Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
File: 30bUnMNHZ_jQJK_yla1qky55FeA.mft (raw, json)
Hash identifier: D07dlIzNqZweZ8MQRm92fh/6ULsT/fF6LRuEkwbOgw8=
Subject key identifier: FF:AE:0E:84:28:74:9B:CA:EE:C6:EE:64:66:27:F5:47:39:C5:5F:1A
Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Certificate serial: 019D265ED6551C1C45CDFCFF3B1F8DBF9EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
Manifest number: 0B64
Signing time: Wed 25 Mar 2026 19:00:42 +0000
Manifest this update: Wed 25 Mar 2026 19:00:42 +0000
Manifest next update: Thu 26 Mar 2026 19:00:42 +0000
Files and hashes: 1: 30bUnMNHZ_jQJK_yla1qky55FeA.crl (hash: zkItCJkMr5ANLR/OSiTDNnEYMQkiM+SfGTP7rZhFHto=)
2: rE_1H-00uBo7a6gc1UV-KaxbXpk.roa (hash: Nok0K6EfIgHcNFE45GfXNSKdGaLmBIALv0MixqWr//8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d6:55:1c:1c:45:cd:fc:ff:3b:1f:8d:bf:9e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Validity
Not Before: Mar 25 19:00:42 2026 GMT
Not After : Mar 26 19:00:42 2026 GMT
Subject: CN=ffae0e8428749bcaeec6ee646627f54739c55f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:77:e9:41:ad:6a:cc:78:e8:56:e8:e0:1f:
0b:95:2f:1d:b1:42:46:89:f2:7e:4d:bb:12:14:82:
11:9c:31:56:6b:71:fe:6f:f1:f8:ec:9c:21:f6:a3:
f7:4a:10:5f:46:ea:47:2e:8a:02:5c:8d:a3:9b:f6:
11:e6:0d:d9:fc:b0:15:fb:57:89:f1:41:16:fc:8f:
b4:6d:db:9c:82:5a:c1:b2:46:df:55:76:b9:8e:ac:
ed:a3:2a:c5:cc:cf:33:f0:c0:d8:b3:49:a0:da:7d:
98:d9:94:20:0d:3e:01:07:15:e9:cd:d2:9e:d4:b4:
e7:52:e4:56:2b:e2:67:dc:20:77:74:b5:f2:8c:2a:
78:59:a8:78:a7:ea:ee:23:a4:c8:d8:55:ce:e6:07:
f0:69:2f:16:4b:c1:d4:e3:05:d4:56:63:24:0c:b6:
49:18:19:11:c6:cf:0c:63:1c:12:90:f3:f5:3c:f8:
87:4d:62:44:24:2c:28:f5:b8:0f:d1:0d:a8:ea:a9:
01:e2:c1:f6:e8:40:df:c6:2c:7c:2f:48:e7:aa:63:
14:d7:b8:7e:89:40:d2:9c:a4:e1:76:99:53:3c:44:
03:eb:78:b2:80:82:a9:f6:92:e9:b4:0f:2d:d5:57:
d5:8a:e6:38:b8:90:11:a0:9c:c7:ad:0c:69:fc:53:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AE:0E:84:28:74:9B:CA:EE:C6:EE:64:66:27:F5:47:39:C5:5F:1A
X509v3 Authority Key Identifier:
keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a1:19:78:ca:f7:f8:ca:ac:b0:dd:30:e5:f3:75:f4:92:fd:
db:2d:7f:70:19:d9:85:13:e1:ff:6c:56:a4:30:c5:97:2b:d3:
72:bf:e3:11:00:a2:ae:97:fc:9b:a7:d6:09:a1:b1:4f:fc:1c:
5b:ff:29:49:70:00:c7:be:4c:5f:8d:3c:a2:92:5f:79:90:f3:
2e:fc:35:60:77:ed:3f:4c:4a:6e:72:ea:1a:99:dd:68:90:40:
a5:0d:b3:c0:e9:a3:6e:c5:50:78:1f:8d:88:ac:35:80:bf:db:
1b:7c:40:87:55:4f:b6:2e:e9:68:2e:e5:0a:66:bf:b4:e8:dd:
a7:ca:17:63:d8:35:a5:98:0c:e2:51:6d:35:11:fb:68:d1:80:
b7:a3:dc:d6:2b:0f:a4:b4:7b:cb:2a:cf:8f:35:24:81:6c:5a:
0a:3c:74:b2:c4:2a:05:13:53:9b:10:48:87:4a:b8:b3:aa:92:
1e:3b:c2:5f:6b:b6:24:34:fb:48:0b:a7:fc:4e:ba:1a:0c:57:
0b:0e:dd:b1:79:34:45:a1:a4:2a:e2:41:e1:85:d8:24:90:bc:
0c:70:d9:9f:27:b2:47:ac:ff:f6:64:9a:37:55:94:11:62:0d:
d7:11:a7:af:c4:f9:a8:67:65:d1:c9:90:44:ff:d8:e5:56:de:
de:b0:f0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:47 2026 by rpki-client