Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
File: 30KDIArNwh2aNfWE8g_y4CboLI4.mft (raw, json)
Hash identifier: 1CZ2Mjj/pvhZvNB2eW8Jb1NISYVNA5m7w7kXnbPv86M=
Subject key identifier: 93:4F:D9:B5:A9:67:89:A7:EC:EF:44:F5:F3:40:BD:74:C7:ED:F0:C9
Authority key identifier: DF:42:83:20:0A:CD:C2:1D:9A:35:F5:84:F2:0F:F2:E0:26:E8:2C:8E
Certificate issuer: /CN=df4283200acdc21d9a35f584f20ff2e026e82c8e
Certificate serial: 01A0CD7EE7793427916D964AAC78DF2C465D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KDIArNwh2aNfWE8g_y4CboLI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
Manifest number: 01B3
Signing time: Wed 23 Sep 2026 09:00:40 +0000
Manifest this update: Wed 23 Sep 2026 09:00:40 +0000
Manifest next update: Thu 24 Sep 2026 09:00:40 +0000
Files and hashes: 1: 30KDIArNwh2aNfWE8g_y4CboLI4.crl (hash: qLfr7KiQxkuIhzsBIjmKl3AwTE6SmiPKwoB0D1Itmzs=)
2: nbH1TD42BLjdbeZiXuysrxr8qdk.roa (hash: 0KSmmCd2YiufgVfcWAQKmc1rBsWEg+kubWBnByHlzaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KDIArNwh2aNfWE8g_y4CboLI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:e7:79:34:27:91:6d:96:4a:ac:78:df:2c:46:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4283200acdc21d9a35f584f20ff2e026e82c8e
Validity
Not Before: Sep 23 09:00:40 2026 GMT
Not After : Sep 24 09:00:40 2026 GMT
Subject: CN=934fd9b5a96789a7ecef44f5f340bd74c7edf0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:72:29:2d:9f:10:a4:e0:ca:59:48:7d:70:
72:07:3f:05:91:36:7b:49:d9:d1:8d:39:ae:50:56:
ad:83:bb:00:a1:34:bb:03:6d:94:0d:88:c5:2c:f2:
8f:35:9a:5f:f5:55:42:c0:f3:a5:be:ee:99:f5:3d:
4e:5d:67:39:85:4b:25:51:51:1d:80:db:ff:b6:de:
54:58:18:70:f0:a8:f0:a7:2f:2b:41:01:32:1f:cd:
03:3c:ab:3e:a9:64:32:c5:0d:42:02:94:3a:e5:a8:
c9:7c:14:82:69:93:21:3e:f5:0c:87:39:eb:31:bf:
d9:67:cb:ff:d5:d5:c0:f6:2c:0d:f7:78:c6:df:75:
c1:25:b3:b1:41:5a:57:49:2a:19:0c:bb:be:e5:0c:
80:07:36:ac:6c:6c:e1:4e:77:e8:a5:53:ad:8c:62:
60:42:0e:01:79:0f:eb:ad:1c:10:c7:d4:3d:53:57:
0d:2a:be:62:3c:d8:86:b4:da:33:b7:b4:04:06:69:
96:b3:9f:b1:5d:e9:cd:d0:64:ed:24:06:da:4f:bb:
b0:92:a5:45:fc:a9:96:fc:49:d3:9b:bb:95:19:ca:
de:cd:6e:15:dd:47:a1:58:3b:fd:b4:f9:9a:a7:27:
b9:4f:96:e4:6e:63:96:4c:f4:fb:35:4e:12:f8:7e:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4F:D9:B5:A9:67:89:A7:EC:EF:44:F5:F3:40:BD:74:C7:ED:F0:C9
X509v3 Authority Key Identifier:
keyid:DF:42:83:20:0A:CD:C2:1D:9A:35:F5:84:F2:0F:F2:E0:26:E8:2C:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KDIArNwh2aNfWE8g_y4CboLI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:17:9d:e0:ea:67:b9:30:60:9b:9f:7c:67:47:7e:a7:89:87:
ae:57:ea:fe:b9:06:7f:0e:24:63:39:84:b8:98:b6:1b:23:72:
5b:df:0c:e9:d4:da:a9:3f:b2:78:3e:8e:ad:20:01:47:b0:6c:
2f:a3:86:6e:1d:42:7f:f6:6f:99:e2:2d:34:e6:29:44:ca:a9:
8a:7a:9f:71:4a:6f:bb:6b:67:22:3a:95:dd:e3:40:60:98:2a:
55:ca:93:ab:da:39:76:b8:9e:c6:04:95:48:f0:98:c4:20:4f:
03:20:6c:bd:e6:2f:c3:01:03:e8:b9:8e:4f:aa:b6:44:20:8b:
96:86:f8:27:63:e4:f3:b3:9a:94:a0:98:60:7a:6d:ff:98:fe:
01:a4:72:c4:84:1d:a7:11:c7:9d:30:ae:9f:5d:7f:38:d7:ec:
c7:8e:bc:04:7a:23:ef:f3:24:c6:42:48:db:0a:41:63:c2:d5:
56:69:43:89:0c:0f:98:5b:e5:bc:2c:9a:6e:c1:c0:6b:75:6c:
8d:d2:a9:9e:cd:fd:92:4a:d1:d9:66:d3:1b:ff:aa:ea:f1:44:
6a:05:f3:c8:1d:d0:ba:01:e0:bd:75:7d:58:11:08:28:92:9a:
fc:08:19:1b:15:ec:5f:54:8f:7a:42:be:92:e6:89:ac:20:fb:
26:83:3e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:50:07 2026 by rpki-client