Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
File: a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft (raw, json)
Hash identifier: w/13UuokrqXCvFKe3IAWaOX+2tWvXhZtXzR+O/d6FR8=
Subject key identifier: 84:59:82:6B:22:1A:68:98:8B:FF:EA:E4:E9:36:4E:74:02:70:79:21
Authority key identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
Certificate issuer: /CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Certificate serial: 01A089796CE6FB106D0C90989DD90DB7A251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
Manifest number: 02C5
Signing time: Thu 10 Sep 2026 04:00:31 +0000
Manifest this update: Thu 10 Sep 2026 04:00:31 +0000
Manifest next update: Fri 11 Sep 2026 04:00:31 +0000
Files and hashes: 1: T__G1Ca-eMsMLPhR2fqq6jZzabE.roa (hash: /YNdonFxgiuSJ7bSBLLw5KHpjMZ1mWh/QAHnXBlZOVY=)
2: a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl (hash: 7dt/45m4QmOmlL2OyXfsEODE0ZRZOJLiXWUI6nWPAzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:6c:e6:fb:10:6d:0c:90:98:9d:d9:0d:b7:a2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Validity
Not Before: Sep 10 04:00:31 2026 GMT
Not After : Sep 11 04:00:31 2026 GMT
Subject: CN=8459826b221a68988bffeae4e9364e7402707921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:4c:64:4a:42:82:c8:51:fe:38:6e:da:3d:
10:5e:4c:8e:b0:2f:98:65:0b:e2:29:67:eb:a8:68:
70:e6:cf:df:41:9c:e7:6b:11:38:1f:54:6a:63:73:
b9:fe:8e:a3:48:78:70:50:00:90:ba:bf:ce:36:24:
4c:9a:9d:c2:b7:6b:2c:8b:74:11:5d:01:79:9c:75:
d1:d1:2c:0e:d5:a7:6e:62:11:1e:69:f7:0e:e8:a5:
94:d6:e0:38:fc:38:86:94:ad:fe:e7:42:9d:bf:fd:
8a:45:be:ce:68:87:da:cd:86:74:f3:ce:ac:a7:52:
d4:3f:30:62:bc:db:a0:ea:a2:88:29:3d:5a:9f:0c:
9f:f5:3e:9d:02:56:62:bb:16:84:91:f7:9d:0b:56:
8d:c1:32:29:ef:a0:8e:49:e4:1d:0c:9d:a8:fe:51:
da:fa:8a:2a:b9:4e:f6:fe:a2:54:0b:e2:80:fb:22:
08:62:70:eb:65:bc:c9:32:bb:bd:46:d6:1e:26:aa:
1d:ed:20:53:d7:f9:0d:d6:5d:3e:6e:fc:17:0b:44:
f1:9d:6c:1c:c3:a1:69:11:08:55:e4:a3:fc:6f:a5:
36:21:e9:6f:5b:24:0f:43:13:af:fd:d1:6b:ce:58:
06:fe:f4:29:db:8d:b8:be:f8:3f:b7:e5:83:32:7b:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:59:82:6B:22:1A:68:98:8B:FF:EA:E4:E9:36:4E:74:02:70:79:21
X509v3 Authority Key Identifier:
keyid:6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:38:20:52:3f:db:d1:93:e0:4b:86:c6:c5:57:27:47:a5:8a:
b7:3f:61:01:c7:50:fd:3c:ae:46:d4:99:eb:bb:07:7c:da:37:
0b:96:8d:21:a9:13:8e:3d:0d:14:12:78:9e:ac:d1:e3:9f:99:
9e:87:32:fb:22:ce:84:63:81:31:ff:34:07:cf:83:69:61:35:
fb:1f:3a:8d:c7:3b:a8:cb:3a:ce:82:05:65:21:6d:57:bc:19:
9d:09:6b:57:3e:d4:18:4c:6f:32:f2:b0:a3:5d:4e:e3:e7:18:
70:d0:69:1e:dc:c4:d0:bb:59:b7:62:e3:d0:9e:66:58:16:42:
d5:6a:6b:a1:02:c2:0f:62:a4:20:59:b0:de:97:7d:d0:97:b1:
da:5b:6b:11:c1:09:5d:a3:51:94:d9:46:b6:04:9a:6a:a7:9c:
f9:5c:d1:99:d9:42:9f:e1:bc:e7:df:75:ab:a9:9e:9d:9a:91:
d3:5a:7e:66:b6:a7:2d:95:e2:ae:c3:01:c7:7e:11:77:41:b0:
2c:a7:0e:74:c8:fc:da:14:81:fe:67:16:3b:67:f0:3f:2d:cf:
f5:b1:fc:f7:22:8d:87:65:14:c3:c6:01:3d:d4:55:7f:2d:ca:
b7:d8:5d:39:71:6c:01:0a:a3:12:66:e2:63:9a:ae:be:b2:49:
a5:1a:22:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:45:45 2026 by rpki-client