Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier: qvgi48wKPJO4/1iurW5ZkuUaJw0j9kF+tCkzEHWM5es=
Subject key identifier: A1:D4:00:9A:A6:F6:75:24:74:CA:1D:FB:C6:ED:16:C3:95:33:1B:0C
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 01A1C1414308BDE03CC2AFEA767217964325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number: 1AE9
Signing time: Mon 09 Nov 2026 17:00:41 +0000
Manifest this update: Mon 09 Nov 2026 17:00:41 +0000
Manifest next update: Tue 10 Nov 2026 17:00:41 +0000
Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: zOmCEht5bN6qPJ1LIdaZ2300OZzF6jEVTd4TYfVts4c=)
2: bFzdMPznlOjSbXFpquaFvhugI8E.roa (hash: K3/O8FhhB6ddNanECmUzETBKUHzHCD/aSiUCGY1B2qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:41:43:08:bd:e0:3c:c2:af:ea:76:72:17:96:43:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Nov 9 17:00:41 2026 GMT
Not After : Nov 10 17:00:41 2026 GMT
Subject: CN=a1d4009aa6f6752474ca1dfbc6ed16c395331b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:49:87:15:ed:fd:35:21:69:54:fd:5d:83:
94:a0:62:a7:8a:67:7c:e3:30:e0:7a:7d:35:9f:b2:
0b:89:7c:19:38:28:a4:21:56:a7:62:80:79:db:52:
0f:1a:cd:65:b9:b4:14:ea:14:c0:92:94:7d:58:13:
f4:38:25:4b:65:42:cb:93:e2:c2:2b:13:41:db:3c:
bb:c3:96:92:e6:af:ae:db:7e:f4:3a:41:8a:11:8a:
00:31:fc:b3:aa:05:7a:5a:f2:2d:f4:36:4b:90:bd:
45:60:83:f1:af:f3:5e:95:39:6d:48:d4:91:b6:46:
e0:8d:c1:04:87:f6:c0:80:be:ff:e4:6c:19:f8:7a:
dc:c5:38:f0:2b:dd:ef:8f:f5:c9:e6:23:78:43:e3:
9f:fe:ea:71:fc:39:97:a4:93:a9:15:70:36:c6:c5:
26:97:1e:05:03:74:41:5c:9b:51:af:cf:73:0d:b0:
5b:19:8c:ed:31:a8:4c:d6:55:52:d1:2b:4d:0c:a6:
7f:d0:55:07:12:a6:17:34:00:cd:72:c0:84:de:ec:
7a:12:77:6b:09:81:86:4b:be:60:3a:1e:88:42:75:
99:72:40:99:b8:35:0e:fa:e8:0c:8b:43:d7:78:06:
1b:43:47:d6:51:97:3f:58:6e:66:29:1c:16:05:23:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D4:00:9A:A6:F6:75:24:74:CA:1D:FB:C6:ED:16:C3:95:33:1B:0C
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:86:e9:8e:80:80:87:f9:d6:1d:d5:24:00:99:43:41:bd:76:
cb:fa:e7:c1:95:72:26:77:e5:85:67:2d:52:37:ed:a4:6c:6e:
60:86:5a:e6:bc:dd:41:09:f4:25:42:aa:8e:4d:b3:24:e6:72:
e3:03:9f:62:4c:a6:39:6a:fc:8f:1d:e8:72:c6:5e:18:c2:42:
62:85:05:79:fd:73:d5:cb:d0:8f:4c:d7:8c:c4:51:a7:c2:37:
29:d8:e4:24:4b:25:f1:71:af:64:6e:b9:bf:cf:be:fd:f5:3b:
ac:b1:67:93:cd:3b:48:39:31:26:ac:d1:ba:d8:f9:6a:96:ed:
bb:40:28:03:12:5a:aa:23:97:eb:b1:ce:e6:0e:e9:42:f5:0b:
aa:61:a9:04:c9:fd:4b:74:7e:cb:15:33:f0:af:02:d1:48:b5:
2e:e1:5c:ac:73:97:74:30:4d:63:b9:f7:55:d4:75:c7:2f:50:
14:a4:b6:78:f0:ac:33:7d:5f:25:24:3b:f1:38:2f:ef:c6:f8:
25:7d:dd:3f:2e:dc:f8:f3:13:a7:89:92:ab:48:3e:23:4e:79:
04:97:11:e5:24:f8:1e:03:07:d4:9f:16:51:da:9d:c1:45:09:
7e:0d:8b:a3:bf:a2:f7:82:ef:67:02:fc:22:e0:42:c6:2e:f1:
0c:d6:96:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:49:15 2026 by rpki-client