Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: f4O6HKs+QNP0f7uaaLp4qJo2EF1QtMwQgjlUfh2eQc4=
Subject key identifier: 59:36:F9:92:BA:C6:8C:F8:48:7A:0A:B6:BC:32:D8:6E:01:ED:AA:E1
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 019F8FB554DC1A70425644C563B4F5EF6D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 1554
Signing time: Thu 23 Jul 2026 16:00:53 +0000
Manifest this update: Thu 23 Jul 2026 16:00:53 +0000
Manifest next update: Fri 24 Jul 2026 16:00:53 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: N+ne1kw/lNK3shaxT7ohA+rTYgqHGRx397bT7+5cdGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:54:dc:1a:70:42:56:44:c5:63:b4:f5:ef:6d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: Jul 23 16:00:53 2026 GMT
Not After : Jul 24 16:00:53 2026 GMT
Subject: CN=5936f992bac68cf8487a0ab6bc32d86e01edaae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:5f:9c:11:b5:4e:54:a2:ef:9b:02:da:55:
fc:98:f1:97:91:f9:8f:e8:57:f3:6e:e2:bf:8d:bb:
38:e4:8b:cf:d2:cf:36:09:32:62:1d:8c:bb:80:c9:
c8:52:5a:2b:b6:de:03:80:d3:38:bf:a3:3d:44:1c:
87:c4:0f:8b:04:fd:51:ec:62:37:7d:4f:d5:ac:da:
21:17:e1:5b:4f:9f:02:71:f0:f6:60:c5:20:e6:4e:
c7:02:53:6a:f0:84:6a:81:dc:61:b2:07:65:91:05:
50:cc:25:dd:05:8e:0e:93:73:f6:95:1b:db:6c:b6:
22:b2:34:30:84:d7:1a:19:07:e0:0e:ec:c9:06:d0:
c5:46:77:bf:db:3b:21:75:7f:cd:a3:af:8d:21:63:
29:32:31:57:35:96:61:bc:4f:cc:2c:f2:96:a0:58:
71:81:8a:8c:8f:6c:fc:44:a3:d0:aa:8e:09:88:ea:
3d:2f:62:2c:e1:c0:2f:7b:f2:e2:c6:93:e8:1f:81:
74:0f:64:44:94:c6:ab:2e:01:4c:43:74:7d:b3:1e:
67:49:ee:bc:f9:6f:20:7e:e3:11:8d:02:d6:22:4e:
fc:c0:38:71:45:b0:f5:ac:9e:6a:34:42:03:5e:e5:
22:21:6c:4b:7c:1f:fb:1d:97:d2:24:b8:40:34:3f:
38:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:36:F9:92:BA:C6:8C:F8:48:7A:0A:B6:BC:32:D8:6E:01:ED:AA:E1
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ff:c0:7b:5b:09:ab:fb:65:ea:2d:0d:65:17:93:87:2f:25:
0f:8b:7a:13:12:3a:44:4f:46:c9:03:6d:14:d8:a9:a1:04:d1:
1d:35:6f:46:80:a2:fe:2a:0d:90:c6:d0:05:35:7a:35:31:35:
8d:2d:0e:6b:bd:09:3a:c5:c3:8a:0e:eb:ea:54:46:d7:9a:62:
17:e8:f8:75:1c:f2:bf:19:fa:b2:b9:fc:18:b1:3f:76:a1:29:
69:39:64:ae:7f:60:ec:0d:98:c0:89:0d:75:47:22:7e:2c:8a:
63:f8:31:51:e7:71:a0:41:39:7a:66:4f:b7:07:0f:d2:52:26:
fb:9c:d8:cc:55:3a:33:63:be:66:11:8e:e5:48:80:47:2b:9e:
e1:d1:66:62:74:af:52:9a:c7:fe:7a:7b:cd:fb:02:31:f1:7d:
fc:cf:16:bd:48:da:ff:54:05:de:14:a1:61:3f:1d:f7:9d:35:
4f:81:7b:c8:0f:2e:fd:7d:17:4d:3d:be:b7:78:47:fc:fd:c5:
ca:e7:4e:56:00:84:70:c0:d5:c2:b7:66:13:9f:ba:00:d6:c4:
6b:63:55:d6:3d:40:44:4e:e8:c8:8b:bf:47:40:f2:3b:f5:ad:
11:63:07:cb:c7:4a:95:09:ed:03:be:cb:4b:85:5c:ce:08:97:
e0:f1:60:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtVTcGnBCVkTFY7T1720iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNDJhOTUyYWY2Zjg0ZjI5ZjFkMWIxZWU5NzQxYjA1NzI4
Njg3ODQwHhcNMjYwNzIzMTYwMDUzWhcNMjYwNzI0MTYwMDUzWjAzMTEwLwYDVQQD
Eyg1OTM2Zjk5MmJhYzY4Y2Y4NDg3YTBhYjZiYzMyZDg2ZTAxZWRhYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrNfnBG1TlSi75sC2lX8mPGXkfmP
6FfzbuK/jbs45IvP0s82CTJiHYy7gMnIUlortt4DgNM4v6M9RByHxA+LBP1R7GI3
fU/VrNohF+FbT58CcfD2YMUg5k7HAlNq8IRqgdxhsgdlkQVQzCXdBY4Ok3P2lRvb
bLYisjQwhNcaGQfgDuzJBtDFRne/2zshdX/No6+NIWMpMjFXNZZhvE/MLPKWoFhx
gYqMj2z8RKPQqo4JiOo9L2Is4cAve/LixpPoH4F0D2RElMarLgFMQ3R9sx5nSe68
+W8gfuMRjQLWIk78wDhxRbD1rJ5qNEIDXuUiIWxLfB/7HZfSJLhAND84hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFk2+ZK6xoz4SHoKtrwy2G4B7arhMB8GA1UdIwQY
MBaAFN9CqVKvb4Tynx0bHul0GwVyhoeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYt
ZDIyODg1MjViMDg3LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYtZDIyODg1MjViMDg3
LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfv/Ae1sJ
q/tl6i0NZReThy8lD4t6ExI6RE9GyQNtFNipoQTRHTVvRoCi/ioNkMbQBTV6NTE1
jS0Oa70JOsXDig7r6lRG15piF+j4dRzyvxn6srn8GLE/dqEpaTlkrn9g7A2YwIkN
dUcifiyKY/gxUedxoEE5emZPtwcP0lIm+5zYzFU6M2O+ZhGO5UiARyue4dFmYnSv
UprH/np7zfsCMfF9/M8WvUja/1QF3hShYT8d9501T4F7yA8u/X0XTT2+t3hH/P3F
yudOVgCEcMDVwrdmE5+6ANbEa2NV1j1ARE7oyIu/R0DyO/WtEWMHy8dKlQntA77L
S4VczgiX4PFg3Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:50 2026 by rpki-client