Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
File: s30V5DRw7wodxwEHQ5P-cPLfjQY.mft (raw, json)
Hash identifier: 2neMKLnua9KUvDM54wfDfLHnq5Ls/skcns+5z1iR1rc=
Subject key identifier: 88:C4:D2:EA:E5:E9:AD:3D:52:64:24:1E:8E:5E:3C:5C:C3:78:F6:F3
Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
Certificate issuer: /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Certificate serial: 019D26CD30FD4F246E0DE9D06F4631ED20E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
Manifest number: 094B
Signing time: Wed 25 Mar 2026 21:01:14 +0000
Manifest this update: Wed 25 Mar 2026 21:01:14 +0000
Manifest next update: Thu 26 Mar 2026 21:01:14 +0000
Files and hashes: 1: cq8gxju5oWNcYnI5PxKC4JIOX9U.roa (hash: jLj78jxraqm7W54FO62Mu8iYhA0T1LmaYubfOc77vt0=)
2: s30V5DRw7wodxwEHQ5P-cPLfjQY.crl (hash: Dx/FweRfNaR66pUKvKbbaveERgoul3IghlVZzoewg+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:30:fd:4f:24:6e:0d:e9:d0:6f:46:31:ed:20:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Validity
Not Before: Mar 25 21:01:14 2026 GMT
Not After : Mar 26 21:01:14 2026 GMT
Subject: CN=88c4d2eae5e9ad3d5264241e8e5e3c5cc378f6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:e7:a6:b3:4d:c7:2b:75:88:f9:03:00:0d:
3c:83:e7:5b:0e:06:b3:77:55:a5:dd:c7:fe:ba:dd:
e3:d7:4c:2e:75:51:34:0d:0b:28:1f:d0:cc:e8:07:
b1:99:b8:dd:92:7e:32:e9:3f:74:31:21:5e:fe:5f:
d6:8c:e2:91:51:cf:04:89:4f:c7:b8:34:41:69:a3:
38:93:72:f2:47:6a:10:1c:33:d9:f5:ee:98:59:0a:
21:04:8c:10:16:b6:f6:03:05:5e:3b:fe:af:25:9d:
80:84:a5:c9:5d:13:e0:d2:04:ac:b6:6b:07:a5:13:
4d:29:29:df:f4:06:a8:8e:f6:15:d3:d1:55:5d:4f:
c4:4d:8b:75:a2:8c:2f:b5:ae:4b:84:01:22:f6:da:
f9:24:08:69:e3:6e:e7:82:6f:8d:d7:5e:89:8e:c6:
28:a0:21:34:fd:27:1e:7b:44:5e:a4:c5:6b:2d:94:
39:ed:ab:a5:e9:b4:a4:28:cb:6c:71:20:34:99:6e:
7b:b0:d3:e7:7d:db:29:95:63:f5:57:dd:45:d4:f6:
65:c1:f3:8b:8f:99:27:23:cc:83:4c:6f:f7:dc:1a:
8a:7e:d1:15:28:2b:31:dc:29:ed:1a:8b:2b:88:b0:
f3:8e:ea:ba:f3:20:a0:0c:04:a5:6f:72:0c:88:6d:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C4:D2:EA:E5:E9:AD:3D:52:64:24:1E:8E:5E:3C:5C:C3:78:F6:F3
X509v3 Authority Key Identifier:
keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:34:b8:6f:58:02:06:4d:2f:2b:27:3c:ad:08:01:02:a1:72:
d0:b4:0b:06:b9:60:d1:35:29:69:e3:b4:f2:cb:5f:10:29:96:
38:6f:50:cf:24:ff:71:fc:08:3f:a2:aa:bf:5a:cb:9f:f5:a8:
4c:0b:ab:41:5c:69:95:0d:58:c1:d4:c2:09:59:f8:53:91:f5:
80:d9:21:84:99:44:fe:0b:0e:d9:07:d2:3a:89:ce:c4:37:50:
d2:be:69:b3:c8:84:56:42:e1:0f:f9:91:7d:43:8c:63:02:ce:
74:77:c5:2f:72:f1:84:dc:0d:62:2c:1e:c1:0d:be:75:c5:d4:
f2:3f:00:bb:4f:0c:4a:fe:91:fe:c9:c4:94:03:78:ae:ce:aa:
9e:1d:f1:fa:6b:d2:a2:2e:76:bd:f1:19:6c:6f:e6:c6:51:4b:
ce:eb:9b:20:5a:f7:4e:a9:9b:ce:1b:db:92:27:f2:b6:90:38:
7c:67:6f:cf:4b:b6:26:0b:f7:4e:bb:5c:7a:38:0b:bc:8d:3b:
dd:b4:69:51:0c:ca:d0:e9:48:86:d4:36:92:98:db:7d:d6:81:
4f:1a:cb:bc:1b:0b:01:b8:13:b7:65:6b:e5:6b:93:91:cc:5c:
dd:36:22:58:a0:af:be:d1:d5:af:0e:7c:aa:40:af:14:3b:cd:
32:bc:9d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:45 2026 by rpki-client