Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
File: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft (raw, json)
Hash identifier: 1asyejYPIbsX0LS05XOkJtsxuzqTu+gRAX2JGDaVVVY=
Subject key identifier: E1:02:F7:BD:E0:9D:A6:A5:9A:1F:6B:25:79:E9:C4:15:5B:1B:05:1E
Authority key identifier: DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
Certificate issuer: /CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Certificate serial: 01A0C0D5EFE8765DF860997B5A7E6DAD1017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
Manifest number: 11CB
Signing time: Sun 20 Sep 2026 22:00:40 +0000
Manifest this update: Sun 20 Sep 2026 22:00:40 +0000
Manifest next update: Mon 21 Sep 2026 22:00:40 +0000
Files and hashes: 1: 31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl (hash: uNDwJ5P2EyaRR8/EUfCUcAf7n+OJOw2cSk/6h0K5dww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:ef:e8:76:5d:f8:60:99:7b:5a:7e:6d:ad:10:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df52526f3d282765325c15a6e5765d7cd7f1f89e
Validity
Not Before: Sep 20 22:00:40 2026 GMT
Not After : Sep 21 22:00:40 2026 GMT
Subject: CN=e102f7bde09da6a59a1f6b2579e9c4155b1b051e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:82:52:2d:28:57:d1:9e:78:67:44:a3:2e:
51:29:04:bc:3d:f5:23:09:55:d2:1f:0d:02:c3:f9:
fa:26:78:94:37:18:99:b7:f4:5e:93:0b:dd:04:7d:
2e:02:fd:f6:a5:2e:ac:f6:2e:f5:f1:2e:dd:c1:2f:
f3:17:b7:b2:59:37:5d:46:40:ea:80:71:14:09:30:
40:46:37:3c:1c:6c:c8:08:ef:f1:98:8a:bd:91:4b:
e3:cd:fd:de:37:2f:80:53:1b:91:fe:67:1b:98:2a:
f8:09:2c:5a:bb:6b:4f:e4:c8:fa:ea:2b:15:46:90:
47:15:5b:21:e6:22:de:9b:e4:e5:d4:ac:77:d9:9d:
b4:26:30:a8:95:3f:e1:5f:31:67:00:49:ac:78:0a:
b2:3c:75:ec:e8:63:2a:fb:a8:19:3b:86:32:a2:f4:
b5:14:2f:83:6e:ca:60:f0:ab:9b:96:28:01:f4:69:
fe:dc:78:ce:f8:1d:7e:a1:e5:f1:fb:c2:14:5d:58:
dd:ea:4e:2a:33:40:72:c2:4c:7b:f2:e2:3a:07:85:
d1:12:8b:8b:10:82:2a:3a:9b:e2:bd:9f:69:54:5e:
bb:77:d5:48:2d:22:fe:66:96:42:81:ea:c7:35:15:
5f:28:05:80:df:f1:52:c2:ce:1b:e1:4f:61:88:cd:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:02:F7:BD:E0:9D:A6:A5:9A:1F:6B:25:79:E9:C4:15:5B:1B:05:1E
X509v3 Authority Key Identifier:
keyid:DF:52:52:6F:3D:28:27:65:32:5C:15:A6:E5:76:5D:7C:D7:F1:F8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31JSbz0oJ2UyXBWm5XZdfNfx-J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0bf6db-cc7d-4697-9aec-623e6c9c4464/1/31JSbz0oJ2UyXBWm5XZdfNfx-J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bd:6d:fa:c8:b0:57:28:61:95:35:d8:3c:24:95:e1:63:3a:
50:89:0d:9b:fb:78:68:9b:82:cc:07:f4:15:d0:95:80:ee:06:
2d:c5:88:48:a9:f8:8d:e7:89:ee:6a:5d:d8:97:e2:70:bb:aa:
29:97:4b:87:4f:18:87:89:94:61:0d:07:7a:cf:bd:04:96:86:
79:a9:8c:5b:66:69:6d:bb:f3:da:c2:df:40:51:49:e7:67:b8:
b6:a8:89:e8:53:c6:33:60:ac:9f:69:cb:ec:b6:a3:02:6c:33:
df:d8:9b:83:61:e9:81:c5:45:da:fa:07:05:5d:97:56:5c:50:
4e:27:de:2f:fb:6a:ff:62:cf:4a:59:02:2b:85:a7:47:b3:7b:
40:c1:d0:70:0d:ee:b0:8b:ea:63:ff:29:4f:8e:aa:87:c5:53:
fd:da:b2:3d:cf:ce:2c:d5:f8:5c:23:67:67:00:8e:6e:74:4e:
8c:c5:77:49:71:93:45:f6:ab:3a:0a:b2:0c:68:11:22:ad:5a:
7f:59:3a:08:f1:65:cc:9d:10:6f:06:61:3f:4b:3c:b7:76:18:
db:04:dd:b6:43:53:51:25:d6:5a:1b:00:a9:21:51:75:f4:72:
b8:66:2a:0b:53:0e:f8:75:dc:30:69:bd:4a:8d:58:08:be:fc:
f5:b8:86:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDA1e/odl34YJl7Wn5trRAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTI1MjZmM2QyODI3NjUzMjVjMTVhNmU1NzY1ZDdjZDdm
MWY4OWUwHhcNMjYwOTIwMjIwMDQwWhcNMjYwOTIxMjIwMDQwWjAzMTEwLwYDVQQD
EyhlMTAyZjdiZGUwOWRhNmE1OWExZjZiMjU3OWU5YzQxNTViMWIwNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9eCUi0oV9GeeGdEoy5RKQS8PfUj
CVXSHw0Cw/n6JniUNxiZt/RekwvdBH0uAv32pS6s9i718S7dwS/zF7eyWTddRkDq
gHEUCTBARjc8HGzICO/xmIq9kUvjzf3eNy+AUxuR/mcbmCr4CSxau2tP5Mj66isV
RpBHFVsh5iLem+Tl1Kx32Z20JjColT/hXzFnAEmseAqyPHXs6GMq+6gZO4YyovS1
FC+Dbspg8KubligB9Gn+3HjO+B1+oeXx+8IUXVjd6k4qM0Bywkx78uI6B4XREouL
EIIqOpvivZ9pVF67d9VILSL+ZpZCgerHNRVfKAWA3/FSws4b4U9hiM02+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEC973gnaalmh9rJXnpxBVbGwUeMB8GA1UdIwQY
MBaAFN9SUm89KCdlMlwVpuV2XXzX8fieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFKU2J6MG9KMlV5WEJXbTVYWmRmTmZ4LUo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wYmY2ZGItY2M3ZC00Njk3LTlhZWMt
NjIzZTZjOWM0NDY0LzEvMzFKU2J6MG9KMlV5WEJXbTVYWmRmTmZ4LUo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wYmY2ZGItY2M3ZC00Njk3LTlhZWMtNjIzZTZjOWM0NDY0
LzEvMzFKU2J6MG9KMlV5WEJXbTVYWmRmTmZ4LUo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARb1t+siw
VyhhlTXYPCSV4WM6UIkNm/t4aJuCzAf0FdCVgO4GLcWISKn4jeeJ7mpd2JficLuq
KZdLh08Yh4mUYQ0Hes+9BJaGeamMW2Zpbbvz2sLfQFFJ52e4tqiJ6FPGM2Csn2nL
7LajAmwz39ibg2HpgcVF2voHBV2XVlxQTifeL/tq/2LPSlkCK4WnR7N7QMHQcA3u
sIvqY/8pT46qh8VT/dqyPc/OLNX4XCNnZwCObnROjMV3SXGTRfarOgqyDGgRIq1a
f1k6CPFlzJ0QbwZhP0s8t3YY2wTdtkNTUSXWWhsAqSFRdfRyuGYqC1MO+HXcMGm9
So1YCL789biGzQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:05:02 2026 by rpki-client