Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: cfn8p7q78GBI4uHThR6U2qTcYbrc5EY1XGLhOdJ58/w=
Subject key identifier: 8F:D9:29:55:B9:D8:DA:6A:B7:59:8B:57:79:F7:1E:DA:74:41:B0:B0
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 019F17F9E2541B87539CC71B3C56E581EA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 1516
Signing time: Tue 30 Jun 2026 10:01:20 +0000
Manifest this update: Tue 30 Jun 2026 10:01:20 +0000
Manifest next update: Wed 01 Jul 2026 10:01:20 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: vcs5pBFkqu50+3og+HM4lVUVyCiIMT52f1vomjkBGyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:e2:54:1b:87:53:9c:c7:1b:3c:56:e5:81:ea:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: Jun 30 10:01:20 2026 GMT
Not After : Jul 1 10:01:20 2026 GMT
Subject: CN=8fd92955b9d8da6ab7598b5779f71eda7441b0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:a1:4f:ab:f9:20:2d:e3:1d:d8:41:e5:3d:
a6:d7:25:5b:a4:99:84:19:41:ee:32:d3:8e:fc:41:
8c:ab:2c:75:08:84:a7:0d:fb:fc:c1:01:53:46:68:
31:ad:8d:50:3d:1a:1c:6c:39:14:a4:41:4e:3b:07:
4f:2e:2a:ad:d1:84:33:8f:eb:b3:a5:55:07:23:1e:
b9:e9:4e:67:25:48:76:0e:47:d4:5f:26:c3:5f:a4:
a3:d4:a7:bb:8b:eb:71:98:f7:39:e2:5d:f5:ed:99:
c8:f1:32:5e:80:52:a9:c2:ff:b1:99:fc:a8:ee:b9:
e3:34:2c:01:94:e3:d5:f5:5d:ec:da:66:71:3a:a2:
78:ab:12:29:6b:a8:9b:b8:da:08:3a:b3:5c:95:91:
ef:2a:f2:ad:94:a4:85:4e:1e:11:91:18:30:57:c3:
01:6b:de:b3:1e:31:de:5e:34:03:57:6f:a8:97:89:
b7:a5:13:56:2a:bb:8d:7f:2c:84:0f:9a:65:60:11:
eb:e8:d1:6f:7e:6a:78:85:4a:3d:18:7a:e4:2b:4a:
87:14:6f:50:f3:af:c0:b4:89:b9:97:8f:4f:a4:29:
12:7a:fe:7a:e2:f5:0c:1b:43:e1:4f:27:5a:da:70:
0d:05:52:3f:9e:79:5f:a7:3a:91:64:55:ca:b4:09:
35:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D9:29:55:B9:D8:DA:6A:B7:59:8B:57:79:F7:1E:DA:74:41:B0:B0
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bb:8a:f9:51:91:06:3e:59:0c:03:a4:87:62:17:97:65:07:
1f:c1:6b:9b:ff:b2:80:01:3d:cb:77:78:42:55:a0:c8:6e:7c:
00:7f:ec:0c:33:01:f4:32:24:a9:42:86:ba:81:26:9c:b5:25:
60:03:10:0f:c6:01:0b:62:b8:6a:92:91:4a:b1:88:09:9a:85:
fa:89:4f:a6:ff:cb:e7:66:97:ea:ec:0a:a6:17:46:f4:17:42:
7e:e7:ee:f5:53:90:cf:e1:c1:80:f8:71:ee:bd:88:fd:38:d1:
0c:fb:1e:03:ec:a8:e1:a1:5b:7c:2c:0e:e3:07:f0:3b:71:29:
ee:8b:d0:fa:39:52:bc:ff:c4:fa:58:54:eb:af:36:ba:1e:f9:
a1:2e:8e:86:af:f9:5d:63:4a:a4:50:b5:49:b1:c6:0b:e8:59:
70:cf:47:75:e6:60:6b:17:7f:b3:0f:9f:f9:6d:d7:c4:fe:17:
a6:0f:72:48:a7:22:63:25:f6:0b:2a:66:c9:cd:2f:ba:db:10:
92:7f:22:2e:9f:24:9e:6c:36:97:1d:99:ab:a1:45:5a:b1:ba:
9b:30:6a:c4:41:e9:3b:44:03:75:31:b1:9e:90:bb:14:23:61:
a3:a4:9e:33:13:d6:c6:8d:8b:ba:2f:13:58:03:69:0d:dc:e5:
c4:20:b9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:25:40 2026 by rpki-client