Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier: NXdgrzs6JW+oCM0CbA14mBcqEqid2WO1giAxxSUmeEE=
Subject key identifier: AA:49:B6:99:17:4E:78:75:0A:C4:BB:49:D9:5A:DC:27:B9:46:7F:CB
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial: 019DA378F6E34D4B404EF745CC3AC9372403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number: 1158
Signing time: Sun 19 Apr 2026 02:01:46 +0000
Manifest this update: Sun 19 Apr 2026 02:01:46 +0000
Manifest next update: Mon 20 Apr 2026 02:01:46 +0000
Files and hashes: 1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: vKHZa6QsGTBt8nunX/loVCFmf2AsHCvckWdLz41D00s=)
2: SKcH6GqAnwSkb7fUKCyzsH2pE4c.roa (hash: FlzY0BJvsluyy6RMybQuGpqHaLrEW1okMJt3+ASEjLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:f6:e3:4d:4b:40:4e:f7:45:cc:3a:c9:37:24:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Validity
Not Before: Apr 19 02:01:46 2026 GMT
Not After : Apr 20 02:01:46 2026 GMT
Subject: CN=aa49b699174e78750ac4bb49d95adc27b9467fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:24:48:db:c8:eb:1b:44:51:2c:93:b3:63:
72:5d:9c:e3:b5:2f:59:4e:00:fb:11:89:d8:c4:84:
d9:4f:3d:3c:b2:86:d4:18:fe:d1:a5:ae:a3:91:a5:
ae:41:d4:a2:20:13:eb:0f:6a:da:57:7b:d1:a5:14:
8d:fc:f3:35:04:b7:65:6f:01:90:6b:8c:4a:c9:ac:
3b:17:9d:00:b8:3d:77:1d:c4:33:a8:4b:f8:85:c1:
f5:da:5b:9a:d0:2a:fc:ed:0a:2d:5e:45:16:b4:6f:
bc:9d:0e:52:e4:a4:17:9d:ca:23:52:03:c3:75:d1:
ea:37:76:66:25:1e:e2:ad:5e:e9:61:05:f9:93:84:
ad:41:38:87:82:30:e5:6f:88:3c:26:60:64:b6:2c:
68:a8:3e:28:23:37:78:35:0f:9c:e3:81:e8:63:b4:
8d:ab:dc:fe:da:e0:ab:2b:82:96:db:d1:77:e5:f1:
bc:26:f1:8b:62:f2:c7:0d:55:63:dc:4a:f7:f5:68:
f7:b4:32:92:a6:cf:b2:6d:1d:a5:86:c6:e1:01:18:
58:b4:93:ff:de:f8:c7:46:5e:c6:63:5e:fa:1a:05:
31:0b:f4:d6:81:67:0e:f9:da:51:39:a3:33:79:11:
5c:1f:7a:98:ce:c2:ef:fa:16:ee:64:6a:c5:5a:8c:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:49:B6:99:17:4E:78:75:0A:C4:BB:49:D9:5A:DC:27:B9:46:7F:CB
X509v3 Authority Key Identifier:
keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7a:09:ef:19:40:7b:36:c7:f1:06:67:17:ab:2c:57:85:0a:
29:14:5d:40:7a:c1:00:0a:55:c6:34:83:82:2a:2a:f4:dc:46:
39:8e:24:00:44:a7:ee:85:7a:57:96:c2:80:dc:73:e2:b1:42:
0a:0b:75:90:4d:cb:23:c4:bb:99:ae:e7:b7:dd:eb:f7:b0:85:
fe:b5:43:ab:f6:5f:10:54:06:93:40:27:25:92:2d:6d:e0:3b:
58:3a:13:e8:95:5d:6e:78:c1:6d:71:48:de:4d:45:25:fe:1d:
9c:76:1b:b9:90:70:58:dc:7a:3d:a0:7d:9d:0b:97:b8:31:32:
51:79:7e:eb:32:d7:4d:dd:87:2a:e8:2d:e3:27:6a:4c:a5:c1:
a5:ec:8b:5d:6d:cc:bd:4d:d4:ef:3e:40:5d:5c:5c:99:fe:8e:
e2:00:ac:b8:18:86:63:2c:5a:56:2d:51:20:dc:68:bd:f2:3f:
a0:aa:8f:2a:f5:e3:15:8b:63:f0:f9:f6:f7:02:40:9c:5e:d4:
3c:47:25:ac:04:b8:5b:85:8c:0d:f5:80:87:51:2d:4b:e3:bd:
64:ab:83:ab:08:86:b3:ab:e3:ab:cc:8f:cf:07:be:f2:76:f4:
f2:c9:5c:97:9a:1c:38:5c:5a:af:7d:9e:fd:a5:00:3e:cd:65:
3f:ff:1e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:58:56 2026 by rpki-client