Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
File: 31rDE7L3xc3GUDLKoGSK1zjwdds.mft (raw, json)
Hash identifier: hsM7FNmNJz/uY13l5wUEhjNC0I32FudbG3i7kghE9K8=
Subject key identifier: 02:FA:8F:F7:C0:11:48:38:96:82:1B:BB:91:4B:D0:88:E1:6D:98:55
Authority key identifier: DF:5A:C3:13:B2:F7:C5:CD:C6:50:32:CA:A0:64:8A:D7:38:F0:75:DB
Certificate issuer: /CN=df5ac313b2f7c5cdc65032caa0648ad738f075db
Certificate serial: 019EC1EE3BC8FCA58CEB9079FFAD617A2B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
Manifest number: 08
Signing time: Sat 13 Jun 2026 17:01:16 +0000
Manifest this update: Sat 13 Jun 2026 17:01:16 +0000
Manifest next update: Sun 14 Jun 2026 17:01:16 +0000
Files and hashes: 1: 31rDE7L3xc3GUDLKoGSK1zjwdds.crl (hash: xhnD8SnvulsA+eErFIYiZV4a7gmJwl6xNZE0DaPE3Gk=)
2: 7kBOew20AqCcSN7unx6uuoSngeg.roa (hash: oLLPx2wFkNsUiyxMXNv8D1J8xAnpI1BWVugs3oA0gdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:3b:c8:fc:a5:8c:eb:90:79:ff:ad:61:7a:2b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df5ac313b2f7c5cdc65032caa0648ad738f075db
Validity
Not Before: Jun 13 17:01:16 2026 GMT
Not After : Jun 14 17:01:16 2026 GMT
Subject: CN=02fa8ff7c011483896821bbb914bd088e16d9855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:e8:ff:67:0d:f6:50:b9:38:21:db:03:a2:
4f:a0:a7:0c:0a:16:ed:43:43:a4:83:f6:ab:65:99:
c8:bd:14:ec:1b:97:d9:77:91:88:39:40:6f:e7:12:
a2:5c:97:f9:46:96:54:ea:33:c9:f8:4a:3b:fd:db:
f6:e0:b1:c9:75:db:f6:ff:61:4f:b0:0c:d7:80:a4:
e1:63:9b:34:96:fb:24:d2:f7:63:b2:10:36:0a:74:
06:8c:3f:6f:cd:90:35:d9:c3:2a:bd:ff:79:b4:cb:
c5:40:3d:0f:e5:b0:54:0e:8f:0c:3b:c5:98:26:69:
a0:f7:28:55:0f:2d:1a:d1:b4:da:44:24:b3:99:c2:
7e:86:d4:43:83:96:5e:d1:1d:48:e8:f7:a5:0d:d8:
66:b3:8d:64:e9:bc:7c:a0:cd:f7:62:4f:c4:3a:b8:
a8:88:af:fc:cb:12:a5:8d:d6:d1:29:f4:e7:d4:ee:
81:96:b3:d7:4e:a0:9d:8e:44:a4:de:f3:d2:63:cd:
05:62:6e:fb:78:be:df:59:c9:6c:38:fa:a9:7c:99:
09:22:a6:ad:51:46:47:31:f1:56:48:5b:38:8f:fc:
ba:d4:37:99:70:69:94:9f:c7:d8:3c:bc:0d:20:19:
f6:0b:46:8f:67:a6:7a:44:56:9b:e8:3e:64:90:a5:
d4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FA:8F:F7:C0:11:48:38:96:82:1B:BB:91:4B:D0:88:E1:6D:98:55
X509v3 Authority Key Identifier:
keyid:DF:5A:C3:13:B2:F7:C5:CD:C6:50:32:CA:A0:64:8A:D7:38:F0:75:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:98:eb:1c:ee:8a:18:8e:f6:94:ec:87:c6:87:5b:85:98:cd:
48:2d:8d:5a:05:2b:d6:24:0e:8d:d8:d7:21:fd:e6:e2:3f:80:
83:bc:6d:41:3a:ab:a9:1d:03:8a:c4:c8:5b:19:51:ef:b9:56:
1e:9a:59:00:0a:fc:4e:92:0e:61:57:e7:11:62:a8:82:b8:c6:
c3:52:0b:73:77:ba:6b:53:85:a0:44:a2:51:f8:eb:aa:4b:46:
00:74:77:de:86:d9:c4:40:5e:c4:4e:f8:3d:52:9c:31:76:33:
e4:c3:26:5d:0b:a9:22:e8:77:5d:a0:5d:44:14:23:ee:de:70:
71:8e:0e:03:bd:f5:30:ee:f5:1e:bc:bf:56:7b:d5:bd:ea:ed:
4a:0b:d3:0d:d5:9e:92:a8:9c:72:92:6f:7f:7a:cc:dc:5f:d0:
bb:36:96:13:65:73:e8:62:cd:74:23:1b:8a:af:48:f5:1f:5e:
74:e6:5e:d7:8d:a3:c7:8a:36:a5:11:75:1d:9d:e3:45:34:5b:
74:87:01:81:86:89:0a:fb:13:48:73:3e:c6:2f:5f:9f:7a:c2:
73:92:08:3b:49:17:1b:1e:d4:cc:73:42:84:41:39:ad:e0:22:
9e:92:e3:11:ef:82:9f:a5:15:73:dc:41:08:96:8d:6e:80:ca:
69:d1:df:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:14 2026 by rpki-client