Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: TEyRpaAoBWLx5F2eugNNLbW7zLwGCsRT0AHSwr2lsrw=
Subject key identifier: 9F:57:99:D3:58:03:BA:47:A9:7F:83:0D:39:80:0F:5E:F1:8A:AD:56
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 019E1CEB8F1A1DC20F3F587EE1B3C1911F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 1494
Signing time: Tue 12 May 2026 16:00:59 +0000
Manifest this update: Tue 12 May 2026 16:00:59 +0000
Manifest next update: Wed 13 May 2026 16:00:59 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: xVBquQrVgSS437eOI1EX23H2DTaXCor48086T2ECcSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:8f:1a:1d:c2:0f:3f:58:7e:e1:b3:c1:91:1f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: May 12 16:00:59 2026 GMT
Not After : May 13 16:00:59 2026 GMT
Subject: CN=9f5799d35803ba47a97f830d39800f5ef18aad56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:0d:38:61:f3:81:cd:63:13:7c:9a:30:a7:
ed:3e:01:50:60:b5:a8:b4:16:58:0d:11:14:2f:17:
67:b1:5c:2e:15:2e:9b:88:1b:ba:0d:7c:c5:5d:a7:
d4:e9:24:fe:7e:e4:7e:04:0b:44:a9:12:93:d3:16:
4f:da:6d:15:66:03:de:26:d2:1b:0e:d8:83:33:5f:
27:b5:f8:9d:36:c1:56:09:f7:53:e6:3f:ad:31:00:
8d:d0:97:a5:21:10:49:8c:45:b2:cd:c3:21:0c:34:
76:da:ba:7a:cc:ee:aa:a8:24:3d:fa:da:70:d9:7a:
91:1e:61:d6:7a:ef:02:c2:b0:17:45:61:4b:bb:f2:
c5:db:55:20:22:26:ba:e0:92:7b:9f:45:48:7e:4c:
5c:bd:99:55:b2:2b:28:bc:01:16:07:9f:4d:8b:9d:
33:73:23:0b:53:87:1c:aa:f0:e3:4c:ab:f1:b2:df:
b7:d5:28:db:dd:eb:bb:ab:f1:cf:0d:e6:63:6a:3d:
db:7f:59:ce:92:37:f9:56:45:55:f7:aa:c7:4a:77:
f7:ac:96:16:04:a2:ef:97:b2:82:b7:ec:c0:09:b5:
d8:07:11:21:ab:6d:88:ac:34:21:67:57:c9:06:0d:
c5:51:86:e9:64:96:8a:cf:ff:84:4a:b0:5a:fc:82:
aa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:57:99:D3:58:03:BA:47:A9:7F:83:0D:39:80:0F:5E:F1:8A:AD:56
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a9:bc:40:a8:28:a9:6a:0e:fa:83:11:eb:d8:48:2f:20:d2:
9c:72:93:42:c4:bd:ae:b9:af:cb:97:43:bf:66:c5:63:de:69:
f0:c9:36:ca:20:b9:09:ca:5b:72:e4:74:ce:d5:47:20:53:8b:
e4:5d:b0:ee:3b:30:38:a9:50:65:52:a7:dc:55:c6:9b:1b:89:
68:23:d0:90:3d:3b:e5:45:25:d7:11:95:97:5d:36:79:ad:c0:
89:01:cf:0b:c6:70:92:f1:df:5c:e0:25:52:86:2e:c1:01:71:
5e:c4:dd:9d:65:19:b4:49:a5:96:bf:1f:c1:e3:b8:37:b7:bd:
61:3b:ef:3b:3f:a2:1a:8d:a4:84:48:76:87:50:02:85:9b:f0:
76:25:7c:37:e6:95:87:ad:91:38:2f:72:c3:50:e6:ff:3b:a6:
1a:52:5c:0c:21:64:1d:d4:fd:3e:22:9a:4f:66:3d:fc:2a:ce:
f8:f1:da:9d:3e:90:ed:cf:f1:05:4a:d4:42:d8:7b:87:e5:f7:
34:e4:36:a9:c8:15:c8:66:b0:ac:b4:44:21:3a:87:b6:ff:5e:
02:26:8a:08:99:f0:4c:97:73:a8:e6:62:95:98:d2:d1:46:a8:
39:17:a7:17:2f:a8:34:81:70:a1:ff:5c:e8:9f:d0:b7:d5:88:
9c:b9:d6:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c648aHcIPP1h+4bPBkR8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNDJhOTUyYWY2Zjg0ZjI5ZjFkMWIxZWU5NzQxYjA1NzI4
Njg3ODQwHhcNMjYwNTEyMTYwMDU5WhcNMjYwNTEzMTYwMDU5WjAzMTEwLwYDVQQD
Eyg5ZjU3OTlkMzU4MDNiYTQ3YTk3ZjgzMGQzOTgwMGY1ZWYxOGFhZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm0NOGHzgc1jE3yaMKftPgFQYLWo
tBZYDREULxdnsVwuFS6biBu6DXzFXafU6ST+fuR+BAtEqRKT0xZP2m0VZgPeJtIb
DtiDM18ntfidNsFWCfdT5j+tMQCN0JelIRBJjEWyzcMhDDR22rp6zO6qqCQ9+tpw
2XqRHmHWeu8CwrAXRWFLu/LF21UgIia64JJ7n0VIfkxcvZlVsisovAEWB59Ni50z
cyMLU4ccqvDjTKvxst+31Sjb3eu7q/HPDeZjaj3bf1nOkjf5VkVV96rHSnf3rJYW
BKLvl7KCt+zACbXYBxEhq22IrDQhZ1fJBg3FUYbpZJaKz/+ESrBa/IKq9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9XmdNYA7pHqX+DDTmAD17xiq1WMB8GA1UdIwQY
MBaAFN9CqVKvb4Tynx0bHul0GwVyhoeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYt
ZDIyODg1MjViMDg3LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kM2NhMDQtOWU4OC00YmZiLWJlNWYtZDIyODg1MjViMDg3
LzEvMzBLcFVxOXZoUEtmSFJzZTZYUWJCWEtHaDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6m8QKgo
qWoO+oMR69hILyDSnHKTQsS9rrmvy5dDv2bFY95p8Mk2yiC5CcpbcuR0ztVHIFOL
5F2w7jswOKlQZVKn3FXGmxuJaCPQkD075UUl1xGVl102ea3AiQHPC8ZwkvHfXOAl
UoYuwQFxXsTdnWUZtEmllr8fweO4N7e9YTvvOz+iGo2khEh2h1AChZvwdiV8N+aV
h62ROC9yw1Dm/zumGlJcDCFkHdT9PiKaT2Y9/CrO+PHanT6Q7c/xBUrUQth7h+X3
NOQ2qcgVyGawrLREITqHtv9eAiaKCJnwTJdzqOZilZjS0UaoORenFy+oNIFwof9c
6J/Qt9WInLnWBw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:57:55 2026 by rpki-client