Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier: 18uTyYawD7LDJthzDAc8iy1aETz4NoObEPS+Tybbx0k=
Subject key identifier: 49:7B:61:D9:36:81:E9:E8:FB:0C:72:4D:95:06:DE:0C:22:47:DA:22
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 01A0C4446B9F0E933B2D1EF8D010D414DA8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 14:00:13 +0000
Manifest this update: Mon 21 Sep 2026 14:00:13 +0000
Manifest next update: Tue 22 Sep 2026 14:00:13 +0000
Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: ltM1vkc3W8scFgtYLWD4yiLf4MyJExbAxTba3afH8sw=)
2: bFzdMPznlOjSbXFpquaFvhugI8E.roa (hash: K3/O8FhhB6ddNanECmUzETBKUHzHCD/aSiUCGY1B2qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:6b:9f:0e:93:3b:2d:1e:f8:d0:10:d4:14:da:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Sep 21 14:00:13 2026 GMT
Not After : Sep 22 14:00:13 2026 GMT
Subject: CN=497b61d93681e9e8fb0c724d9506de0c2247da22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:f2:d3:d1:1f:5c:c1:db:89:60:9d:1b:39:
96:5e:0d:06:e0:96:52:09:cb:e6:4a:1b:69:06:5f:
1d:0a:d2:c4:a8:a8:89:17:5e:ea:13:7d:47:ee:da:
e1:b4:1b:b6:d6:e2:7f:d4:e8:88:3e:cd:47:99:df:
2b:98:6b:8b:2f:f3:25:b8:de:ae:7d:a5:95:ed:6d:
bc:02:3d:b6:77:b1:3a:22:67:84:b5:a9:68:9f:81:
af:fa:93:a3:16:52:e3:38:a6:e2:b5:6f:5f:83:c8:
82:69:86:7d:b9:dc:d3:27:d8:0a:93:c9:42:36:0b:
31:1c:51:95:5c:1a:45:79:a3:cf:5d:b6:5b:1d:70:
1b:e2:0a:65:23:99:47:bc:4f:bc:15:3e:2f:b3:e5:
44:0c:21:ed:51:8f:d0:c1:32:b9:bf:8d:09:9d:91:
a2:06:78:d8:4e:2c:fa:c2:08:c9:fd:0c:25:2a:07:
67:3f:bc:20:49:25:21:dc:5c:b5:6c:5c:2f:a9:ac:
ec:b8:9b:75:c7:99:ee:d8:02:5d:d9:45:b3:d1:34:
2b:b5:cd:d4:1d:0e:97:b1:d1:9f:ed:e5:da:c5:48:
73:4d:b0:21:41:ab:04:47:6d:ef:61:81:ec:07:92:
1e:0d:ee:1d:38:e1:c7:bb:0e:86:e2:e0:4e:f8:64:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7B:61:D9:36:81:E9:E8:FB:0C:72:4D:95:06:DE:0C:22:47:DA:22
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1a:db:19:d2:21:e6:a9:f1:94:56:98:cd:80:5c:a4:be:23:
71:b9:e6:f5:d0:74:c8:5c:ee:a2:c7:d2:c1:7e:61:70:e5:e1:
67:3b:28:2c:93:ab:9a:8d:a7:ab:cc:8f:90:c3:33:b3:8b:aa:
c1:15:7b:b0:e8:f6:dd:b8:40:03:51:d5:22:fb:4f:10:0d:7d:
fe:c1:e2:aa:69:f8:fd:77:c7:6d:ca:19:17:7e:f6:99:fa:1a:
3a:66:33:8b:2a:bf:08:cb:f4:a1:ea:af:99:2f:05:de:84:2c:
d3:7c:54:3d:91:41:a5:c8:d5:25:0b:ba:cd:17:a4:ff:c0:21:
35:6e:74:3a:02:8c:ec:a2:12:28:35:8a:d9:69:cf:7f:e5:de:
2f:88:a5:5c:e8:ce:3d:8e:3f:40:83:1d:dc:b6:c9:e4:7f:30:
65:08:1a:13:91:97:a9:16:dd:28:50:0e:66:73:86:c9:dc:98:
f2:42:2b:0d:54:bd:51:02:6e:03:ed:bd:61:95:12:97:4a:2f:
ea:de:16:03:62:ff:8a:15:ac:40:db:0a:c6:38:9c:0d:a9:65:
cb:af:f0:c1:d4:5c:14:a1:6c:c2:77:2b:c9:d8:34:93:7f:84:
d9:66:64:03:c7:ee:91:4c:da:80:5e:e4:e4:0e:85:53:c9:db:
e2:0e:6b:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERGufDpM7LR740BDUFNqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTkwODNmYWY1ZjAyYmJhNjY4MDlhMWEyMjcyZWFmMjZl
OGEzNzgwHhcNMjYwOTIxMTQwMDEzWhcNMjYwOTIyMTQwMDEzWjAzMTEwLwYDVQQD
Eyg0OTdiNjFkOTM2ODFlOWU4ZmIwYzcyNGQ5NTA2ZGUwYzIyNDdkYTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUXy09EfXMHbiWCdGzmWXg0G4JZS
CcvmShtpBl8dCtLEqKiJF17qE31H7trhtBu21uJ/1OiIPs1Hmd8rmGuLL/MluN6u
faWV7W28Aj22d7E6ImeEtalon4Gv+pOjFlLjOKbitW9fg8iCaYZ9udzTJ9gKk8lC
NgsxHFGVXBpFeaPPXbZbHXAb4gplI5lHvE+8FT4vs+VEDCHtUY/QwTK5v40JnZGi
BnjYTiz6wgjJ/QwlKgdnP7wgSSUh3Fy1bFwvqazsuJt1x5nu2AJd2UWz0TQrtc3U
HQ6XsdGf7eXaxUhzTbAhQasER23vYYHsB5IeDe4dOOHHuw6G4uBO+GRJ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEl7Ydk2geno+wxyTZUG3gwiR9oiMB8GA1UdIwQY
MBaAFN9ZCD+vXwK7pmgJoaInLq8m6KN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFrSVA2OWZBcnVtYUFtaG9pY3VyeWJvbzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZDNjZTUtYzdlZi00OWZmLTlkNGUt
NTk2ZmRiYjBlZGQ5LzEvMzFrSVA2OWZBcnVtYUFtaG9pY3VyeWJvbzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8xZDNjZTUtYzdlZi00OWZmLTlkNGUtNTk2ZmRiYjBlZGQ5
LzEvMzFrSVA2OWZBcnVtYUFtaG9pY3VyeWJvbzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURrbGdIh
5qnxlFaYzYBcpL4jcbnm9dB0yFzuosfSwX5hcOXhZzsoLJOrmo2nq8yPkMMzs4uq
wRV7sOj23bhAA1HVIvtPEA19/sHiqmn4/XfHbcoZF372mfoaOmYziyq/CMv0oeqv
mS8F3oQs03xUPZFBpcjVJQu6zRek/8AhNW50OgKM7KISKDWK2WnPf+XeL4ilXOjO
PY4/QIMd3LbJ5H8wZQgaE5GXqRbdKFAOZnOGydyY8kIrDVS9UQJuA+29YZUSl0ov
6t4WA2L/ihWsQNsKxjicDally6/wwdRcFKFswncrydg0k3+E2WZkA8fukUzagF7k
5A6FU8nb4g5rxQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:39:57 2026 by rpki-client