Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
File: 30bUnMNHZ_jQJK_yla1qky55FeA.mft (raw, json)
Hash identifier: PzZzXZZIoeQ6a+Gtw2L9HP+fVG//tj3idxxbHM0BrT8=
Subject key identifier: DD:81:EA:0F:F8:70:C8:D6:73:FA:1E:A8:19:DE:11:DE:A3:40:57:DA
Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Certificate serial: 019F8EA2B5E55E4B2C049C31D63F6C756C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
Manifest number: 0CA4
Signing time: Thu 23 Jul 2026 11:00:55 +0000
Manifest this update: Thu 23 Jul 2026 11:00:55 +0000
Manifest next update: Fri 24 Jul 2026 11:00:55 +0000
Files and hashes: 1: 30bUnMNHZ_jQJK_yla1qky55FeA.crl (hash: DmhZVEXspZ6KVPqriFYpakKz6JJjYwFCX//7XtabeU4=)
2: UUUtC1whdRI5STIYvfXkmK_HTMo.asa (hash: jDtYB8uJSjGru6/3szQlk7np7+InlpiKhhz20cT/5xk=)
3: rE_1H-00uBo7a6gc1UV-KaxbXpk.roa (hash: Nok0K6EfIgHcNFE45GfXNSKdGaLmBIALv0MixqWr//8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:b5:e5:5e:4b:2c:04:9c:31:d6:3f:6c:75:6c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Validity
Not Before: Jul 23 11:00:55 2026 GMT
Not After : Jul 24 11:00:55 2026 GMT
Subject: CN=dd81ea0ff870c8d673fa1ea819de11dea34057da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:6d:95:81:49:b6:51:36:b7:73:61:22:9b:
de:d4:31:4f:72:c4:eb:ff:e8:3b:f6:62:1f:86:ee:
e6:bb:47:9b:b4:f5:08:93:cf:f8:7c:52:e4:5e:e7:
1f:f4:a4:01:11:86:c9:1b:48:a2:a9:68:ee:4e:97:
ba:5c:86:ca:64:06:5e:ca:68:5c:ba:b7:1c:36:18:
5e:96:53:a9:1d:5f:7a:2f:3d:2f:8f:94:ce:a9:d5:
e2:15:64:5f:50:36:f6:fb:cf:66:32:13:b5:bd:15:
62:5b:54:b0:0e:13:11:80:0c:a6:c2:07:cd:cd:77:
0b:4f:23:a3:38:26:3c:a6:bb:d8:ea:07:1f:5e:b5:
ba:8a:6c:5b:e5:25:47:32:1d:0d:ec:60:31:5c:d8:
91:f3:38:29:f4:41:dc:e8:fb:e3:8e:13:32:a3:f5:
71:7b:88:f2:7a:c4:2a:b4:99:47:13:d3:c9:8c:d8:
9c:fd:07:93:2b:52:97:f3:ce:78:97:fc:e1:07:b9:
3b:b5:39:f4:1a:e3:fb:d4:70:b3:ca:c4:47:77:f6:
f1:26:3a:54:51:6f:a1:2c:77:92:09:36:a3:f6:12:
ec:c3:57:7d:69:ae:a3:69:c5:10:da:e4:69:27:e0:
5c:aa:95:39:6d:8c:4d:85:4e:c0:14:c9:a2:43:41:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:81:EA:0F:F8:70:C8:D6:73:FA:1E:A8:19:DE:11:DE:A3:40:57:DA
X509v3 Authority Key Identifier:
keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:3a:95:a1:3a:44:9d:9a:6e:6b:7a:6c:ab:0f:54:35:02:6c:
b7:d6:2d:fb:79:83:c4:77:8a:03:3a:82:95:91:9c:88:60:9e:
3e:6a:b5:7b:9e:b6:97:c1:dc:34:d7:7b:e0:45:2b:39:f7:a2:
de:e7:53:01:6c:bb:01:9b:26:7c:ed:a7:9b:e8:20:f6:e0:8d:
c8:b3:72:f7:1c:9d:6f:d9:20:bd:bc:b6:db:12:a5:de:fe:f1:
38:2b:84:f2:ea:6a:19:e0:5e:2b:be:e1:53:2e:8b:af:97:91:
80:f8:c6:bd:d3:1b:09:a3:d6:47:a5:9a:11:45:f4:f5:e8:88:
08:ed:a9:51:5d:60:3f:67:3b:ea:fe:d1:ff:84:59:64:9a:21:
fd:fb:84:43:20:e8:de:3b:db:d4:73:ee:ae:e6:19:28:51:e4:
ce:e9:7c:4c:9d:89:6c:b3:e2:30:9a:24:3a:bb:7a:fa:92:6e:
9f:77:d9:6b:38:d3:bc:79:5a:80:18:56:fb:19:dc:8e:26:be:
e5:3e:c4:b5:09:16:0e:e7:70:09:4c:2c:e4:a6:54:9d:fe:06:
eb:94:5f:15:66:7a:70:2e:86:0d:97:21:ad:d0:cf:67:4b:73:
44:c3:9f:e1:e3:ca:de:b1:90:78:88:ec:d8:06:6a:92:24:92:
fc:90:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:02:56 2026 by rpki-client