Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: MjbyBtsI8YQIT7l9t7KIext3uKzSuRMRtHWylRszgog=
Subject key identifier: 83:86:2C:1F:57:04:AA:11:B6:74:C5:19:8C:CA:3E:4B:E2:11:4E:FD
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 019FAAF59E9206CA826CC2C5BDD461E0DA6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 1966
Signing time: Tue 28 Jul 2026 23:00:51 +0000
Manifest this update: Tue 28 Jul 2026 23:00:51 +0000
Manifest next update: Wed 29 Jul 2026 23:00:51 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: mxRc5gGIgZnDops4RPmhG9VSq/vmt7Ka5A8T+0DTZZw=)
2: jRSx240EFvikEXOWUrVqRyU2b0s.roa (hash: bVFXm7wLR7zi83z8MQIWEvOELjneGFr/AACpBxvKs98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:9e:92:06:ca:82:6c:c2:c5:bd:d4:61:e0:da:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Jul 28 23:00:51 2026 GMT
Not After : Jul 29 23:00:51 2026 GMT
Subject: CN=83862c1f5704aa11b674c5198cca3e4be2114efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:7f:0c:33:60:de:00:50:20:07:0d:27:01:
53:f4:ec:60:81:7d:ab:90:44:bc:2d:86:51:93:ff:
0f:10:b0:31:be:c4:8a:25:b0:07:f6:2f:2f:2c:8b:
a4:10:a8:66:48:70:56:0a:40:52:a0:9d:3a:cb:31:
57:cb:3d:24:8c:0e:e8:c2:ef:2d:6c:48:31:09:6c:
82:70:8d:49:9e:6e:66:9c:d6:f8:a2:cd:f6:46:8e:
3b:66:b2:5f:be:1c:77:1e:df:5d:43:9c:48:d3:b4:
f4:c6:7c:03:bd:af:c4:9c:30:70:5b:fe:df:9c:39:
14:92:06:b7:5f:9b:2f:0b:9d:98:b1:65:dc:ec:36:
64:36:5d:26:6d:7d:ec:c4:9c:39:e2:08:40:4f:e2:
e1:37:23:66:4d:40:4c:ad:12:78:dc:be:ee:e4:a9:
6b:59:6e:87:13:06:0c:e6:37:e3:e4:09:22:78:90:
ba:3d:57:0d:bc:76:0f:86:7b:24:00:b0:5e:41:63:
ca:c2:c0:05:a1:19:42:8b:f3:8f:17:24:fc:8c:05:
57:7e:09:0f:c8:64:0f:0d:70:82:e0:ab:fe:7b:68:
75:f2:72:77:35:9a:44:2a:1e:85:2e:37:81:36:4d:
b2:0e:fb:31:b9:de:79:4a:4e:79:3e:2f:cc:58:9b:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:86:2C:1F:57:04:AA:11:B6:74:C5:19:8C:CA:3E:4B:E2:11:4E:FD
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a4:57:a9:73:7c:e6:a4:d7:53:12:89:c4:71:d1:f4:a2:95:
31:aa:88:aa:5b:6c:2e:fe:d9:c8:17:c5:e2:e5:e9:d4:f5:46:
96:52:2a:2b:09:51:62:07:11:c1:9a:aa:d3:35:f7:2a:38:7c:
63:39:2e:fa:57:97:a1:5b:28:55:e6:e2:6e:16:64:34:e5:d0:
3a:12:6e:db:7e:8d:c5:e1:c6:5e:64:ca:39:d8:78:c7:1c:bc:
37:9f:d5:27:ee:d6:90:a7:aa:96:ce:f4:c3:08:30:fc:57:bd:
b8:7d:ca:eb:6e:bd:5a:b0:ce:3c:21:7e:2d:df:be:37:86:18:
35:08:44:71:7c:0a:00:85:c1:35:b1:ad:81:28:af:be:f1:02:
4c:5a:44:cf:c0:4e:27:df:48:a7:ff:f9:b6:28:38:35:4f:f2:
88:f8:8b:76:7a:0b:85:ad:62:da:28:23:cc:62:07:fa:a7:79:
6e:0e:99:20:93:95:2d:00:cc:ad:8a:95:f9:c9:d9:cb:eb:fb:
26:53:1f:d5:a0:c9:34:25:42:84:b7:8e:c9:14:8a:89:35:3a:
12:2d:95:9f:d1:8a:aa:65:1a:df:97:00:25:1a:f6:d4:ba:50:
a0:8e:46:9f:95:b0:8b:99:9d:c9:cf:90:f6:f9:70:04:15:21:
4f:04:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:11 2026 by rpki-client