Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
File: a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft (raw, json)
Hash identifier: 9v66Nez4p0Nn2PhTkd5Y6wpa5/g63ipExYlGIdfO4PI=
Subject key identifier: E5:D8:0F:5B:91:98:50:71:70:10:D0:4A:14:8E:28:12:8A:8B:45:AF
Authority key identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
Certificate issuer: /CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Certificate serial: 019D284D9F2888BE1A1AEC9EC6048D1BF7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
Manifest number: 0105
Signing time: Thu 26 Mar 2026 04:01:08 +0000
Manifest this update: Thu 26 Mar 2026 04:01:08 +0000
Manifest next update: Fri 27 Mar 2026 04:01:08 +0000
Files and hashes: 1: T__G1Ca-eMsMLPhR2fqq6jZzabE.roa (hash: /YNdonFxgiuSJ7bSBLLw5KHpjMZ1mWh/QAHnXBlZOVY=)
2: a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl (hash: IuELcFHIy5AQ04bVn/UBvbtfIYw7Ipxlqfc8CUuBvhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:9f:28:88:be:1a:1a:ec:9e:c6:04:8d:1b:f7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Validity
Not Before: Mar 26 04:01:08 2026 GMT
Not After : Mar 27 04:01:08 2026 GMT
Subject: CN=e5d80f5b919850717010d04a148e28128a8b45af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ff:9a:29:2f:86:92:f1:90:97:ff:f7:eb:90:
40:00:d8:14:c7:92:53:c6:64:b8:97:1a:78:ba:8b:
7d:1e:87:17:97:38:3d:bd:42:0f:16:82:74:19:ca:
f0:d1:7b:c8:32:74:d2:2a:42:01:78:e7:3f:61:6c:
08:b7:45:0d:17:a7:11:2f:93:12:79:8d:31:46:aa:
f1:15:9e:ff:ff:55:8b:f5:e8:ee:45:3a:0b:53:c9:
6f:fa:82:0e:04:7f:4a:30:1a:7b:eb:da:37:ca:f0:
fd:2a:d3:9d:50:0e:e5:82:47:71:e8:80:65:00:9c:
75:a6:cd:f1:90:a1:59:11:0f:1c:bb:77:ae:d2:a5:
5c:93:17:0b:8b:5d:e7:37:55:c4:ce:6b:23:c6:63:
12:73:2c:e4:f3:3a:69:82:99:9b:52:58:f0:15:13:
5d:2b:00:09:38:79:04:83:bc:d8:68:68:d0:bf:c6:
cf:78:2a:53:3c:29:aa:3a:d9:1a:5a:9f:83:9f:6d:
4b:4f:ea:71:e3:bf:1c:f6:f5:97:6a:80:3b:95:96:
84:85:f1:2a:5f:8d:a4:e8:4a:97:e6:a2:11:bf:9d:
c5:ef:a5:2c:dc:5e:a0:01:e2:1e:5e:83:1f:61:92:
8d:60:b0:f4:39:b9:9f:a2:7c:83:1b:61:14:64:0c:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D8:0F:5B:91:98:50:71:70:10:D0:4A:14:8E:28:12:8A:8B:45:AF
X509v3 Authority Key Identifier:
keyid:6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:af:04:d1:69:30:1c:72:26:b5:f4:12:76:2f:87:54:02:de:
34:48:6f:96:ec:a8:32:48:c6:d6:85:7f:43:53:ac:23:35:af:
d6:cf:5b:bc:99:2d:7a:19:66:e8:29:68:00:ac:b8:91:64:3f:
09:cc:98:f5:0a:eb:fb:c2:7f:1f:79:61:af:6e:40:51:7f:ca:
82:93:57:dd:8b:99:c5:7c:a5:f4:d8:e3:6b:d8:f3:16:a9:79:
e5:1a:0d:0d:6f:12:47:20:c4:24:91:33:9a:ce:77:5e:f2:ac:
3e:9e:92:c4:bd:2c:b5:a0:66:ef:9c:86:87:1b:83:f4:7f:11:
2a:b8:c9:3b:96:e1:23:5f:21:bc:2d:f0:52:ac:f5:12:50:72:
b3:82:6d:82:fe:18:ef:f6:99:8a:4b:45:39:87:4e:fd:71:67:
99:c2:fa:63:fa:8c:6e:46:17:69:57:38:49:90:ce:1c:9b:78:
f0:f5:cc:2e:cf:c9:75:ab:6d:54:9c:e9:c0:e3:0d:ff:4d:0b:
af:11:8b:2f:07:51:26:a1:a1:2b:26:0b:6a:c8:62:03:34:f8:
0d:f7:3e:31:cb:b0:2a:e4:f5:91:7a:32:0f:e7:1a:04:b2:41:
5a:15:d0:f3:20:55:05:1a:52:f0:03:78:a2:a5:e7:28:ad:a6:
1f:68:a9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:35 2026 by rpki-client