:04:8f:1e:73:57:a3:92:31:12:42:c5:c2:56:a7:fc:0a:43:
10:9d:dd:6a:d6:37:90:3c:b9:fb:44:4d:a3:ab:43:2f:9b:8f:
f1:55:97:fe:d9:5c:91:fe:26:01:9a:ed:60:86:ea:1e:4a:20:
24:72:57:9b:61:41:30:13:f1:b9:fa:ca:02:90:be:e1:74:77:
d6:f4:43:17:cb:76:a7:1b:4f:f9:64:e4:c5:2d:d0:bb:1a:24:
49:d1:4a:f5:16:47:59:56:46:23:27:40:45:86:69:3f:cf:45:
c5:3e:f3:f0:0a:e2:e7:4e:32:ad:39:40:43:2f:81:0c:9c:3d:
24:cb:e0:42:f4:2c:b5:10:ec:c3:45:c6:12:86:8b:92:2a:39:
71:fd:77:82:ea:07:cb:75:9a:d2:6a:df:9e:b7:df:26:8f:77:
cd:2e:26:80:c5:ad:ad:d8:c9:0d:76:e6:d2:14:ff:37:c1:66:
14:6b:77:b1:09:9d:11:c2:fc:60:f2:47:98:2f:66:dd:23:23:
ee:10:60:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:43 2026 by rpki-client