Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: 5y7SgjXmsZj1S/y19V4hSiGGnifP8cXbFvpqdugTvl8=
Subject key identifier: D4:27:70:F9:58:20:8D:A5:4F:7E:DB:E4:1A:24:CE:85:B9:66:43:47
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 019D99D042DAA454EAF6428598DC5C0D0E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 05:00:55 +0000
Manifest this update: Fri 17 Apr 2026 05:00:55 +0000
Manifest next update: Sat 18 Apr 2026 05:00:55 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: q+9texro9LEvc5Kbdu830LoTSJADJUwn+w7wCGHM1qg=)
2: jRSx240EFvikEXOWUrVqRyU2b0s.roa (hash: bVFXm7wLR7zi83z8MQIWEvOELjneGFr/AACpBxvKs98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:42:da:a4:54:ea:f6:42:85:98:dc:5c:0d:0e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Apr 17 05:00:55 2026 GMT
Not After : Apr 18 05:00:55 2026 GMT
Subject: CN=d42770f958208da54f7edbe41a24ce85b9664347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:34:65:10:ee:46:52:cb:15:63:ad:b3:e6:
5f:4a:80:a2:87:e2:5d:b3:7b:b4:ed:bf:cd:a4:f0:
ad:fe:17:59:c2:e7:e2:7e:e0:24:6b:ac:0c:e8:41:
c2:bb:05:f8:07:71:2a:e7:0d:5d:43:51:31:15:bc:
52:7c:79:f4:6f:e9:82:dd:ab:88:fc:87:69:87:e2:
60:91:97:47:7a:80:98:1f:df:36:4c:3b:3b:ac:be:
86:c3:34:8d:b6:38:d1:a3:ee:df:f7:6c:a2:91:5a:
33:d8:dc:19:16:11:52:89:db:9f:11:2a:c9:05:9a:
94:ec:eb:64:44:d9:95:8a:ef:d5:7c:a1:e5:c8:ca:
94:1d:2d:49:c6:d4:b4:c1:5f:3a:fd:e3:ab:f9:24:
68:ce:53:dc:d9:20:6c:31:dd:07:46:d1:7a:5e:bf:
77:7a:fe:a1:94:fd:b0:e3:c3:e7:a8:a0:4b:35:fc:
5a:5d:a3:93:10:35:16:5c:37:64:37:b0:c0:52:f2:
d3:1d:43:ee:2f:80:1f:37:15:e3:41:80:6d:a2:09:
f2:cf:b7:aa:e8:53:a4:ea:23:5b:fc:fa:c4:1c:52:
a4:87:5d:20:2d:51:eb:ca:db:25:dd:b7:4b:62:5f:
55:43:cb:eb:bc:9a:bf:14:9e:34:5f:b5:4b:17:36:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:27:70:F9:58:20:8D:A5:4F:7E:DB:E4:1A:24:CE:85:B9:66:43:47
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c1:da:1f:eb:34:3c:6d:a6:e0:3e:58:d0:62:49:72:9f:65:
66:f9:dc:06:cb:9f:5f:5e:98:27:12:2d:f2:04:3c:b6:fd:25:
e1:e6:54:22:62:b8:0b:95:ec:eb:b5:6e:1b:d5:59:93:03:24:
f5:0b:67:36:6b:32:9c:61:ba:38:b6:84:bb:37:04:aa:7b:3d:
fa:c8:a0:ca:e8:e3:19:1d:7c:ac:42:1b:e1:ee:16:62:57:45:
71:b8:ff:7d:20:92:a1:e2:fd:db:0e:ae:a4:69:82:c5:d1:45:
43:68:d8:8c:9b:54:b7:5c:e3:d8:f0:db:ce:6f:1e:22:03:1a:
6a:e6:d9:36:43:36:36:3b:03:6c:54:e4:3c:06:cb:e2:6e:93:
36:53:8b:53:b2:55:ae:6b:cc:24:42:a4:49:d7:3a:0a:90:4b:
60:74:b2:f5:b7:82:c3:7c:e2:6a:b9:e4:99:b3:b2:cb:67:c1:
d8:a1:04:94:2e:de:91:d0:ab:11:90:d8:a0:89:d7:4d:f8:3c:
87:c9:1c:66:ad:3d:b9:dc:1a:b2:21:0d:d7:54:fc:1a:8f:4c:
6a:c6:2a:b3:11:46:0f:83:71:a0:42:72:ab:6a:dc:7b:a4:b9:
8b:f8:57:eb:0f:7d:f1:91:29:1a:39:3a:ec:00:9a:6e:52:fc:
0d:74:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:54 2026 by rpki-client