Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
File: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft (raw, json)
Hash identifier: 1aSlZ4Y0O+Z13R9Kfiz9sgZYgjehfHs5AdWLHbPw4+Y=
Subject key identifier: F6:81:78:6D:A3:FD:69:7D:72:9A:FA:CD:72:D5:B0:31:E5:19:5A:1B
Authority key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
Certificate issuer: /CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Certificate serial: 01A13E5CA27941736CCB6CC4AAE7A359D24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
Manifest number: 120C
Signing time: Thu 15 Oct 2026 07:00:20 +0000
Manifest this update: Thu 15 Oct 2026 07:00:20 +0000
Manifest next update: Fri 16 Oct 2026 07:00:20 +0000
Files and hashes: 1: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl (hash: kyXFJaY5/MMhAdbD+CfCBNW9UNeFGEt15mex+YgimFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:a2:79:41:73:6c:cb:6c:c4:aa:e7:a3:59:d2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Validity
Not Before: Oct 15 07:00:20 2026 GMT
Not After : Oct 16 07:00:20 2026 GMT
Subject: CN=f681786da3fd697d729afacd72d5b031e5195a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:d8:b6:58:89:d3:5f:a0:0d:fa:5d:4d:7c:
f4:46:15:27:0b:c1:db:de:86:c2:1c:3a:62:f6:37:
d5:a4:97:52:70:55:22:cf:2b:86:47:dd:7f:cb:df:
f2:c5:4c:09:e5:7c:ee:a9:c8:d5:d6:b4:61:a0:93:
19:27:53:d7:f5:fb:b4:14:06:6c:8a:39:21:62:fb:
59:92:02:0d:0d:f1:c0:48:ba:89:95:d6:22:04:7f:
b4:00:3e:ed:58:d2:82:d5:0e:ce:f9:c3:4f:82:76:
74:bd:7b:2b:06:e0:8c:4e:2b:04:b8:46:11:5e:2a:
c1:a2:e8:08:44:f2:07:de:2b:be:98:43:cc:9d:25:
5c:e8:4b:6a:72:84:9f:9a:e4:db:09:c3:10:53:74:
f8:54:1a:5c:f7:4c:94:a8:91:2e:da:92:80:46:65:
d5:92:4e:80:a1:7c:96:3f:3a:e1:5f:8f:d9:0a:72:
3d:c4:d3:0d:68:5d:df:60:41:2e:08:b1:b4:df:48:
9c:7c:e6:df:2b:a8:66:77:89:16:b4:4c:7d:f9:fd:
d7:43:72:0f:c2:39:7e:b3:74:5e:f6:91:43:f9:fb:
ec:1c:3c:5a:ce:23:7f:67:eb:2a:23:57:31:d0:fb:
e8:da:55:11:cc:a1:fe:16:1c:96:04:f3:b8:65:02:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:78:6D:A3:FD:69:7D:72:9A:FA:CD:72:D5:B0:31:E5:19:5A:1B
X509v3 Authority Key Identifier:
keyid:DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:79:d2:94:e0:45:a5:c2:aa:0d:e7:85:02:27:81:d1:24:5c:
15:d1:c6:df:a3:69:61:94:6b:e1:0d:5f:93:54:b8:d1:24:20:
c5:8e:80:56:7e:34:93:2f:ef:fb:b6:6d:1d:54:48:47:42:25:
65:a2:71:8b:fa:9a:88:2f:f4:0d:39:99:70:2f:41:85:a3:3a:
ef:de:f3:88:f4:69:a9:98:60:43:fc:e3:51:61:e7:34:b0:f4:
63:8f:a0:96:cf:03:36:9f:c4:0d:86:21:67:5c:7e:db:a2:2b:
0a:fe:2d:6e:78:52:72:64:a6:27:0c:ca:ed:bd:6e:b2:99:e3:
c0:51:f3:33:22:75:fa:91:8e:9c:70:0d:19:84:a5:71:f4:7f:
07:a6:02:6e:0b:17:04:86:72:63:e7:da:8d:92:96:8d:65:b3:
b5:a6:cf:5c:74:96:80:1d:ef:04:d8:7e:65:19:a1:37:38:67:
f8:70:7e:d9:e3:3c:7a:f9:67:cb:fb:1f:a3:12:2a:d2:e6:d0:
9f:91:b5:f8:80:ce:b8:4d:c1:23:bd:4b:30:e4:29:90:a6:5b:
f8:a5:f3:70:67:21:22:b0:a0:8e:70:d2:a0:8e:87:e5:ca:3d:
4d:bf:72:0b:36:62:df:63:29:27:69:23:9f:23:e7:63:90:0e:
f4:bc:5a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:24:57 2026 by rpki-client