Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
File: 31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json)
Hash identifier: SR2lig4ks/myorazKXQg0m+TqH/fnnPn0tW12le3mFY=
Subject key identifier: 5D:F8:5D:FB:BA:7A:20:BE:72:00:46:E2:E4:DD:B1:1D:6E:EC:5A:4B
Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
Certificate issuer: /CN=df512010611f91b16296728a94d1a665b4ab7570
Certificate serial: 019EBEECB666CC5B77C2BFF2CD0C71089C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 03:00:44 +0000
Manifest this update: Sat 13 Jun 2026 03:00:44 +0000
Manifest next update: Sun 14 Jun 2026 03:00:44 +0000
Files and hashes: 1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: cHmhh1CPXxSz14c5zdEbApiFFIYDQipX5yKusOYj4ME=)
2: KwvgmxkuN2Vb_g5rfP-r60wn56s.roa (hash: pRgKb7xCV6ebEVi6C792sZZDSzLwlu0u5goqcmXhzF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:b6:66:cc:5b:77:c2:bf:f2:cd:0c:71:08:9c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570
Validity
Not Before: Jun 13 03:00:44 2026 GMT
Not After : Jun 14 03:00:44 2026 GMT
Subject: CN=5df85dfbba7a20be720046e2e4ddb11d6eec5a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:c6:48:bf:59:f8:bd:37:4e:ed:b4:5a:17:
2c:0f:49:de:a5:b3:d3:d7:50:fb:f0:71:2f:58:e3:
9d:e2:b3:e0:a3:b2:49:31:6b:18:73:6f:9d:c9:e1:
8d:88:11:f9:3e:ff:42:70:77:e3:eb:7a:4c:33:35:
d1:2a:5c:7c:bf:e4:fe:db:f0:33:f2:9f:6e:3b:4d:
33:93:46:b0:75:56:35:98:57:04:d5:02:87:a8:88:
34:9f:df:84:1a:c1:c0:37:e6:62:d6:e1:2b:9f:db:
99:41:6c:75:c6:2b:70:f2:b1:87:df:23:3c:4c:1f:
d1:17:31:5c:9f:2d:82:05:cd:bf:4a:6a:d8:43:3c:
a8:9c:8b:4c:7f:22:8a:c5:1f:00:3d:ef:c6:16:28:
1f:9a:75:e7:bb:a6:63:28:c4:65:dd:e7:1d:0a:02:
1e:ca:75:14:c9:c0:63:f4:15:b2:f8:81:2c:c7:0a:
c3:68:f7:4f:99:57:d6:b2:27:ca:67:dc:a5:96:ca:
b5:5e:20:1b:5e:97:0a:a2:1f:2c:08:e0:3b:e2:76:
7b:98:80:7c:f5:16:5c:6a:87:12:e0:b4:56:ff:9b:
cb:fb:7c:b0:09:1b:37:43:79:22:77:3c:39:9d:d0:
e4:f1:05:ed:8d:4d:01:b4:94:dd:6d:bd:e6:27:bb:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F8:5D:FB:BA:7A:20:BE:72:00:46:E2:E4:DD:B1:1D:6E:EC:5A:4B
X509v3 Authority Key Identifier:
keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:42:9d:ef:bd:14:13:f0:f0:fe:81:ce:06:2f:32:83:7f:ba:
02:fa:d9:59:3e:c1:70:c9:ad:5a:49:a4:de:cd:c8:c3:f8:a5:
2b:1f:90:3c:d6:83:a6:39:98:6a:48:fa:a7:03:34:1a:63:c4:
0e:02:be:80:2e:97:b1:5a:6d:b7:77:db:d9:56:c1:51:80:4c:
25:8e:07:d9:c7:a6:fd:c4:d4:9b:7c:db:77:2d:17:30:25:fc:
ef:75:eb:99:1d:c8:83:c4:2d:13:d1:7c:3a:2f:3c:61:16:42:
ae:59:7b:41:23:fc:60:1a:ef:a4:06:83:df:a8:76:f2:e3:57:
ca:1a:71:4b:83:85:b3:79:8a:81:48:40:04:c8:05:7c:3b:3a:
75:8a:86:5e:24:3c:fe:9f:90:65:51:90:7c:fe:19:7d:11:c3:
2e:24:fc:58:99:6a:f5:25:a9:3c:92:73:bc:f5:d1:21:d3:35:
92:3f:08:ce:18:39:2e:8f:c8:66:fa:f2:cb:a1:d9:4b:ad:d3:
ec:64:45:41:b7:77:e3:d3:f8:ad:8a:78:43:1e:37:13:5a:15:
61:18:e1:69:71:b5:f1:67:bd:b1:8d:ec:89:26:29:23:ff:14:
e8:e6:a2:a7:92:b9:a6:d8:75:df:c1:eb:ac:41:e5:d0:60:98:
5f:9d:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:40 2026 by rpki-client