Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
File: 30KDIArNwh2aNfWE8g_y4CboLI4.mft (raw, json)
Hash identifier: g3CFn264mXZD+0/9rSm+qTv7UjgfPyw70Tun4HHe/bQ=
Subject key identifier: 41:B8:7C:DD:0E:AE:85:8B:3E:D9:03:A0:21:BE:93:32:85:54:47:3E
Authority key identifier: DF:42:83:20:0A:CD:C2:1D:9A:35:F5:84:F2:0F:F2:E0:26:E8:2C:8E
Certificate issuer: /CN=df4283200acdc21d9a35f584f20ff2e026e82c8e
Certificate serial: 019E1C101D9E44C9608673CA1AB8EDC52692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KDIArNwh2aNfWE8g_y4CboLI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
Manifest number: 4E
Signing time: Tue 12 May 2026 12:01:18 +0000
Manifest this update: Tue 12 May 2026 12:01:18 +0000
Manifest next update: Wed 13 May 2026 12:01:18 +0000
Files and hashes: 1: 30KDIArNwh2aNfWE8g_y4CboLI4.crl (hash: QcyGIDzvQe7GFbf4FICkTeJCRUQSj8Ltd4SQJWQQ5qU=)
2: nbH1TD42BLjdbeZiXuysrxr8qdk.roa (hash: 0KSmmCd2YiufgVfcWAQKmc1rBsWEg+kubWBnByHlzaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KDIArNwh2aNfWE8g_y4CboLI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:1d:9e:44:c9:60:86:73:ca:1a:b8:ed:c5:26:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4283200acdc21d9a35f584f20ff2e026e82c8e
Validity
Not Before: May 12 12:01:18 2026 GMT
Not After : May 13 12:01:18 2026 GMT
Subject: CN=41b87cdd0eae858b3ed903a021be93328554473e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:1c:4c:06:6c:91:e9:65:4a:8b:c4:26:89:
c3:01:83:ea:0c:68:f0:51:b3:00:bc:84:0e:47:b9:
8a:57:e8:4b:c4:2a:48:cd:9c:8b:c3:39:ac:e6:49:
ec:11:a0:b2:e8:e2:a6:70:aa:24:74:77:fd:1e:c8:
f2:87:93:68:44:73:d4:73:30:4c:e9:40:6f:ab:f0:
a1:67:12:ac:55:d5:6a:64:42:69:7c:dc:54:c0:ab:
11:df:7b:a5:ab:de:2f:21:25:38:02:b8:53:7d:cf:
29:4e:6d:19:00:01:6a:94:f7:9a:e4:92:5b:0e:87:
e1:98:ca:df:a1:b8:ef:9b:8f:0f:51:f5:4b:17:d8:
48:c7:9f:40:e6:3b:03:4d:d4:51:a3:07:43:62:55:
33:d4:b6:45:6a:a9:bd:a8:97:ce:42:0a:b4:67:67:
1b:89:20:e7:ac:20:55:18:52:a5:9a:8d:39:4a:ef:
72:bc:48:72:2e:1a:22:85:f0:4a:0c:a1:3d:63:ff:
35:07:cf:3b:d8:43:61:fb:0f:b3:f1:32:2e:28:d5:
92:8f:b5:2d:ec:2b:4b:87:20:d7:0f:47:a9:05:ab:
f1:e0:97:5a:45:b9:95:fc:03:e4:63:a0:e4:37:8b:
2f:75:17:0e:1b:06:ca:9e:79:96:b8:ea:18:75:7d:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B8:7C:DD:0E:AE:85:8B:3E:D9:03:A0:21:BE:93:32:85:54:47:3E
X509v3 Authority Key Identifier:
keyid:DF:42:83:20:0A:CD:C2:1D:9A:35:F5:84:F2:0F:F2:E0:26:E8:2C:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KDIArNwh2aNfWE8g_y4CboLI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6a:f7:d9:61:0c:63:a1:99:4a:c9:24:ad:92:91:f3:6a:14:
f4:86:57:12:a5:d2:15:86:fa:23:65:b2:38:c2:6b:fb:a7:63:
02:b9:c2:c2:08:ab:5b:c0:13:fb:59:e9:da:4e:4e:9d:69:c1:
d0:c9:e0:21:b2:36:49:a5:56:38:06:5d:f4:f8:64:07:96:69:
69:df:cd:b8:26:43:4b:5e:d0:9c:67:67:3d:8f:05:ac:10:87:
cd:5c:70:bb:b4:74:dd:f6:c9:10:5c:07:18:88:94:a9:ae:9b:
37:3e:24:ef:11:eb:27:a5:cb:03:53:55:ea:14:0d:f3:72:4b:
a5:67:22:e0:dc:e4:6b:d1:62:8f:de:78:1c:de:bf:89:f7:0b:
d8:15:61:7d:f4:37:29:49:3e:ef:19:8c:1d:55:80:cc:93:09:
85:d8:27:96:2f:86:f1:64:39:a5:80:41:34:cc:9c:2c:e4:16:
5e:31:ec:a9:fb:27:00:1f:89:83:e1:3a:bc:2c:bd:27:8a:a9:
ce:b5:2c:a9:55:ac:f7:cb:f2:0d:f8:7f:65:ac:97:6f:ef:d8:
ea:d9:04:d1:55:93:f5:6b:10:ed:bd:7b:f5:1b:7f:83:52:54:
a4:72:21:cf:ba:c2:25:19:b8:23:4c:6f:b1:fa:f0:23:20:a8:
e6:6e:47:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:12 2026 by rpki-client