Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
File: h30YEASPQ3IFBuTBgg9v4I_3ym4.mft (raw, json)
Hash identifier: RvCQjzVmTTxjHgFE0wJw7NMj0fWGm2/KzFrfA9RQ/C0=
Subject key identifier: 7E:A1:05:DA:1C:A4:B9:04:06:F6:9F:44:D8:B9:67:27:81:F4:7B:A6
Authority key identifier: 87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
Certificate issuer: /CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Certificate serial: 019D382DCFB688A24B8EB9D78CE1E6A443D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
Manifest number: 0E29
Signing time: Sun 29 Mar 2026 06:00:19 +0000
Manifest this update: Sun 29 Mar 2026 06:00:19 +0000
Manifest next update: Mon 30 Mar 2026 06:00:19 +0000
Files and hashes: 1: dMfmkGCssv7XqTWroQRv-l8a5ns.roa (hash: hm9ZxaNW+e5ilEfF4gv37M+kUWsrW8nDblCItA5yuBg=)
2: h30YEASPQ3IFBuTBgg9v4I_3ym4.crl (hash: KQ0OKLbtNRA9WG2fJsvBaohurNmOSusuY3E3vxufyUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:cf:b6:88:a2:4b:8e:b9:d7:8c:e1:e6:a4:43:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Validity
Not Before: Mar 29 06:00:19 2026 GMT
Not After : Mar 30 06:00:19 2026 GMT
Subject: CN=7ea105da1ca4b90406f69f44d8b9672781f47ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bc:74:d8:d6:01:32:b2:8f:f5:f9:2f:83:22:
ba:1d:e0:b6:ba:85:69:42:01:ca:b0:f4:08:8c:59:
00:61:17:82:cf:a3:ec:e3:d9:24:5c:d4:85:dd:93:
e7:15:d8:c0:3c:41:fb:3e:a2:73:af:b2:fb:b2:fc:
8c:94:18:f2:fe:46:5c:08:e0:d0:e3:a3:bb:81:2a:
f2:65:d5:c1:26:13:3f:88:d4:d9:e4:81:bc:1e:7f:
90:ec:f4:70:fd:bc:72:29:97:f6:af:e1:c7:1d:54:
d0:59:c0:70:03:0d:55:5a:19:22:eb:e9:86:96:07:
25:4d:34:3a:b9:93:97:c7:a1:e0:c8:37:f7:55:76:
08:48:81:3d:d2:6c:1d:76:18:8e:34:7b:bf:33:f5:
fa:24:1c:97:fa:32:21:3a:6d:a8:cc:45:95:7c:6f:
7d:db:d9:ff:c0:b3:13:6c:6b:df:c7:a6:f4:63:ad:
ff:fc:5a:14:ed:8e:77:df:3a:ff:5b:06:a1:5f:c5:
99:d0:22:b2:65:4c:36:34:d8:c6:86:3b:66:c7:2b:
66:28:de:f3:f1:ab:35:2b:02:5f:0f:4c:bd:0f:b5:
d2:35:30:9c:8a:72:6f:2c:9b:82:47:e9:8e:46:be:
cc:29:55:8c:e0:0a:fb:fc:60:21:97:cb:cf:d6:a7:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A1:05:DA:1C:A4:B9:04:06:F6:9F:44:D8:B9:67:27:81:F4:7B:A6
X509v3 Authority Key Identifier:
keyid:87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3a:af:99:78:48:2d:54:e4:73:ae:0d:66:c7:ca:84:a6:49:
7e:02:f1:6b:40:29:e3:13:0f:00:57:09:93:3c:6c:28:d7:57:
6c:30:ad:66:f2:e5:ec:95:7a:45:7f:05:02:74:38:59:2b:59:
c4:ca:08:70:8c:cd:29:2a:f7:92:dd:e3:27:5a:56:8e:20:4d:
9d:af:b9:71:03:e5:97:a9:3d:d7:44:83:04:06:45:bb:da:d9:
7b:55:f4:5d:79:47:d5:0b:d4:c2:ca:3b:6b:83:0e:7b:d6:22:
6d:1e:14:77:d6:20:bb:31:7f:c6:21:7f:19:3e:d8:b9:b2:49:
f4:83:b4:d3:ef:c6:43:86:48:aa:f4:bc:3a:b6:60:af:80:d5:
a8:73:35:3a:15:1e:4b:b1:fd:ab:a3:06:80:0c:8a:14:79:e2:
47:9f:1f:09:79:a3:fb:06:52:bc:ef:74:85:6e:60:47:eb:e4:
16:21:1f:1e:55:38:60:61:29:1f:51:f3:50:9a:4b:d4:0d:17:
87:7b:9b:3a:fa:47:c6:e0:6e:d7:54:09:45:1c:9f:f4:ec:72:
19:c9:a1:ab:28:d2:c7:e0:04:91:6c:27:e9:67:68:be:67:a9:
37:f5:dd:22:b1:e9:2b:cd:2b:41:bd:d6:14:92:cc:0f:5a:b6:
36:bb:f4:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lc+2iKJLjrnXjOHmpEPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3N2QxODEwMDQ4ZjQzNzIwNTA2ZTRjMTgyMGY2ZmUwOGZm
N2NhNmUwHhcNMjYwMzI5MDYwMDE5WhcNMjYwMzMwMDYwMDE5WjAzMTEwLwYDVQQD
Eyg3ZWExMDVkYTFjYTRiOTA0MDZmNjlmNDRkOGI5NjcyNzgxZjQ3YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbx02NYBMrKP9fkvgyK6HeC2uoVp
QgHKsPQIjFkAYReCz6Ps49kkXNSF3ZPnFdjAPEH7PqJzr7L7svyMlBjy/kZcCODQ
46O7gSryZdXBJhM/iNTZ5IG8Hn+Q7PRw/bxyKZf2r+HHHVTQWcBwAw1VWhki6+mG
lgclTTQ6uZOXx6HgyDf3VXYISIE90mwddhiONHu/M/X6JByX+jIhOm2ozEWVfG99
29n/wLMTbGvfx6b0Y63//FoU7Y533zr/WwahX8WZ0CKyZUw2NNjGhjtmxytmKN7z
8as1KwJfD0y9D7XSNTCcinJvLJuCR+mORr7MKVWM4Ar7/GAhl8vP1qdWkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6hBdocpLkEBvafRNi5ZyeB9HumMB8GA1UdIwQY
MBaAFId9GBAEj0NyBQbkwYIPb+CP98puMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kMzM3N2EtOGQzOC00MjM1LWFhNzMt
N2U4OWI3MjAxOTBkLzEvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9kMzM3N2EtOGQzOC00MjM1LWFhNzMtN2U4OWI3MjAxOTBk
LzEvaDMwWUVBU1BRM0lGQnVUQmdnOXY0SV8zeW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzqvmXhI
LVTkc64NZsfKhKZJfgLxa0Ap4xMPAFcJkzxsKNdXbDCtZvLl7JV6RX8FAnQ4WStZ
xMoIcIzNKSr3kt3jJ1pWjiBNna+5cQPll6k910SDBAZFu9rZe1X0XXlH1QvUwso7
a4MOe9YibR4Ud9YguzF/xiF/GT7YubJJ9IO00+/GQ4ZIqvS8OrZgr4DVqHM1OhUe
S7H9q6MGgAyKFHniR58fCXmj+wZSvO90hW5gR+vkFiEfHlU4YGEpH1HzUJpL1A0X
h3ubOvpHxuBu11QJRRyf9OxyGcmhqyjSx+AEkWwn6WdovmepN/XdIrHpK80rQb3W
FJLMD1q2Nrv0fA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:45 2026 by rpki-client