Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
File: 30KDIArNwh2aNfWE8g_y4CboLI4.mft (raw, json)
Hash identifier: /QWOf19ufAT08ab4+2SNzG53HwXiWbyhG3wOKqLkcvI=
Subject key identifier: 8D:07:53:1D:92:2F:80:F3:7C:A5:91:5F:56:76:DB:63:68:72:B5:B5
Authority key identifier: DF:42:83:20:0A:CD:C2:1D:9A:35:F5:84:F2:0F:F2:E0:26:E8:2C:8E
Certificate issuer: /CN=df4283200acdc21d9a35f584f20ff2e026e82c8e
Certificate serial: 01A04084AABE226D98A72B8A17ABAAE1030D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KDIArNwh2aNfWE8g_y4CboLI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
Manifest number: 016A
Signing time: Thu 27 Aug 2026 00:00:31 +0000
Manifest this update: Thu 27 Aug 2026 00:00:31 +0000
Manifest next update: Fri 28 Aug 2026 00:00:31 +0000
Files and hashes: 1: 30KDIArNwh2aNfWE8g_y4CboLI4.crl (hash: KKZ6x0syuOIoQg3pZCQIQwSTSDWqqef1PtceNvMhn3Y=)
2: nbH1TD42BLjdbeZiXuysrxr8qdk.roa (hash: 0KSmmCd2YiufgVfcWAQKmc1rBsWEg+kubWBnByHlzaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KDIArNwh2aNfWE8g_y4CboLI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:84:aa:be:22:6d:98:a7:2b:8a:17:ab:aa:e1:03:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4283200acdc21d9a35f584f20ff2e026e82c8e
Validity
Not Before: Aug 27 00:00:31 2026 GMT
Not After : Aug 28 00:00:31 2026 GMT
Subject: CN=8d07531d922f80f37ca5915f5676db636872b5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:b0:3f:62:af:f3:e0:27:e3:ec:c7:cb:fd:
34:08:40:18:ac:f9:a9:20:4f:1a:7c:86:2c:6f:d6:
1d:7b:10:f9:4b:2d:6a:18:b8:00:74:e1:8b:58:0d:
3e:94:d9:03:1a:09:65:bb:f2:a4:3e:7a:20:b3:9e:
c1:32:f1:9e:97:ab:d6:06:99:41:b7:4a:d9:51:85:
0d:44:c0:c1:d2:17:35:6f:d5:4b:dc:a4:d0:d5:b0:
57:ba:26:f9:48:cd:aa:65:f8:43:d3:b2:7d:b7:c6:
68:92:3f:49:3c:7f:70:0e:ac:02:2a:d0:22:a9:4d:
31:66:40:92:46:55:8f:ae:9e:46:6e:f0:0b:db:29:
60:21:c4:74:cb:10:29:79:c5:29:16:8d:6a:22:a1:
5a:24:3d:d3:7b:52:e3:99:e1:bf:08:f2:dc:08:9c:
53:d1:f1:81:6e:88:14:a9:2b:ac:9b:96:3f:d3:88:
98:9a:16:f9:c2:37:56:3b:7d:a6:69:e3:74:eb:4f:
b0:9e:08:f4:94:11:32:48:d5:55:24:f1:f1:97:d9:
12:b6:5f:7f:87:95:88:55:3a:07:b4:f4:f2:0f:c3:
7f:03:fd:5d:04:99:c8:5e:5a:ba:5b:c6:2c:02:ad:
30:ae:bd:36:bd:55:07:80:05:38:77:51:cf:a4:02:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:07:53:1D:92:2F:80:F3:7C:A5:91:5F:56:76:DB:63:68:72:B5:B5
X509v3 Authority Key Identifier:
keyid:DF:42:83:20:0A:CD:C2:1D:9A:35:F5:84:F2:0F:F2:E0:26:E8:2C:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KDIArNwh2aNfWE8g_y4CboLI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a3a305-e3a5-420c-8fed-3206538d699b/1/30KDIArNwh2aNfWE8g_y4CboLI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:77:71:6b:15:2a:81:3a:f5:0d:31:1d:d3:8e:73:8e:3b:e6:
63:33:41:f7:74:61:93:a3:9d:43:55:5a:25:0d:80:4b:1a:2c:
e2:4f:a4:35:87:70:d3:25:e7:f2:fd:95:ad:f4:13:37:aa:b0:
b2:81:01:61:9a:51:46:2d:30:ac:05:b9:da:85:44:1e:1c:19:
c6:0e:cc:84:6e:07:70:1f:95:b7:b6:0d:9d:63:3c:d1:10:2a:
2c:73:cc:37:56:e9:4c:92:f3:a2:b4:f6:a7:ca:61:e9:9a:f1:
d6:5c:7f:77:a6:81:f5:a6:ea:8d:c4:76:2d:22:b3:15:65:f9:
ac:7e:c9:af:27:51:ca:dc:91:18:ac:d4:0f:44:00:c9:65:83:
e1:60:7a:53:86:fd:b5:f3:d6:f2:ad:68:3e:75:67:9a:5d:18:
b6:0c:49:cb:e1:15:22:38:2d:b7:34:3e:a3:54:03:98:c4:d1:
0d:8a:0b:ad:a6:e1:ff:3f:7c:51:de:b7:a2:0d:d3:b0:ff:76:
a0:15:1a:b0:36:6b:c3:6b:3e:2a:78:3b:8a:f8:9f:84:34:f9:
c0:60:1c:2b:ce:5c:2e:2c:b8:6a:fe:f0:57:56:60:c0:c7:1e:
d7:db:4c:37:5d:25:5a:1f:50:e4:2f:2f:12:71:a4:3a:0d:16:
96:06:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:48 2026 by rpki-client