Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
File: 31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json)
Hash identifier: B2S7SpebKKimzEgPQWgxhcl0bbJrcGlwRwap2jycuIk=
Subject key identifier: 22:8B:6C:39:FC:C1:0C:ED:A8:31:73:DA:EA:AE:AF:6C:58:23:47:8A
Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
Certificate issuer: /CN=df512010611f91b16296728a94d1a665b4ab7570
Certificate serial: 019D996242CFBA79DBA3F995FFB62CE05EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:46 +0000
Manifest this update: Fri 17 Apr 2026 03:00:46 +0000
Manifest next update: Sat 18 Apr 2026 03:00:46 +0000
Files and hashes: 1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: 20lqN1dWV7Cgu22bEaGOX+zjnm6smuR79xPfWz7kqII=)
2: KwvgmxkuN2Vb_g5rfP-r60wn56s.roa (hash: pRgKb7xCV6ebEVi6C792sZZDSzLwlu0u5goqcmXhzF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:42:cf:ba:79:db:a3:f9:95:ff:b6:2c:e0:5e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570
Validity
Not Before: Apr 17 03:00:46 2026 GMT
Not After : Apr 18 03:00:46 2026 GMT
Subject: CN=228b6c39fcc10ceda83173daeaaeaf6c5823478a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:4c:67:2e:fb:25:a7:01:e3:8e:d1:06:20:
e9:27:aa:ef:9b:81:31:63:61:4d:40:50:a3:ae:0b:
19:08:5c:7f:1c:7a:fd:a9:f6:a5:66:3b:a1:67:be:
7d:87:86:98:f5:4c:cf:09:2e:3f:c9:b6:1e:2a:76:
7f:3a:d4:f3:b7:d8:51:93:70:03:6e:64:82:83:fe:
9a:d1:b1:6a:18:68:31:7e:60:d0:88:0a:5f:b1:47:
04:4e:06:87:82:d7:7e:a3:6a:cf:59:ca:29:88:07:
49:db:26:bc:11:fe:00:ee:24:b7:b3:b8:8e:49:1c:
29:41:ec:0a:ea:11:ad:02:2a:24:27:3e:89:9e:df:
db:b2:40:05:97:3c:21:34:1e:b7:12:f7:c9:6e:05:
fa:69:e4:6d:9d:30:99:df:1b:1e:40:ee:c5:e4:af:
bb:f6:f8:33:54:22:1c:c2:f8:93:22:c5:af:9a:b3:
8d:29:86:6d:73:ca:05:72:10:54:93:06:fc:7d:36:
3d:16:4b:b8:83:2c:d4:f8:6c:0b:95:48:74:ee:06:
54:00:aa:ee:85:c8:19:c4:e6:4a:93:7b:9b:bb:ad:
8a:3d:e6:da:1e:88:98:6d:5a:c4:f6:84:be:84:c1:
d0:ee:9e:31:0d:a6:b0:d8:bd:90:28:e6:f2:f5:71:
eb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8B:6C:39:FC:C1:0C:ED:A8:31:73:DA:EA:AE:AF:6C:58:23:47:8A
X509v3 Authority Key Identifier:
keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b9:9a:df:3a:48:03:84:eb:d1:08:c6:19:81:81:be:e4:db:
d5:ea:86:ae:57:ec:3b:ee:be:5b:71:aa:08:c4:c4:2a:8b:76:
da:43:1e:b1:d9:7d:74:48:d4:75:c8:75:20:54:0f:06:a8:de:
35:9d:21:9b:0a:ca:3e:de:e2:74:e3:28:25:6d:12:5d:8c:11:
66:ec:3b:83:6f:47:57:58:6b:e6:e6:c8:c8:17:2f:ad:78:1d:
e8:a6:dd:c5:3b:36:e6:81:17:e8:b0:67:ce:b6:8c:eb:5e:82:
5d:76:2c:c4:8b:37:28:ce:80:8f:01:3d:74:ce:0b:4e:97:99:
05:24:54:bb:f9:ff:6f:56:40:11:58:8c:21:d8:6e:d1:7b:34:
8c:ff:d6:89:a4:e2:5b:a5:c5:93:0f:9a:51:fc:19:0a:b4:6b:
83:e1:83:e6:a3:b7:28:b2:c0:7b:a1:87:e9:84:d8:55:8e:c4:
61:ab:49:18:7e:8f:7d:98:ec:93:52:00:4c:40:a0:58:8b:73:
e1:a9:31:96:29:ae:9e:de:2b:4e:56:75:40:df:dc:c7:94:38:
57:73:a5:5d:9f:cc:55:ff:0a:76:ab:a0:fb:9a:c9:2b:a5:ff:
9a:d9:c6:08:5e:af:58:dc:b7:d7:c7:86:ad:72:af:c6:7d:f2:
27:e4:26:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYkLPunnbo/mV/7Ys4F7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTEyMDEwNjExZjkxYjE2Mjk2NzI4YTk0ZDFhNjY1YjRh
Yjc1NzAwHhcNMjYwNDE3MDMwMDQ2WhcNMjYwNDE4MDMwMDQ2WjAzMTEwLwYDVQQD
EygyMjhiNmMzOWZjYzEwY2VkYTgzMTczZGFlYWFlYWY2YzU4MjM0NzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB9MZy77JacB447RBiDpJ6rvm4Ex
Y2FNQFCjrgsZCFx/HHr9qfalZjuhZ759h4aY9UzPCS4/ybYeKnZ/OtTzt9hRk3AD
bmSCg/6a0bFqGGgxfmDQiApfsUcETgaHgtd+o2rPWcopiAdJ2ya8Ef4A7iS3s7iO
SRwpQewK6hGtAiokJz6Jnt/bskAFlzwhNB63EvfJbgX6aeRtnTCZ3xseQO7F5K+7
9vgzVCIcwviTIsWvmrONKYZtc8oFchBUkwb8fTY9Fku4gyzU+GwLlUh07gZUAKru
hcgZxOZKk3ubu62KPebaHoiYbVrE9oS+hMHQ7p4xDaaw2L2QKOby9XHr2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKLbDn8wQztqDFz2uqur2xYI0eKMB8GA1UdIwQY
MBaAFN9RIBBhH5GxYpZyipTRpmW0q3VwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWIt
YjA2MmU5NzI1YjFkLzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWItYjA2MmU5NzI1YjFk
LzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLma3zpI
A4Tr0QjGGYGBvuTb1eqGrlfsO+6+W3GqCMTEKot22kMesdl9dEjUdch1IFQPBqje
NZ0hmwrKPt7idOMoJW0SXYwRZuw7g29HV1hr5ubIyBcvrXgd6KbdxTs25oEX6LBn
zraM616CXXYsxIs3KM6AjwE9dM4LTpeZBSRUu/n/b1ZAEViMIdhu0Xs0jP/WiaTi
W6XFkw+aUfwZCrRrg+GD5qO3KLLAe6GH6YTYVY7EYatJGH6PfZjsk1IATECgWItz
4akxlimunt4rTlZ1QN/cx5Q4V3OlXZ/MVf8Kdqug+5rJK6X/mtnGCF6vWNy318eG
rXKvxn3yJ+QmbA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:20 2026 by rpki-client