Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
File: a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft (raw, json)
Hash identifier: 0SOPITo41q53xDnOE5Nqgaf31UK77hH+zllM6xRH0zI=
Subject key identifier: E6:19:0B:84:C1:29:FF:9E:5F:97:CF:07:10:B2:83:BC:66:2B:F0:92
Authority key identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
Certificate issuer: /CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Certificate serial: 019DCC73F786A5F75A7C91F2D405DC778A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
Manifest number: 015A
Signing time: Mon 27 Apr 2026 01:00:45 +0000
Manifest this update: Mon 27 Apr 2026 01:00:45 +0000
Manifest next update: Tue 28 Apr 2026 01:00:45 +0000
Files and hashes: 1: T__G1Ca-eMsMLPhR2fqq6jZzabE.roa (hash: /YNdonFxgiuSJ7bSBLLw5KHpjMZ1mWh/QAHnXBlZOVY=)
2: a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl (hash: ZLdB/w7AoNIQcZoh711fDxKXcFhywAPqO8sxyioTDJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:73:f7:86:a5:f7:5a:7c:91:f2:d4:05:dc:77:8a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Validity
Not Before: Apr 27 01:00:45 2026 GMT
Not After : Apr 28 01:00:45 2026 GMT
Subject: CN=e6190b84c129ff9e5f97cf0710b283bc662bf092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:0a:3a:69:55:6c:77:cc:77:19:b8:0d:bc:
39:71:a3:e8:c1:fb:aa:0b:5f:b5:31:9e:6e:0f:b7:
6a:44:75:3d:e7:3d:bd:82:a3:b5:df:1f:91:ea:1d:
44:23:04:e0:33:b3:a8:6d:17:88:16:9d:05:2b:b3:
77:f6:6d:d7:12:04:dd:1d:de:59:c0:29:9f:c7:c6:
dc:e6:f6:50:fd:45:63:71:13:a4:07:6a:04:6c:4c:
a5:05:ca:bb:eb:c2:e9:51:27:9c:da:49:89:db:f4:
72:d3:02:fe:c9:f5:26:36:10:e0:e4:29:f7:e3:5b:
fa:34:44:e8:e1:dc:e4:97:ea:71:eb:e3:82:2c:04:
d2:36:af:c1:9c:80:d1:7d:00:6d:41:de:40:3d:a5:
f7:64:8e:1f:00:0c:5a:95:13:c8:b4:1f:e8:2d:39:
76:8f:6c:d2:ab:ed:6a:e1:ec:f7:4d:d9:87:9a:d3:
ae:9e:2d:52:ca:c6:4c:4e:64:7f:8b:52:51:ab:20:
52:d3:c2:98:4a:58:00:51:e2:4f:38:52:04:42:7e:
2d:2b:62:4a:28:ed:cf:b1:46:0c:07:4c:5c:91:5c:
13:8a:9c:f4:74:df:e0:67:7b:38:3d:44:dc:31:35:
91:5c:f3:c5:d3:53:83:53:fa:e1:99:61:0b:a6:50:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:19:0B:84:C1:29:FF:9E:5F:97:CF:07:10:B2:83:BC:66:2B:F0:92
X509v3 Authority Key Identifier:
keyid:6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:be:81:4c:83:79:59:c5:21:5d:9e:19:29:f2:0a:38:f1:a9:
da:e0:89:87:86:ff:22:56:f4:1b:a5:a6:6c:cf:41:c0:e7:f3:
34:cb:3e:33:5e:22:fb:47:59:4d:0f:f2:1d:9f:7c:a2:c4:8e:
46:03:d4:9f:cb:68:ee:68:96:d2:e0:11:a7:2e:85:ac:33:87:
23:32:1e:df:cf:23:98:b4:de:03:a8:1e:f2:bd:d6:32:84:2f:
54:3d:17:33:ea:51:1f:ce:9a:ad:35:7b:32:66:52:fb:c8:57:
e2:07:f6:e5:22:31:e3:5f:af:8d:de:e0:ac:0d:09:d2:b5:d9:
e4:5a:f8:a8:e0:a8:99:a3:78:e1:5f:cc:39:49:d5:e8:c9:1a:
51:f9:a1:1e:74:61:9b:8a:72:26:8a:c0:ba:b0:d5:1f:44:c8:
b2:b8:4e:b6:6a:9e:f2:8f:f0:7d:07:44:7a:1c:5c:3c:38:4f:
65:ee:55:51:97:f1:f0:40:e4:09:a3:74:5a:f6:43:24:bc:ab:
f4:d4:ac:ff:57:c2:da:35:ca:b2:4f:4e:67:d2:fe:0b:9a:16:
ac:3d:b2:cc:1b:54:91:a5:cf:f7:f3:30:93:34:21:18:9a:3c:
71:d6:35:74:1b:8f:5c:3d:fe:60:88:d7:55:23:64:2a:11:29:
0c:b6:8b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:15:19 2026 by rpki-client