Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
File: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft (raw, json)
Hash identifier: KCQPFxdNbmFlUxDkdmUWB8+xpfdgh7GpbZT6zkclVes=
Subject key identifier: D0:56:1E:89:A8:74:69:FB:5F:73:48:C8:92:FF:72:CA:C8:61:F9:01
Authority key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
Certificate issuer: /CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Certificate serial: 01A001A6494765BFA327309BD6681D349FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
Manifest number: 1168
Signing time: Fri 14 Aug 2026 19:01:09 +0000
Manifest this update: Fri 14 Aug 2026 19:01:09 +0000
Manifest next update: Sat 15 Aug 2026 19:01:09 +0000
Files and hashes: 1: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl (hash: TcL2mEu0pvpCjB+/CUP961WK0T3Dw0siV/tA7DmDo0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:49:47:65:bf:a3:27:30:9b:d6:68:1d:34:9f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Validity
Not Before: Aug 14 19:01:09 2026 GMT
Not After : Aug 15 19:01:09 2026 GMT
Subject: CN=d0561e89a87469fb5f7348c892ff72cac861f901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:e8:f0:16:a6:62:a5:1f:0a:f4:a9:7b:21:
4d:65:83:5f:fc:8a:97:72:5d:f1:c5:62:03:36:a7:
9a:6f:d4:dc:ff:14:05:4c:6e:9e:73:e8:51:e7:bd:
66:f9:c2:21:42:9c:60:80:2e:68:a4:10:79:47:48:
95:1d:ec:e5:36:9f:8a:23:cd:97:53:d5:06:ac:b9:
24:97:8f:d5:a8:d3:32:59:ea:a3:da:1a:2d:0b:12:
77:39:78:74:13:22:6d:99:9f:8d:3d:72:5d:f0:2a:
1b:8a:a5:d6:48:bf:29:2d:09:8c:2a:d3:c0:a2:5c:
1e:31:36:67:51:63:b4:e7:18:17:bf:21:8a:d3:95:
46:3e:32:c2:64:f0:96:5d:ca:2f:ae:7d:f6:4b:c5:
7c:55:d3:62:f7:21:1f:21:2f:16:d6:6a:26:1d:99:
f9:4b:8a:20:64:46:1b:9a:33:79:11:9c:91:06:e6:
20:c6:f1:1f:b9:76:18:35:1a:9f:5c:f1:e9:b3:88:
c0:11:e0:6a:d0:19:6e:bc:d0:af:27:c7:60:39:aa:
e0:e2:f7:df:4d:52:f2:6f:49:0a:69:67:a3:27:0f:
69:95:c6:03:0d:c8:7e:21:81:bb:3b:82:03:f7:be:
94:4b:0a:c2:6e:79:69:64:78:37:65:24:2b:da:59:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:56:1E:89:A8:74:69:FB:5F:73:48:C8:92:FF:72:CA:C8:61:F9:01
X509v3 Authority Key Identifier:
keyid:DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d4:cf:6e:6d:94:e5:bf:23:09:95:8a:9c:e1:b9:be:ef:a5:
29:43:d3:08:bd:55:ff:30:6c:5d:34:6c:d6:df:19:54:99:ba:
70:bb:b4:3a:76:13:1d:5c:c5:02:60:35:ec:6e:6d:51:6f:b3:
7f:28:48:7d:7f:04:d0:d5:c6:b8:55:e3:b3:af:69:60:9c:bd:
c9:c7:1d:f7:17:65:c2:65:0c:b8:37:87:bd:26:26:4e:93:c1:
5a:80:06:d8:cd:56:04:27:6c:75:55:8b:ec:11:b8:ae:58:00:
cc:f9:34:ec:c6:fc:87:5c:6e:79:db:6d:5e:21:6f:74:1b:d0:
be:68:d3:aa:63:ef:ea:bf:13:68:e1:3e:36:8a:7b:c5:e9:9d:
f4:1d:79:6d:69:c4:da:71:f1:54:ec:76:3b:e3:5b:b6:5b:20:
ae:b1:b5:4f:45:0b:99:b1:76:c2:2f:cf:2b:78:8c:26:42:f6:
00:e9:43:68:0e:eb:97:5b:79:ee:86:8e:45:21:ce:be:3a:a3:
6d:e1:50:97:9c:be:76:3e:48:c7:da:9c:a3:c1:64:f7:e1:dd:
ef:b9:67:4b:3d:c9:a1:e9:06:53:29:38:10:2d:e5:f0:9d:5b:
fa:eb:b3:3d:09:73:4d:4b:4d:97:de:46:24:d5:7d:8a:25:c0:
fd:8a:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:25 2026 by rpki-client