Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: U/D1JGJR+ZNo5d93KzFndc5TuZIuluML7IK8vr6fhxo=
Subject key identifier: BC:6C:08:14:8F:FB:07:6A:3D:D4:3A:7B:CB:22:3D:2F:FA:B8:2B:AC
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 019CAA58738A09D20E47C63E647CFD734614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 17:00:49 +0000
Manifest this update: Sun 01 Mar 2026 17:00:49 +0000
Manifest next update: Mon 02 Mar 2026 17:00:49 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: U3T5o5BpE6VK+6lAtgjdOSTymPEnHmMRtIm5/me/Oqo=)
2: jRSx240EFvikEXOWUrVqRyU2b0s.roa (hash: bVFXm7wLR7zi83z8MQIWEvOELjneGFr/AACpBxvKs98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:73:8a:09:d2:0e:47:c6:3e:64:7c:fd:73:46:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Mar 1 17:00:49 2026 GMT
Not After : Mar 2 17:00:49 2026 GMT
Subject: CN=bc6c08148ffb076a3dd43a7bcb223d2ffab82bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:33:ac:56:56:06:5a:b0:c5:53:ef:b0:48:
54:f5:ab:50:0e:69:c5:49:65:97:80:12:45:37:99:
ec:7b:b1:32:23:0b:b1:97:e2:ff:94:b3:2c:98:c9:
0c:74:09:b7:30:74:59:da:22:e8:77:d8:e0:3f:82:
97:fc:a8:70:88:8c:a9:98:b5:cb:51:59:ff:9a:c1:
c5:00:18:6a:32:2d:e5:c5:a0:d6:c4:de:c5:00:9e:
0a:fe:32:a9:e5:e1:83:05:9f:4d:e1:ab:1a:b9:aa:
29:46:95:5a:a9:64:56:9f:38:37:37:74:4c:3a:6a:
0d:d4:48:f0:d1:70:91:08:8b:60:8c:14:c4:e7:61:
4a:90:01:cc:0f:01:48:e4:a0:50:d8:b4:07:8a:6c:
13:3b:69:89:da:b8:ed:95:f5:d3:3f:64:16:f5:6a:
2d:8e:06:e3:8b:b0:ba:4a:42:a8:1e:36:c3:8b:16:
e2:83:ed:3a:67:19:9b:98:05:99:11:2e:fd:23:86:
54:0e:73:25:16:2b:e1:dd:bb:d2:cd:70:a5:b2:37:
a6:6f:5c:17:75:1a:83:9b:76:5f:9d:7c:4b:20:2d:
87:96:b4:65:6c:42:1b:5d:a5:97:4b:e5:b1:0e:62:
8a:41:ab:15:d2:4e:9c:01:1e:4d:09:f9:6f:44:3d:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6C:08:14:8F:FB:07:6A:3D:D4:3A:7B:CB:22:3D:2F:FA:B8:2B:AC
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4a:d1:85:c0:0a:29:f8:67:49:84:58:65:e2:f0:af:40:62:
08:27:6c:6b:0e:94:d9:14:e2:8b:12:d7:4f:79:fe:b7:db:b2:
88:06:43:70:d3:ee:ca:62:c9:65:e5:fa:a7:6d:8e:3e:0d:ba:
6a:91:35:93:a6:01:85:c8:4c:9d:01:c9:16:70:e5:9e:a7:71:
e7:35:20:cb:67:2c:45:47:6b:6b:17:a0:ae:74:04:5b:13:7a:
a0:28:c0:d0:93:6d:66:35:c5:e1:e4:38:ea:9d:30:d2:34:ad:
a5:22:3e:ed:61:85:ae:b3:90:39:12:27:0c:95:96:27:64:df:
fc:44:fa:c2:23:2e:51:e3:12:7e:65:1c:a0:b6:cd:5f:6c:59:
4e:b0:ae:cf:45:e8:08:13:a0:82:fb:03:78:c7:a1:d5:39:62:
e3:33:22:23:95:df:0b:80:56:6a:b9:df:e4:96:aa:7c:75:7f:
d5:a4:e9:b3:c4:5a:36:d2:bb:3f:ab:9c:8a:8a:56:a0:c1:32:
c5:e5:97:fb:76:de:27:6c:ed:ce:fd:a7:56:96:0b:b8:c0:5f:
4c:06:44:c0:e1:3b:43:4f:5b:6b:e9:be:e2:04:d9:d0:2d:ae:
13:de:0b:4e:e0:c1:4f:cd:f1:b2:72:33:6e:6f:88:f8:78:fb:
3c:49:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:58 2026 by rpki-client