Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
File: a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft (raw, json)
Hash identifier: DlkA0irM6r21v6BUZzS+5tUrT/wnCsas4acCpZ6cgLs=
Subject key identifier: 2B:55:0E:75:0F:E1:CB:0C:E2:91:35:1A:9E:24:47:AB:9D:8E:4D:63
Authority key identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
Certificate issuer: /CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Certificate serial: 019CE4B5E87BB2A9BB70A7441CEEB3690394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
Manifest number: E2
Signing time: Fri 13 Mar 2026 01:00:52 +0000
Manifest this update: Fri 13 Mar 2026 01:00:52 +0000
Manifest next update: Sat 14 Mar 2026 01:00:52 +0000
Files and hashes: 1: T__G1Ca-eMsMLPhR2fqq6jZzabE.roa (hash: /YNdonFxgiuSJ7bSBLLw5KHpjMZ1mWh/QAHnXBlZOVY=)
2: a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl (hash: Q4nCwnifLDUye5GzauQK1O03FZxktnC7ZTgwSpqHe6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:e8:7b:b2:a9:bb:70:a7:44:1c:ee:b3:69:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Validity
Not Before: Mar 13 01:00:52 2026 GMT
Not After : Mar 14 01:00:52 2026 GMT
Subject: CN=2b550e750fe1cb0ce291351a9e2447ab9d8e4d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:42:e0:d3:0f:2f:b7:b8:1d:3f:9c:4f:cc:73:
ea:a9:25:75:ac:c8:ec:e9:99:bf:e0:11:7e:d8:88:
06:55:80:ae:76:c3:4d:f2:f3:97:65:21:9d:3b:ba:
03:25:19:17:5b:3d:d4:89:bd:71:72:b9:18:8f:c0:
01:8f:ef:2e:79:97:0c:5b:26:f4:43:52:09:07:40:
de:4c:c9:82:e9:00:f1:78:41:6b:20:4b:07:c2:0c:
95:d3:89:ff:4c:f2:4e:92:57:93:ef:86:44:b3:3e:
93:85:97:22:65:10:52:93:08:eb:ee:e6:17:7b:1a:
05:2e:c4:6f:0c:05:67:28:52:02:3d:fb:6f:bf:c7:
30:26:bb:a4:f5:cd:17:8e:27:2e:a1:dc:c2:41:87:
9c:95:75:0c:93:3e:cc:b8:de:26:f5:8d:07:5a:8b:
02:d7:1e:7e:16:10:a6:74:7a:0b:ff:a8:c7:2c:63:
d7:f4:7d:cc:ad:19:de:45:61:52:e7:fb:27:2e:2c:
67:92:1e:87:69:be:81:b6:e5:a3:52:21:15:69:fe:
59:8d:95:c5:15:9e:f3:be:19:2b:6a:dd:cb:dd:e4:
f0:92:b2:6c:7e:61:9d:a9:8c:a6:ec:22:07:7e:f2:
31:a3:cb:60:cf:b4:72:0f:c8:47:3f:da:94:95:4b:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:55:0E:75:0F:E1:CB:0C:E2:91:35:1A:9E:24:47:AB:9D:8E:4D:63
X509v3 Authority Key Identifier:
keyid:6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:78:d2:f0:cd:7c:bf:50:69:88:71:e0:1d:9d:6e:b9:4c:35:
eb:b4:43:af:ef:a3:19:7a:08:9b:22:3d:56:c1:10:ca:c5:3c:
7c:ed:fe:07:b5:62:c6:15:59:65:6e:da:94:e6:aa:a1:c3:38:
5a:74:28:ca:df:e1:c9:ee:ab:10:5c:23:71:35:3e:0c:b9:ea:
12:b1:ba:90:2b:f4:7a:bd:0d:3c:37:c6:33:61:3c:2d:5a:a6:
81:74:d3:6b:93:a5:af:a7:92:86:bf:11:b1:ad:eb:bb:3f:0c:
68:b5:36:ed:66:c4:87:ee:7f:99:dd:8e:ed:b7:8a:4d:e1:b9:
6f:bb:9d:9b:f6:62:b5:ad:50:c7:e5:ac:e8:d2:e7:27:ac:8f:
d9:97:07:76:1a:46:9e:d5:98:09:9d:69:cd:a1:b1:9f:60:fe:
81:d9:36:9f:8a:1c:d0:60:f1:af:7f:17:44:39:c4:1d:a1:66:
bc:5e:f1:e8:03:28:c8:38:e2:48:5f:d0:ec:ed:a3:38:e9:4d:
ca:5f:52:65:7e:93:73:78:8f:7c:09:88:ec:71:e4:d1:c3:42:
18:e4:10:ea:ed:b9:bf:72:86:63:c4:49:d0:83:f0:52:af:26:
96:42:9b:f2:72:4c:ad:b6:47:f7:a9:b9:ed:68:6a:3d:46:95:
e5:4e:ac:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:23:46 2026 by rpki-client