Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier: mVJpIav3K1KgPjqJLg4gWlmRo/RD8EdTGp5o0DJeDig=
Subject key identifier: 4D:23:8C:9A:60:A7:41:EF:C3:35:F6:A4:D9:A9:BC:87:02:6C:A9:74
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 019FAC3F3EE8A70D678A4994BDB5222E1A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 05:00:53 +0000
Manifest this update: Wed 29 Jul 2026 05:00:53 +0000
Manifest next update: Thu 30 Jul 2026 05:00:53 +0000
Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: lN0JDzB94N9Hj9ueUGYjVrX14UsrfIEh/qMcSDkpEqc=)
2: bFzdMPznlOjSbXFpquaFvhugI8E.roa (hash: K3/O8FhhB6ddNanECmUzETBKUHzHCD/aSiUCGY1B2qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:3e:e8:a7:0d:67:8a:49:94:bd:b5:22:2e:1a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Jul 29 05:00:53 2026 GMT
Not After : Jul 30 05:00:53 2026 GMT
Subject: CN=4d238c9a60a741efc335f6a4d9a9bc87026ca974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:29:a7:b1:c2:dd:08:2a:5f:b6:06:b3:49:
72:9f:dd:7e:af:b7:d5:34:27:28:85:33:a9:8d:27:
9e:52:92:9c:67:d8:1a:de:00:e9:be:0f:e7:0e:36:
8c:00:7b:d1:94:94:01:f2:74:4d:57:b1:48:49:a9:
1c:22:f9:1b:a6:d7:3b:31:4c:71:4c:43:db:fe:07:
57:76:0a:6b:dd:81:83:e7:77:02:87:62:f9:ad:ff:
ac:16:7c:2f:a1:75:55:6b:ff:24:a9:ab:78:98:86:
48:8a:e3:4e:16:70:ba:83:6c:81:62:bd:c4:8f:cb:
ec:48:89:73:64:80:d7:a1:21:7a:04:a7:78:bc:b2:
23:91:7e:43:2d:23:d7:9f:6f:31:b0:0d:c1:ee:9e:
a7:3f:82:78:1d:2d:9c:0f:51:04:ae:ee:52:bb:0b:
9d:db:93:11:c7:4f:ba:a7:27:4a:50:89:60:cc:a2:
87:3b:25:1d:66:56:fa:10:d5:d9:d7:8b:70:88:2f:
3d:15:cb:23:36:72:6d:36:53:d5:48:26:0f:87:68:
7c:00:30:e1:af:e6:a0:68:95:ae:03:47:8f:3b:fb:
19:d3:e5:d4:b6:2f:25:16:91:f0:39:1d:a6:eb:66:
18:c1:ea:d4:24:4a:86:6e:32:90:93:92:95:ea:2f:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:8C:9A:60:A7:41:EF:C3:35:F6:A4:D9:A9:BC:87:02:6C:A9:74
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:df:bb:08:63:c4:e5:15:0d:c0:b5:b8:69:20:f0:a6:cb:32:
d8:d1:53:1a:4c:ba:d8:2c:7c:67:99:f3:e9:09:38:a6:8e:df:
f9:d7:15:72:f0:4f:b4:f6:a0:1c:c5:82:f1:4b:10:e0:d2:36:
f7:61:81:b7:06:34:57:e5:5e:f4:77:7b:88:e5:b5:3c:da:d5:
ad:9d:37:70:00:e1:a7:9c:e7:38:0a:65:e7:4e:40:34:58:74:
02:60:4f:8f:3d:50:2a:d0:94:9e:11:45:8a:9e:c8:c7:de:47:
10:a2:70:8c:c4:1b:0c:f6:b9:c3:37:e5:d4:34:6c:03:c8:69:
12:f7:ae:57:33:03:54:15:84:bb:1d:b6:75:f5:0c:b6:23:d4:
5b:90:c0:1e:47:af:3b:11:fb:4c:de:04:5d:d3:38:43:71:32:
3f:57:8e:01:2f:2c:15:44:56:c5:7d:b2:62:46:7f:b4:c1:6c:
62:dd:8b:76:81:84:31:26:6b:f9:4a:c6:7e:71:fc:fb:36:f7:
b8:25:05:1e:62:36:a3:08:20:5f:e8:53:27:86:87:79:fb:0e:
96:c4:3c:7d:43:60:e9:1e:80:91:e5:74:fe:79:b7:b1:e7:59:
43:78:a7:4e:3c:ad:ae:d8:75:ba:4b:0f:10:fc:25:92:c0:4b:
f8:f6:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:10:01 2026 by rpki-client