Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
File: 30bUnMNHZ_jQJK_yla1qky55FeA.mft (raw, json)
Hash identifier: 10MpaocmfZyQthGCqhgAK+XjGD3Mtr0R+iLY+2FveCc=
Subject key identifier: 72:DC:44:B4:9D:C5:6B:B7:3C:EC:71:51:A1:A7:C9:B9:8E:E0:86:48
Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
Certificate issuer: /CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Certificate serial: 019CE6A46817DE1C2EC73C2395C370A33348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
Manifest number: 0B43
Signing time: Fri 13 Mar 2026 10:01:00 +0000
Manifest this update: Fri 13 Mar 2026 10:01:00 +0000
Manifest next update: Sat 14 Mar 2026 10:01:00 +0000
Files and hashes: 1: 30bUnMNHZ_jQJK_yla1qky55FeA.crl (hash: LjQLImZ8Hu0E+3eLm+ALEIAyHx8Nnerv4CKqyTXAj+M=)
2: rE_1H-00uBo7a6gc1UV-KaxbXpk.roa (hash: Nok0K6EfIgHcNFE45GfXNSKdGaLmBIALv0MixqWr//8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:68:17:de:1c:2e:c7:3c:23:95:c3:70:a3:33:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Validity
Not Before: Mar 13 10:01:00 2026 GMT
Not After : Mar 14 10:01:00 2026 GMT
Subject: CN=72dc44b49dc56bb73cec7151a1a7c9b98ee08648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:e7:4f:96:0b:f2:ed:dc:20:f1:15:1c:9f:
ba:b7:8a:d4:b4:32:b0:f9:73:51:8c:13:30:0c:db:
24:b5:b6:bc:53:6a:a6:7f:2f:c1:84:7a:ae:80:d8:
51:d6:6e:f1:ad:e3:f6:91:94:0e:8a:c4:d1:aa:a2:
58:fc:09:bb:7d:e8:24:ae:0d:94:53:9e:4f:be:03:
74:c5:53:08:0b:74:e2:bf:9b:18:f6:fe:2e:1b:8d:
85:3a:d0:8d:bf:95:c9:19:3f:00:e6:d3:a3:ea:3f:
44:26:6c:a5:33:44:57:31:9d:31:56:8a:59:30:ff:
b2:db:c6:12:1a:69:64:88:d7:61:e9:dd:ea:de:f3:
1e:eb:67:37:3d:43:f7:7a:63:d2:bd:21:cd:72:0d:
81:30:60:13:af:82:d6:7b:7d:cc:da:6e:e9:fd:8e:
c9:2c:e9:d0:7e:a7:40:97:27:ec:59:8a:58:bc:83:
f5:c0:7d:2f:54:58:06:16:be:bd:52:a7:c6:74:6f:
e4:b7:e7:03:74:b8:e9:3c:68:c9:34:54:d9:13:eb:
f5:ee:6b:fa:41:19:0a:cf:e8:5f:69:8c:42:31:04:
81:02:0e:89:56:29:17:18:13:1c:91:08:d4:1f:01:
1e:c5:1c:a7:8a:09:86:37:ab:4c:3e:92:42:89:bf:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DC:44:B4:9D:C5:6B:B7:3C:EC:71:51:A1:A7:C9:B9:8E:E0:86:48
X509v3 Authority Key Identifier:
keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2a:57:66:01:79:64:62:d8:44:d7:98:3c:ad:7f:69:d6:d5:
56:f9:2b:05:b0:68:69:cf:ea:dd:fe:c9:ca:c5:2b:c1:40:2a:
44:37:d5:53:49:5f:85:7c:7b:bc:87:d7:2b:41:06:b4:e2:18:
4e:cf:f6:4b:5d:39:6e:b6:2c:31:da:f2:c6:20:d0:9d:67:f6:
a1:96:24:6f:b1:5b:cd:05:82:09:3f:0e:b8:0a:b9:84:23:42:
c5:7c:ba:5e:86:57:f3:03:ab:23:88:e0:1b:a4:56:ad:8c:be:
9e:fa:6e:59:94:9d:0e:a7:e5:0d:d5:1c:a2:a6:08:09:20:aa:
20:62:f3:87:24:fc:11:fb:ce:fc:c5:93:2f:31:b2:7e:7a:01:
38:6a:a9:fe:15:1a:89:7a:1e:2e:03:29:4f:9e:88:be:bd:e3:
70:3c:ff:fa:6e:54:67:19:1a:33:28:92:17:09:dc:f6:5f:ce:
57:17:05:0c:37:8d:fc:7c:90:09:e0:68:80:5e:11:6b:c7:e8:
3d:52:11:0a:5d:64:f2:6f:3a:01:63:ab:bb:8b:67:35:70:c3:
13:78:e1:62:bc:8b:83:8d:16:74:03:c5:40:7f:78:ae:ad:52:
91:7f:4a:d4:99:c3:a2:25:3e:91:d2:b3:bf:09:f4:08:ff:09:
a9:39:b2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:40:29 2026 by rpki-client