Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
File: h30YEASPQ3IFBuTBgg9v4I_3ym4.mft (raw, json)
Hash identifier: +yrOpQ493g8QbwEDyxS4GZHkWiIA6JgeqcwZ33IZMnU=
Subject key identifier: C4:6B:77:13:75:6E:A9:89:3D:3F:B6:F9:CE:39:F0:1B:F4:A8:70:D3
Authority key identifier: 87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
Certificate issuer: /CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Certificate serial: 019D26CD2397A94463E961398A325044D12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
Manifest number: 0E20
Signing time: Wed 25 Mar 2026 21:01:11 +0000
Manifest this update: Wed 25 Mar 2026 21:01:11 +0000
Manifest next update: Thu 26 Mar 2026 21:01:11 +0000
Files and hashes: 1: dMfmkGCssv7XqTWroQRv-l8a5ns.roa (hash: hm9ZxaNW+e5ilEfF4gv37M+kUWsrW8nDblCItA5yuBg=)
2: h30YEASPQ3IFBuTBgg9v4I_3ym4.crl (hash: opzaEyxzGGBAYxlRve2XpZ9ErUp9/iQGp1GxANAWj2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:23:97:a9:44:63:e9:61:39:8a:32:50:44:d1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Validity
Not Before: Mar 25 21:01:11 2026 GMT
Not After : Mar 26 21:01:11 2026 GMT
Subject: CN=c46b7713756ea9893d3fb6f9ce39f01bf4a870d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:43:19:ab:86:c9:57:4a:5d:7c:bb:31:50:
80:4e:0a:98:28:39:8f:ff:3b:e7:c2:74:1d:17:60:
0c:be:88:59:15:46:f2:e3:6c:dc:ed:86:f5:6d:47:
94:48:f9:01:20:1f:92:93:52:32:2a:b0:2b:00:63:
cd:2c:68:db:c4:f0:b7:06:7e:39:65:4d:e2:11:15:
7d:ef:94:22:c6:92:8d:42:d5:04:a5:b2:50:6f:01:
e3:c0:39:ef:03:3d:8a:c0:28:d4:6e:5e:dc:40:b2:
11:bb:b0:95:06:31:4d:03:d0:64:ca:6c:b3:05:ab:
03:fe:c5:ae:05:ea:6a:31:55:2c:b1:35:ef:3e:0c:
e5:0d:40:37:99:32:be:83:13:e5:ce:85:c9:d1:f3:
58:02:f9:84:ea:32:d8:49:1e:47:fa:6c:9b:9e:2e:
d7:7b:1f:87:35:16:74:0a:17:6a:69:0f:9f:ab:13:
6e:df:7f:f6:fb:1f:5e:82:06:13:30:92:02:c6:7d:
68:d4:cd:ce:85:4d:47:69:95:7d:79:a5:42:04:2a:
03:83:da:d0:51:11:8b:7b:34:b2:a2:61:4b:ab:45:
4e:bb:ec:0a:28:c4:69:6c:b4:8d:92:9e:9d:ac:57:
42:7d:df:33:30:5e:ff:a5:52:9b:87:4d:d2:6e:95:
58:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6B:77:13:75:6E:A9:89:3D:3F:B6:F9:CE:39:F0:1B:F4:A8:70:D3
X509v3 Authority Key Identifier:
keyid:87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b5:ac:c8:0b:ad:0c:d3:dd:d0:6b:47:b5:48:2a:4e:15:30:
9d:18:ba:c7:23:f0:ce:eb:f4:03:4a:65:e3:e1:53:f4:95:27:
89:bb:e9:56:57:07:51:b3:df:d7:d0:4d:ea:ae:fa:0f:9b:80:
d5:e0:26:d8:81:e5:b2:60:55:06:47:dd:60:f2:02:b0:6d:e6:
0a:08:9b:8b:fb:30:9a:52:97:a0:87:75:d7:cc:23:0e:fb:be:
23:8d:5c:f5:6c:1b:09:27:5d:f0:c2:72:8f:23:77:1b:d9:5b:
70:63:ea:86:a5:18:bb:63:df:f6:5a:7b:8a:ec:f0:91:09:fe:
57:b4:24:a7:5b:70:7b:b5:98:f4:61:44:fc:b2:28:7a:e2:f7:
e3:c7:49:97:df:c1:f6:f7:69:cc:41:05:5e:9a:f1:73:b2:d4:
1b:c7:a8:4e:5f:95:97:ad:75:49:94:05:28:c4:6e:a7:fc:60:
e0:9b:73:ae:e6:bd:97:b1:c5:50:d9:fb:71:7c:69:a9:c1:c0:
af:56:6e:fd:1a:e0:96:2e:ed:68:a9:04:2d:10:f5:60:92:e0:
1e:55:9a:15:24:09:2e:94:c4:8d:c9:ed:0e:fc:a9:8f:a0:d1:
19:de:f3:71:2a:ac:ba:ad:53:da:99:a3:21:72:2a:93:89:4d:
ca:25:85:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:00 2026 by rpki-client