Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
File: 30bUnMNHZ_jQJK_yla1qky55FeA.mft (raw, json)
Hash identifier: U9QK1FRGs3YNcb5eewksaHjGyAc3PNTjJgv/LHi35Uo=
Subject key identifier: DA:D7:6A:0E:93:AE:D0:E9:69:FB:55:40:45:3B:05:30:C2:79:E5:6A
Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Certificate serial: 01A1D9B86F8A47B646D98B88A5D0C3544426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
Manifest number: 0DD4
Signing time: Sat 14 Nov 2026 11:01:45 +0000
Manifest this update: Sat 14 Nov 2026 11:01:45 +0000
Manifest next update: Sun 15 Nov 2026 11:01:45 +0000
Files and hashes: 1: 30bUnMNHZ_jQJK_yla1qky55FeA.crl (hash: ccNCK8EEwT/saeewhJ/XxD1bJH0SjJygszuCQCyJGVA=)
2: UUUtC1whdRI5STIYvfXkmK_HTMo.asa (hash: jDtYB8uJSjGru6/3szQlk7np7+InlpiKhhz20cT/5xk=)
3: rE_1H-00uBo7a6gc1UV-KaxbXpk.roa (hash: Nok0K6EfIgHcNFE45GfXNSKdGaLmBIALv0MixqWr//8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:b8:6f:8a:47:b6:46:d9:8b:88:a5:d0:c3:54:44:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Validity
Not Before: Nov 14 11:01:45 2026 GMT
Not After : Nov 15 11:01:45 2026 GMT
Subject: CN=dad76a0e93aed0e969fb5540453b0530c279e56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:ee:8b:22:6a:ae:50:dd:d1:9e:af:82:1a:
3f:a7:f8:45:d4:1b:db:5c:82:14:d9:cc:d0:49:bc:
52:29:17:96:51:d8:42:a6:cd:28:c9:f8:c0:8a:21:
52:5f:5b:bf:e2:1c:42:75:6b:43:a6:be:a1:f5:c5:
a6:23:bf:7a:16:fd:b1:92:3a:c1:a7:9d:c5:8f:2d:
f2:e4:4d:65:68:33:d3:1b:e9:de:58:cb:63:40:03:
fa:e3:c1:22:7e:55:18:f7:a8:76:3d:9a:11:21:1e:
19:2d:8c:ff:b7:3b:0a:e4:65:68:a9:03:a4:53:f5:
84:7c:40:65:61:f2:a4:0b:33:78:3d:3d:e2:a6:2f:
5c:36:13:ae:af:af:e8:87:51:73:03:a7:cf:47:96:
59:1f:74:51:9c:19:f3:61:3c:76:a3:c4:43:e7:46:
3b:7c:17:88:4a:76:82:9a:d1:d2:cd:8d:3f:cb:e3:
21:1a:a2:1d:0c:1f:d7:89:51:c9:77:7e:37:ad:9a:
e9:de:3c:4c:30:fc:6e:6e:72:af:9e:4b:3b:81:71:
1e:2e:89:1e:cc:cd:45:39:dc:32:f9:0a:f4:90:20:
d4:54:2a:55:a9:71:54:b3:79:52:37:11:2c:19:5e:
5a:b2:8c:56:a7:e5:7c:dd:b7:89:21:04:4d:43:5d:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:6A:0E:93:AE:D0:E9:69:FB:55:40:45:3B:05:30:C2:79:E5:6A
X509v3 Authority Key Identifier:
keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:87:e1:e9:8e:87:58:66:c5:78:54:80:2b:fc:77:38:c1:da:
8d:fe:1e:8e:97:f4:80:cc:8e:e7:78:30:1f:40:75:ee:2c:34:
81:9f:b7:68:7b:8e:4e:43:bc:db:e9:ba:24:81:d3:e9:91:a0:
bc:33:a8:0a:9e:9c:4b:3b:74:6a:b3:56:f5:c4:3d:98:4e:cf:
6c:c4:ea:87:f3:c2:d6:1e:00:6c:41:43:6c:a7:bf:59:b8:2c:
00:42:6e:8b:9f:60:67:54:cf:8d:e4:d7:3d:2f:19:bc:9f:9e:
c0:d1:d2:20:96:18:68:77:38:33:e0:84:00:3f:dc:83:bc:3d:
2a:e9:cb:eb:aa:bb:22:ac:e0:f6:34:c0:4b:77:d7:bd:7f:76:
52:e9:3c:08:89:45:92:00:c5:0d:15:bd:c9:51:2d:a7:f1:c1:
4b:1a:bd:9c:ba:e5:e0:f9:bb:a9:44:a5:f3:db:0a:64:c9:7e:
14:5a:c1:0c:72:87:0e:a1:dc:f7:00:95:10:35:b7:5e:8c:1f:
a7:9a:53:a6:81:e3:34:fe:fd:de:bd:a6:c1:d2:e6:a0:e0:ef:
8a:57:58:c4:9d:d5:bb:fc:70:a8:22:e6:9e:ae:6a:fb:0d:73:
1d:4b:70:2d:23:27:14:6a:86:08:37:6a:89:0e:a8:e1:a1:d9:
b4:bf:43:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHZuG+KR7ZG2YuIpdDDVEQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNDZkNDljYzM0NzY3ZjhkMDI0YWZmMjk1YWQ2YTkzMmU3
OTE1ZTAwHhcNMjYxMTE0MTEwMTQ1WhcNMjYxMTE1MTEwMTQ1WjAzMTEwLwYDVQQD
EyhkYWQ3NmEwZTkzYWVkMGU5NjlmYjU1NDA0NTNiMDUzMGMyNzllNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTTuiyJqrlDd0Z6vgho/p/hF1Bvb
XIIU2czQSbxSKReWUdhCps0oyfjAiiFSX1u/4hxCdWtDpr6h9cWmI796Fv2xkjrB
p53Fjy3y5E1laDPTG+neWMtjQAP648EiflUY96h2PZoRIR4ZLYz/tzsK5GVoqQOk
U/WEfEBlYfKkCzN4PT3ipi9cNhOur6/oh1FzA6fPR5ZZH3RRnBnzYTx2o8RD50Y7
fBeISnaCmtHSzY0/y+MhGqIdDB/XiVHJd343rZrp3jxMMPxubnKvnks7gXEeLoke
zM1FOdwy+Qr0kCDUVCpVqXFUs3lSNxEsGV5asoxWp+V83beJIQRNQ12O3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrXag6TrtDpaftVQEU7BTDCeeVqMB8GA1UdIwQY
MBaAFN9G1JzDR2f40CSv8pWtapMueRXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My85Yjk3M2QtMWYyZi00Yzc3LTlkZDAt
MWY3MzIwNDZiNzRjLzEvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My85Yjk3M2QtMWYyZi00Yzc3LTlkZDAtMWY3MzIwNDZiNzRj
LzEvMzBiVW5NTkhaX2pRSktfeWxhMXFreTU1RmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYfh6Y6H
WGbFeFSAK/x3OMHajf4ejpf0gMyO53gwH0B17iw0gZ+3aHuOTkO82+m6JIHT6ZGg
vDOoCp6cSzt0arNW9cQ9mE7PbMTqh/PC1h4AbEFDbKe/WbgsAEJui59gZ1TPjeTX
PS8ZvJ+ewNHSIJYYaHc4M+CEAD/cg7w9KunL66q7Iqzg9jTAS3fXvX92Uuk8CIlF
kgDFDRW9yVEtp/HBSxq9nLrl4Pm7qUSl89sKZMl+FFrBDHKHDqHc9wCVEDW3Xowf
p5pTpoHjNP793r2mwdLmoODvildYxJ3Vu/xwqCLmnq5q+w1zHUtwLSMnFGqGCDdq
iQ6o4aHZtL9D6g==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:25 2026 by rpki-client