Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier: FAxI3WLYpzcGHrfynS8vm7fv/4gqi31+NfFH01X7LrU=
Subject key identifier: D1:03:C8:CF:9C:FA:13:5B:F9:E0:64:01:C5:94:23:A9:99:E9:98:D9
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial: 019D2772A778E708C2FE3CEEA77C5ABB9AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number: 1500
Signing time: Thu 26 Mar 2026 00:01:58 +0000
Manifest this update: Thu 26 Mar 2026 00:01:58 +0000
Manifest next update: Fri 27 Mar 2026 00:01:58 +0000
Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: 7p2opF85otrlAGK0WsO/tot1JUfznTQsaMtWfXd9hnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a7:78:e7:08:c2:fe:3c:ee:a7:7c:5a:bb:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
Validity
Not Before: Mar 26 00:01:58 2026 GMT
Not After : Mar 27 00:01:58 2026 GMT
Subject: CN=d103c8cf9cfa135bf9e06401c59423a999e998d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a6:04:73:a7:35:85:a1:1f:1b:01:c5:07:00:
5c:c5:53:fb:f8:f5:7c:8f:9c:dd:b8:2e:af:62:ca:
c8:b3:60:7b:fa:bb:7d:58:85:c1:c1:1d:d3:73:e4:
09:a1:33:c6:a3:2a:2b:3a:24:7a:5d:b3:e6:a1:04:
c0:ef:d3:1f:e7:f4:f5:be:fc:74:2a:1c:42:45:21:
c9:98:a6:d7:9a:03:b3:e9:02:c3:43:64:1a:af:31:
0f:b7:8f:2b:c3:d3:61:86:1b:66:0e:6e:c5:f5:41:
43:a2:07:e5:59:d9:b2:fe:aa:35:3b:93:db:61:11:
7f:22:1e:3c:03:df:8d:14:5f:c8:33:20:df:18:ea:
b8:35:c0:c4:4f:63:36:ad:84:5b:40:f8:d0:85:b8:
20:1c:ad:9a:b0:48:bb:98:7b:39:2a:68:b6:c6:57:
14:76:e5:de:89:b8:b2:8b:c7:92:70:00:13:05:62:
2c:fb:56:a5:dc:50:9d:d5:87:0f:a3:83:dd:64:1a:
7d:ce:5d:4e:40:59:13:db:a3:88:f3:01:b3:d2:f3:
43:ee:61:e6:ae:5e:28:77:e5:5d:24:f4:f7:b4:06:
45:b8:5e:b6:a1:3b:ae:1e:1f:13:18:16:23:6e:05:
56:e5:87:d2:98:47:0d:29:c6:ef:a7:86:b2:f9:2a:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:C8:CF:9C:FA:13:5B:F9:E0:64:01:C5:94:23:A9:99:E9:98:D9
X509v3 Authority Key Identifier:
keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1a:d7:a6:9a:cd:7a:fb:61:da:cd:53:62:3d:6f:7e:62:20:
2c:d7:8a:22:c2:fd:d0:ba:9c:d8:4e:6b:bf:c4:6f:b0:0d:89:
ef:02:02:13:30:f9:49:5f:7c:ee:f9:10:bb:89:2b:ab:0b:58:
bd:bf:f9:57:cb:10:80:6d:ed:e9:5f:9a:cd:53:f1:a4:f7:8f:
52:33:05:02:f8:e1:e5:37:ee:5d:63:78:57:01:0e:f3:93:44:
2e:49:5d:07:7a:32:df:66:44:33:b9:b8:24:d9:c0:89:34:ad:
54:68:69:5f:9a:93:f1:53:45:05:b6:7b:f5:7f:6e:a9:36:03:
f9:4f:02:24:0f:38:44:42:63:93:5c:71:b4:a7:a6:91:e0:dc:
03:58:cd:44:8b:a4:13:b2:f6:e1:e2:92:f7:b9:65:81:10:ee:
36:95:6d:60:21:42:12:85:7f:1b:dd:cc:db:19:2c:dc:92:09:
a1:b4:87:3c:49:2a:d0:d2:39:15:5a:8d:e0:92:0c:f1:de:56:
69:ea:f8:87:1e:4f:f7:a7:34:05:67:52:a2:b2:64:55:fc:a9:
72:d2:52:29:35:6a:58:88:1f:5d:22:5f:f0:a9:6d:78:c4:a9:
d2:d4:71:93:b6:b5:30:ab:24:38:4a:0e:1e:9a:da:93:2a:09:
02:56:13:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:54 2026 by rpki-client