Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
File: 30KDIArNwh2aNfWE8g_y4CboLI4.mft (raw, json)
Hash identifier: DVBDxMd8LqqJR27WfXBWzsSUkiNQmegiI3HI+tnAuTA=
Subject key identifier: E5:D4:7B:67:C6:9C:9C:E7:58:92:CA:40:DE:82:CE:E8:BE:69:34:9C
Authority key identifier: DF:42:83:20:0A:CD:C2:1D:9A:35:F5:84:F2:0F:F2:E0:26:E8:2C:8E
Certificate issuer: /CN=df4283200acdc21d9a35f584f20ff2e026e82c8e
Certificate serial: 019F90C7735BA97682E391473219F6EE7007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KDIArNwh2aNfWE8g_y4CboLI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
Manifest number: 010F
Signing time: Thu 23 Jul 2026 21:00:17 +0000
Manifest this update: Thu 23 Jul 2026 21:00:17 +0000
Manifest next update: Fri 24 Jul 2026 21:00:17 +0000
Files and hashes: 1: 30KDIArNwh2aNfWE8g_y4CboLI4.crl (hash: znRxFjxydv2tFXK3vZOr3vq27DZSJsFserfxANvITWk=)
2: nbH1TD42BLjdbeZiXuysrxr8qdk.roa (hash: 0KSmmCd2YiufgVfcWAQKmc1rBsWEg+kubWBnByHlzaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KDIArNwh2aNfWE8g_y4CboLI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:73:5b:a9:76:82:e3:91:47:32:19:f6:ee:70:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4283200acdc21d9a35f584f20ff2e026e82c8e
Validity
Not Before: Jul 23 21:00:17 2026 GMT
Not After : Jul 24 21:00:17 2026 GMT
Subject: CN=e5d47b67c69c9ce75892ca40de82cee8be69349c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:98:6d:3a:17:a7:f8:bd:02:02:11:30:28:
d0:7a:39:8f:90:ae:6b:5a:04:1d:60:10:7a:82:a7:
cf:41:0d:fc:5e:75:0a:5b:d5:27:9f:1f:7f:6b:c2:
9d:a5:f4:3f:cb:99:b0:50:6c:12:d3:b3:89:ed:d6:
84:a3:18:7e:66:c0:19:75:84:48:7a:43:27:21:67:
c4:03:48:5b:b5:d1:fc:77:61:fc:b3:a7:55:e9:80:
0b:66:c6:6f:f0:f1:0d:da:2d:dd:a5:3f:6e:62:6b:
7f:a3:08:6e:e2:87:b0:b4:c3:67:24:2f:8a:5e:bf:
fa:4b:44:c8:e0:1b:e3:15:21:0d:9c:34:cc:dc:fe:
c5:b6:36:73:15:72:2d:68:f4:bf:2e:6f:06:90:84:
82:5c:f2:1b:d0:6a:71:a6:88:a7:c4:dd:2b:2f:1a:
5e:0d:a0:ee:60:05:c1:42:d6:cc:2a:02:98:6b:0d:
cc:d9:80:58:9a:07:39:31:64:32:e1:ff:1b:6e:51:
0c:78:54:3d:fc:86:e6:40:ab:83:df:91:96:60:72:
8e:30:e5:77:b9:61:a9:3c:d9:b6:f5:75:e0:e0:dc:
a4:fb:87:01:8c:a6:7c:c6:7d:1b:d5:04:58:5e:14:
64:c9:b4:a9:ba:8b:e0:a7:1d:5c:91:55:ee:0c:1c:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D4:7B:67:C6:9C:9C:E7:58:92:CA:40:DE:82:CE:E8:BE:69:34:9C
X509v3 Authority Key Identifier:
keyid:DF:42:83:20:0A:CD:C2:1D:9A:35:F5:84:F2:0F:F2:E0:26:E8:2C:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KDIArNwh2aNfWE8g_y4CboLI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e0:6e:1e:b3:74:15:ee:dd:02:95:4d:0e:37:cc:a1:2b:61:
dd:c8:ca:20:25:0b:5b:cb:84:c2:c7:11:81:2a:4e:bd:f2:11:
6e:94:15:c6:bb:20:e6:b3:dd:b2:fb:b9:38:82:2e:5e:e7:35:
67:2d:3b:62:56:85:5d:14:53:fc:45:4a:58:40:f3:64:0a:a7:
33:e3:51:c7:ab:b7:b1:ad:e7:31:2b:df:33:e2:1b:12:67:a9:
ed:1d:a6:f0:3e:ef:53:14:fa:c6:57:f6:67:cf:99:44:6a:ab:
4b:be:98:0b:d3:18:a5:a6:82:ab:4d:e2:a2:10:00:dc:92:8d:
92:7b:f7:87:d9:18:b5:e2:73:a4:4a:4e:e2:ed:d5:7f:35:52:
44:59:a5:d5:62:78:86:29:0c:b5:d6:16:dd:c9:a3:13:46:e1:
c5:e3:1a:89:9a:02:fd:ce:e5:a4:ce:47:1e:4f:f0:ad:68:03:
77:84:fa:83:8b:e8:89:1f:62:bd:e1:1f:de:43:24:eb:58:9a:
51:54:db:93:51:33:f4:15:5a:4d:a1:85:86:45:9d:a4:20:f5:
c7:01:29:28:f9:47:ed:12:e7:e1:20:31:2b:fa:58:5f:79:75:
de:bc:1a:96:bf:91:57:ad:e8:5e:2a:e4:07:0d:17:a3:42:0e:
82:fe:74:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:26 2026 by rpki-client