
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File: a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier: KiALSnF1t2++sGe5dkLFIF0+0ZMptQe+Rh7eThG79B8=
Subject key identifier: 95:FE:2A:D6:68:DC:39:CF:F1:60:E8:63:96:3D:2C:12:CE:90:92:BD
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial: 019E1DFE7A344F31C335BFDAF5324E8C0D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number: 1395
Signing time: Tue 12 May 2026 21:01:17 +0000
Manifest this update: Tue 12 May 2026 21:01:17 +0000
Manifest next update: Wed 13 May 2026 21:01:17 +0000
Files and hashes: 1: T66u3sAZ1h5lcd7CohPfojjoGXM.roa (hash: b1dlk+UCa27l6BBCa3opEOMqOQC7JiJWknd1DaHG0Vo=)
2: Ud3In0OaskIaLWIkC7KZsdF241I.roa (hash: AB7KnYKNBO0Ndoa3Ocgqa4UpFDUV3mhvx0miDDfBz5E=)
3: WBUV1KvDkb2jOcRdkjFWIVt7ErY.roa (hash: ajrXPdqhe0OAtEgCrpBNnNMpZPGjD6DwlNl7HI0x0zY=)
4: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: lv6NoewE7E/ooGEkCZQHqAKfpR51Tm5uTkfmshxXLTI=)
5: kJEyi9t8ewQAOML32QKelXRnNQw.roa (hash: qisABknNXytALeoXTgeNFHWe1rQRJTNgqfs59Mw/Lek=)
6: n_fghfm4yvkyJN0aLgQKMYifpk8.roa (hash: s8M9V6kInMrZ8SN7cdYOAnlXWHjxa+Mtfe0ezUCITCc=)
7: zHv_4yLb29OZEPsryzQwrsubCmY.roa (hash: bf6GHsA4iW8nNCo3qaxOx39ntbWsQ60VlVEmI5fRZwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:7a:34:4f:31:c3:35:bf:da:f5:32:4e:8c:0d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
Validity
Not Before: May 12 21:01:17 2026 GMT
Not After : May 13 21:01:17 2026 GMT
Subject: CN=95fe2ad668dc39cff160e863963d2c12ce9092bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1c:68:78:16:41:70:fd:bd:9e:57:22:de:f0:
fd:70:d5:b6:15:a5:93:7c:dd:72:ae:32:62:0d:55:
9e:be:5e:88:d3:52:3b:73:57:a7:eb:cc:b8:63:d3:
7d:89:10:15:ac:a1:17:6f:6a:97:7c:77:64:fc:54:
60:d4:9b:e3:1e:5d:4e:bf:8f:32:31:63:5b:4f:99:
a7:69:4a:13:19:65:a8:77:54:00:d3:3a:23:33:b1:
74:d4:0c:7f:bd:4b:e9:af:a7:c3:3c:f5:6d:ab:63:
a0:1e:88:03:83:85:01:75:28:b7:29:b1:b1:28:9a:
5a:7c:70:8d:68:2d:01:71:10:69:74:47:e4:ba:8c:
ac:f8:ba:2b:fc:09:91:f6:70:33:f7:5e:19:75:17:
ed:a0:2f:e6:ef:a0:f3:fe:b7:83:f6:24:9b:6d:07:
59:d6:f6:1d:65:2f:dc:3a:3c:84:fa:64:79:7a:91:
f7:ab:fe:3b:0c:95:81:72:7c:b6:7f:24:56:a8:f5:
2a:90:a5:04:40:fe:5a:f9:0d:6f:32:89:8d:a2:cf:
22:96:a7:5e:76:fa:b8:5f:73:3f:78:04:51:64:16:
88:59:4a:5a:ab:b0:e0:42:fa:fc:95:d2:6c:d2:48:
72:28:dc:2c:78:5b:99:b4:f7:4d:ad:2c:93:6a:a1:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FE:2A:D6:68:DC:39:CF:F1:60:E8:63:96:3D:2C:12:CE:90:92:BD
X509v3 Authority Key Identifier:
keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:51:89:59:1f:91:70:c3:1b:9d:2a:b2:ac:22:77:d8:4d:e5:
3b:7f:31:4f:24:5b:b5:32:26:19:f3:8c:69:91:71:6d:05:d2:
1b:15:df:d8:79:4a:b3:ed:81:1b:f7:6c:b3:f4:29:96:9e:32:
b8:7b:d1:bf:6b:78:a4:43:37:38:3c:db:13:90:0d:3a:7f:75:
a4:7b:3f:29:07:f0:96:ba:00:1d:1d:83:dc:9a:be:dc:41:db:
1e:4b:e2:5c:f9:ef:6b:33:97:ab:87:6c:d5:05:d7:9d:d9:2f:
c4:d0:30:b9:cf:c9:0f:5e:27:82:f1:7b:9a:95:73:8d:26:17:
f9:16:70:d9:a7:9c:13:ec:e4:e1:92:92:df:82:69:9d:85:f8:
76:6f:ba:1e:1e:75:fa:06:65:32:b0:64:00:85:b2:32:b5:75:
0f:e4:3e:99:6a:5d:fb:14:87:30:ae:5f:25:cf:2f:0e:1d:89:
a5:d5:38:74:e4:c0:df:75:f5:b8:59:f3:26:d7:74:a4:cd:11:
77:6c:4f:0f:41:dd:97:dc:f9:4a:f5:6e:65:34:e1:cb:ad:28:
96:e6:0a:ff:89:0a:18:ad:1b:fa:66:de:75:a7:fe:9e:ea:a9:
87:88:8a:45:97:53:ba:1e:b8:31:3a:81:08:f6:94:7e:9f:05:
1c:09:fb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:22:50 2026 by rpki-client