Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: gHkFtJyGUV38e0DCY46JQMCLUtpyhS1L79BTkUDRQ+c=
Subject key identifier: 9A:B3:78:B2:F5:D9:C1:91:2F:72:00:E7:2A:80:41:44:81:21:02:88
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 019D27A8C3F76670BD683F5AFC5FCB9BABA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 1415
Signing time: Thu 26 Mar 2026 01:01:04 +0000
Manifest this update: Thu 26 Mar 2026 01:01:04 +0000
Manifest next update: Fri 27 Mar 2026 01:01:04 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: kn6WMoW9Fhc3dwFFicirpLPAT7oh6mjZ7NHZhsh8T3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c3:f7:66:70:bd:68:3f:5a:fc:5f:cb:9b:ab:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: Mar 26 01:01:04 2026 GMT
Not After : Mar 27 01:01:04 2026 GMT
Subject: CN=9ab378b2f5d9c1912f7200e72a80414481210288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:16:59:88:52:26:68:70:28:4c:63:b4:6f:
0c:7c:01:0d:2a:50:e7:05:0a:27:d6:ba:4a:75:f8:
84:7a:02:fc:05:0b:6d:93:6f:2b:a4:1d:07:31:09:
32:3c:31:2b:62:14:16:ec:43:56:c3:3f:ea:f1:01:
fa:5e:6a:fe:29:61:6b:69:25:4e:75:5a:11:1c:af:
43:3f:6e:8b:a0:d0:2f:4b:0d:d9:a0:2f:8b:87:ed:
cd:01:10:bd:69:f0:2e:3c:6f:d3:fa:80:60:87:2e:
47:69:6a:12:a1:17:e3:76:88:ad:cf:97:64:21:ce:
7e:f0:34:63:8d:0e:c1:64:de:67:85:6d:ee:32:55:
07:ee:6b:f7:fd:f6:7d:69:0f:44:c0:b9:81:a5:8c:
5e:9b:9f:45:4a:0b:96:eb:7d:55:10:9c:c6:f5:6f:
39:a0:9e:97:29:fb:e6:12:cb:64:0a:26:2a:f0:df:
43:13:e9:fe:da:91:2c:62:d6:63:3d:c9:50:da:d2:
be:30:5d:7d:9e:3a:7e:9d:4a:e4:7f:31:00:d3:1e:
f0:04:79:56:f4:a3:92:d6:8f:9c:c4:9d:fc:30:57:
19:85:b3:49:d3:19:bc:53:0d:97:c1:51:0f:cb:9f:
ef:fb:a8:88:22:67:8b:a6:8a:f8:d6:8d:2c:80:a7:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B3:78:B2:F5:D9:C1:91:2F:72:00:E7:2A:80:41:44:81:21:02:88
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:53:7b:96:b9:d4:87:f2:4e:5a:6f:9c:8c:b9:b9:7a:5a:f9:
7f:24:1f:cb:15:b2:86:f8:da:fc:5d:a8:cf:3e:90:41:fc:7c:
36:97:75:69:3c:8b:68:ad:8b:cc:f0:0b:9b:7f:2d:fa:8b:fb:
6a:87:54:87:f8:ba:4a:4b:16:e5:45:97:ab:d5:b6:18:40:03:
77:6d:1c:b0:95:6e:aa:d7:8d:99:1c:39:19:5d:87:59:d7:f6:
68:da:3b:f0:a1:82:71:07:5e:e6:d5:98:4c:a6:04:56:6d:be:
c1:ad:6a:c7:97:d3:8e:6c:b9:33:ba:aa:b1:7d:6a:4c:bd:5a:
67:87:1b:21:d3:c0:13:a1:2c:6a:17:6b:2f:c9:54:1c:71:a8:
5f:f2:df:ea:6b:f4:57:aa:1c:d7:c1:96:f7:21:1f:b0:43:fd:
38:b4:21:bb:1c:0a:01:8e:8b:82:74:86:3e:3a:a9:1c:b0:09:
e9:7a:87:af:b1:ef:d5:37:81:ae:59:ef:5f:2c:0f:83:b8:d0:
3b:04:20:cb:cc:c9:c9:1c:07:ed:bc:5a:40:13:49:c5:61:43:
31:f6:f5:6e:d4:ba:f2:70:e7:39:21:bb:ff:b9:42:4a:95:85:
e1:d1:ce:1e:c0:16:22:db:fb:58:ed:be:68:93:f8:a2:9a:6e:
0d:ef:d6:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqMP3ZnC9aD9a/F/Lm6upMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNDJhOTUyYWY2Zjg0ZjI5ZjFkMWIxZWU5NzQxYjA1NzI4
Njg3ODQwHhcNMjYwMzI2MDEwMTA0WhcNMjYwMzI3MDEwMTA0WjAzMTEwLwYDVQQD
Eyg5YWIzNzhiMmY1ZDljMTkxMmY3MjAwZTcyYTgwNDE0NDgxMjEwMjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1oWWYhSJmhwKExjtG8MfAENKlDn
BQon1rpKdfiEegL8BQttk28rpB0HMQkyPDErYhQW7ENWwz/q8QH6Xmr+KWFraSVO
dVoRHK9DP26LoNAvSw3ZoC+Lh+3NARC9afAuPG/T+oBghy5HaWoSoRfjdoitz5dk
Ic5+8DRjjQ7BZN5nhW3uMlUH7mv3/fZ9aQ9EwLmBpYxem59FSguW631VEJzG9W85
oJ6XKfvmEstkCiYq8N9DE+n+2pEsYtZjPclQ2tK+MF19njp+nUrkfzEA0x7wBHlW
9KOS1o+cxJ38MFcZhbNJ0xm8Uw2XwVEPy5/v+6iIImeLpor41o0sgKd/uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqzeLL12cGRL3IA5yqAQUSBIQKIMB8GA1UdIwQY
MBaAFN9CqVKvb4Tynx0bHul0GwVyhoeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYt
ZDIyODg1MjViMDg3LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYtZDIyODg1MjViMDg3
LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFN7lrnU
h/JOWm+cjLm5elr5fyQfyxWyhvja/F2ozz6QQfx8Npd1aTyLaK2LzPALm38t+ov7
aodUh/i6SksW5UWXq9W2GEADd20csJVuqteNmRw5GV2HWdf2aNo78KGCcQde5tWY
TKYEVm2+wa1qx5fTjmy5M7qqsX1qTL1aZ4cbIdPAE6EsahdrL8lUHHGoX/Lf6mv0
V6oc18GW9yEfsEP9OLQhuxwKAY6LgnSGPjqpHLAJ6XqHr7Hv1TeBrlnvXywPg7jQ
OwQgy8zJyRwH7bxaQBNJxWFDMfb1btS68nDnOSG7/7lCSpWF4dHOHsAWItv7WO2+
aJP4oppuDe/Wbg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:59 2026 by rpki-client