
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
File: 30EC341CC59263F48799F70A95490826E78E6E11.mft (raw, json)
Hash identifier: Ka4r/A3IJRCrQFWEG0WVuw2TNBW0gDmAPTcIl8eJfU8=
Subject key identifier: 76:8D:71:EA:B6:9A:CA:46:A8:81:11:8E:76:16:CF:FC:C2:7B:80:B0
Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Certificate issuer: /CN=30EC341CC59263F48799F70A95490826E78E6E11
Certificate serial: 50794C8DA0A7FB5C90EE244B9E588B4EDF15EFF0
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
Manifest number: 057F
Signing time: Thu 23 Jul 2026 08:19:59 +0000
Manifest this update: Thu 23 Jul 2026 08:14:59 +0000
Manifest next update: Fri 24 Jul 2026 11:22:59 +0000
Files and hashes: 1: 30EC341CC59263F48799F70A95490826E78E6E11.crl (hash: 8Z6z2Fu0O9br2s2+mg99TTRIwrWpeRYH5l2xU522O+w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl
rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:79:4c:8d:a0:a7:fb:5c:90:ee:24:4b:9e:58:8b:4e:df:15:ef:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11
Validity
Not Before: Jul 23 08:14:59 2026 GMT
Not After : Jul 24 11:22:59 2026 GMT
Subject: CN=768D71EAB69ACA46A881118E7616CFFCC27B80B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:90:ab:06:a2:ff:20:e6:c8:a9:b0:3c:3b:
c2:91:5b:6f:10:96:fa:8f:50:3c:6c:f0:9f:ee:5b:
34:5e:ca:68:6b:87:e8:9c:05:81:38:d0:82:d8:8b:
82:a4:22:ce:ca:d7:ea:bc:4d:09:31:a6:05:30:6e:
d1:63:33:b0:c5:a0:e7:b2:fa:74:e6:dc:be:37:43:
2a:b0:68:42:fa:a0:e8:e8:18:04:06:96:b2:71:45:
7a:e7:71:01:ab:2c:9f:6f:8a:06:9d:7f:4d:de:a0:
c4:73:7f:ba:e6:34:b6:3f:27:fb:8c:46:58:de:1a:
e4:62:3c:55:dc:ef:52:b6:7f:1e:06:43:83:51:07:
1a:f0:23:3a:9d:5f:60:ac:94:87:56:6d:67:77:3f:
74:9c:37:34:57:f7:3a:ee:3e:d6:23:ca:0d:83:74:
46:3b:23:e4:20:c0:37:c3:ca:85:26:3a:64:5f:21:
2e:bf:34:68:33:2c:30:e1:26:da:d6:00:1b:a1:a9:
65:a4:ea:36:94:e2:35:4f:dc:ff:c6:f7:c3:af:07:
0b:34:ae:ab:2e:a5:86:ef:3b:f3:66:7f:04:31:74:
8c:10:fd:28:6c:ac:8c:82:c5:b2:62:41:1b:46:5d:
7b:65:ff:7f:cc:15:53:0b:3c:ec:33:c3:a5:50:bd:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8D:71:EA:B6:9A:CA:46:A8:81:11:8E:76:16:CF:FC:C2:7B:80:B0
X509v3 Authority Key Identifier:
keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:76:c6:0e:e7:3f:eb:b6:db:69:66:40:1b:25:70:02:62:d9:
dd:34:c3:a7:2f:30:75:5c:b4:ec:92:82:b9:b1:fa:79:81:07:
70:3f:51:d2:db:1c:df:fb:e0:27:f6:4b:7d:29:b9:61:f0:ff:
ab:72:32:f5:9d:75:fc:41:88:c1:d3:18:a8:a7:7c:15:4e:79:
bf:ce:97:b7:a2:29:e6:f0:58:36:e8:ad:3a:d4:be:78:c0:0f:
4e:14:d6:13:de:dc:94:39:24:a9:eb:8c:69:8d:09:c5:c1:50:
38:29:a3:f1:bc:c0:88:83:58:de:fd:51:bb:4f:a9:69:1a:4b:
84:5e:5e:3d:a1:c3:f6:bc:9b:8a:15:91:b6:9d:1d:12:d3:e4:
a4:96:06:fe:14:3f:d9:aa:35:67:a1:f2:90:f1:15:d3:b9:45:
0c:4e:25:12:2e:59:6d:62:72:d0:a8:f8:18:fc:f7:88:eb:68:
32:b6:b6:31:d8:76:f8:67:2e:c0:74:28:de:fa:3f:b5:96:1e:
14:62:bb:8b:5f:df:b4:68:20:71:bd:cd:f2:e3:32:cd:5d:3e:
f4:bf:49:f1:46:55:a3:a6:60:67:f7:40:04:f8:0d:3a:1f:fd:
39:c4:bd:3e:25:a0:cc:fa:b7:90:cf:72:b0:c4:5a:bd:91:37:
a0:51:a7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:27 2026 by rpki-client