Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
File: 31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json)
Hash identifier: mqYu/8BEzsUF4KIVRnhOg+vpx3znDmNnxZ6/rvLL+OI=
Subject key identifier: 71:21:F4:BD:90:89:7C:95:36:B6:D3:3F:49:71:A2:28:30:1B:E2:8A
Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
Certificate issuer: /CN=df512010611f91b16296728a94d1a665b4ab7570
Certificate serial: 019CABD968E2DCFAA1923C56DA6CCA4FA106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:17 +0000
Manifest this update: Mon 02 Mar 2026 00:01:17 +0000
Manifest next update: Tue 03 Mar 2026 00:01:17 +0000
Files and hashes: 1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: XnRGDZf2F7hAgqS6evYINMTZ3GOBUJ7FyJ0vve6wqRs=)
2: KwvgmxkuN2Vb_g5rfP-r60wn56s.roa (hash: pRgKb7xCV6ebEVi6C792sZZDSzLwlu0u5goqcmXhzF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:68:e2:dc:fa:a1:92:3c:56:da:6c:ca:4f:a1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570
Validity
Not Before: Mar 2 00:01:17 2026 GMT
Not After : Mar 3 00:01:17 2026 GMT
Subject: CN=7121f4bd90897c9536b6d33f4971a228301be28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:52:c7:35:be:75:8b:ee:94:07:97:75:69:d4:
4a:1a:a2:d6:65:f9:b5:91:72:b7:b1:2a:41:f0:56:
1a:18:be:e5:dc:06:f3:38:a5:dc:9a:7a:44:2f:b0:
41:01:1f:ad:94:47:5c:31:26:1a:f9:17:30:37:cc:
c1:f7:af:08:7e:44:52:8d:6b:f4:84:36:5b:0e:36:
02:33:2d:53:34:ea:1a:b7:84:f6:a6:58:3f:2c:44:
09:dd:77:93:61:a5:27:e6:68:76:5f:92:7b:fb:1c:
16:f4:eb:bd:2f:0a:06:ca:7e:00:84:ce:43:b7:f5:
55:39:b5:2a:2f:35:73:c1:bf:b1:c3:b8:95:69:c3:
0b:5a:ba:21:87:55:d9:3a:c3:22:00:b1:95:a2:20:
67:f9:2c:9c:5e:cc:7f:25:23:cd:0a:3b:08:25:7c:
e3:05:33:53:bd:a3:57:a5:68:d2:36:e8:ae:4e:c7:
4b:f5:03:01:90:23:0a:9c:79:c6:31:a3:af:ad:b0:
1d:7c:8d:35:23:e2:c0:3e:28:ce:51:95:0f:37:1f:
52:ca:2a:45:6e:5f:2b:e4:9e:d2:fc:f9:4b:16:e5:
5d:ad:45:6f:1f:7a:ef:3e:60:52:bf:66:7b:b8:ec:
81:8e:d1:f6:e6:5d:56:03:4d:2c:bc:f2:45:3a:1a:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:21:F4:BD:90:89:7C:95:36:B6:D3:3F:49:71:A2:28:30:1B:E2:8A
X509v3 Authority Key Identifier:
keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:50:30:18:7a:41:65:1f:5a:c1:0f:98:fe:54:e7:00:e8:6d:
52:85:8c:72:1a:fb:12:de:ca:57:bb:22:39:7d:99:0a:0d:fc:
c8:3c:86:87:41:16:a2:4f:25:d8:bc:1a:43:a6:5f:b1:98:45:
84:09:f0:1d:d0:d5:1e:70:dc:56:67:92:dc:6a:5d:cc:2c:ac:
d8:ea:62:ad:32:18:47:92:fb:14:cb:01:52:ee:18:71:bd:b9:
9b:17:a8:aa:d3:c2:97:61:05:66:26:4a:af:06:c4:09:40:19:
30:d8:cc:d5:40:48:60:c3:8a:14:cf:7f:c0:ee:21:ba:55:b7:
b0:75:a7:9e:61:1e:fd:d3:11:8a:0c:7b:93:2c:bc:79:bc:e0:
56:0e:98:74:51:3d:bb:bc:f5:8f:e4:45:db:34:42:b8:e4:4a:
2e:64:b6:1e:ce:87:73:d2:be:ad:fe:e9:b1:9c:6e:e7:7e:be:
96:7d:01:f9:8d:1d:5a:ef:ee:54:e6:ea:af:bb:f1:30:ee:2a:
0e:48:69:8d:e8:13:ee:d3:5e:3d:06:ff:84:5a:3c:10:ee:1e:
36:78:53:61:78:a1:a2:dd:d8:a1:58:30:7e:5c:c9:02:a3:da:
8f:45:e9:1f:99:8c:d9:fd:6a:a4:8b:76:bf:31:75:79:c4:0b:
0d:37:8a:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Wji3PqhkjxW2mzKT6EGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTEyMDEwNjExZjkxYjE2Mjk2NzI4YTk0ZDFhNjY1YjRh
Yjc1NzAwHhcNMjYwMzAyMDAwMTE3WhcNMjYwMzAzMDAwMTE3WjAzMTEwLwYDVQQD
Eyg3MTIxZjRiZDkwODk3Yzk1MzZiNmQzM2Y0OTcxYTIyODMwMWJlMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VLHNb51i+6UB5d1adRKGqLWZfm1
kXK3sSpB8FYaGL7l3AbzOKXcmnpEL7BBAR+tlEdcMSYa+RcwN8zB968IfkRSjWv0
hDZbDjYCMy1TNOoat4T2plg/LEQJ3XeTYaUn5mh2X5J7+xwW9Ou9LwoGyn4AhM5D
t/VVObUqLzVzwb+xw7iVacMLWrohh1XZOsMiALGVoiBn+SycXsx/JSPNCjsIJXzj
BTNTvaNXpWjSNuiuTsdL9QMBkCMKnHnGMaOvrbAdfI01I+LAPijOUZUPNx9SyipF
bl8r5J7S/PlLFuVdrUVvH3rvPmBSv2Z7uOyBjtH25l1WA00svPJFOhqVKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEh9L2QiXyVNrbTP0lxoigwG+KKMB8GA1UdIwQY
MBaAFN9RIBBhH5GxYpZyipTRpmW0q3VwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWIt
YjA2MmU5NzI1YjFkLzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWItYjA2MmU5NzI1YjFk
LzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFAwGHpB
ZR9awQ+Y/lTnAOhtUoWMchr7Et7KV7siOX2ZCg38yDyGh0EWok8l2LwaQ6ZfsZhF
hAnwHdDVHnDcVmeS3GpdzCys2OpirTIYR5L7FMsBUu4Ycb25mxeoqtPCl2EFZiZK
rwbECUAZMNjM1UBIYMOKFM9/wO4hulW3sHWnnmEe/dMRigx7kyy8ebzgVg6YdFE9
u7z1j+RF2zRCuORKLmS2Hs6Hc9K+rf7psZxu536+ln0B+Y0dWu/uVObqr7vxMO4q
DkhpjegT7tNePQb/hFo8EO4eNnhTYXihot3YoVgwflzJAqPaj0XpH5mM2f1qpIt2
vzF1ecQLDTeKuw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:00:54 2026 by rpki-client