Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
File: E-30vjE64cG-aYgeLkRH7yvwsZY.mft (raw, json)
Hash identifier: IBdvZsGv95gwaGzJjaEcCBNWEx+roLZUSEo2TrUDPdA=
Subject key identifier: 18:55:A2:04:30:FD:D7:D3:9E:B5:2E:A6:21:AC:45:46:69:DB:37:35
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 01A06F83A3BB5F95C03D941134B4D3014995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
Manifest number: 1A3A
Signing time: Sat 05 Sep 2026 03:01:33 +0000
Manifest this update: Sat 05 Sep 2026 03:01:33 +0000
Manifest next update: Sun 06 Sep 2026 03:01:33 +0000
Files and hashes: 1: E-30vjE64cG-aYgeLkRH7yvwsZY.crl (hash: FS1+cm6kByTxx1S0U99H8F8zu4/RsufIiEBN9R0QjX0=)
2: MxK4lS7Htpm_IH-kALADE2GeLuc.roa (hash: U74MFGGkriXB1g/dSBw5TFkgPOsV3rgpaQhg7Zx0jH8=)
3: ik6Wjgaqct3SJRlBNzDl9R2Qc5o.roa (hash: WLV2A1EfMAOyhSJNkWJ5jsFbrKEgL/UGX1+Lvgg6md8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:a3:bb:5f:95:c0:3d:94:11:34:b4:d3:01:49:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Sep 5 03:01:33 2026 GMT
Not After : Sep 6 03:01:33 2026 GMT
Subject: CN=1855a20430fdd7d39eb52ea621ac454669db3735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:00:da:92:82:78:21:3a:06:54:da:ec:32:
4e:ed:0d:9c:3b:ae:c6:39:e3:77:98:75:68:55:61:
21:27:ce:3f:d2:75:8f:d3:58:fc:c8:88:c2:7b:2a:
8a:25:b6:74:5c:e3:47:88:02:17:76:6d:63:d7:f0:
ea:8e:f0:7b:8f:be:f7:05:f8:7d:95:76:fe:3a:a4:
ef:32:c0:75:42:13:ee:5a:05:b2:8d:22:4b:1c:08:
bc:85:94:76:8b:27:ea:52:10:21:1c:8e:53:62:a1:
75:26:2c:9d:58:91:5f:df:e5:41:47:eb:65:ae:e5:
09:8c:2a:80:3a:77:bc:59:02:e1:d3:b2:04:96:ab:
32:29:bc:54:91:70:22:6f:17:27:fb:25:7f:07:bf:
71:99:8a:cd:59:d5:d1:df:7f:f1:10:53:03:57:fc:
aa:71:38:b9:a8:48:88:b3:34:41:7b:5c:f4:4a:b0:
2b:56:f4:db:ee:96:fc:a0:ea:a4:c6:d1:ae:e7:20:
fc:d1:95:e0:9b:01:3e:cb:8a:fd:71:ad:03:25:2d:
23:62:a3:53:b3:a8:0a:76:e5:98:a7:e7:e9:3e:22:
c3:a1:72:bd:4c:dc:79:5e:9b:86:9b:29:d0:e3:85:
da:9e:f2:39:b9:aa:7b:f8:4d:95:24:2a:a9:56:74:
2d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:55:A2:04:30:FD:D7:D3:9E:B5:2E:A6:21:AC:45:46:69:DB:37:35
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e5:b9:d0:63:ab:a5:0b:38:5e:1a:ce:f3:bd:ea:5f:1a:87:
a2:a8:b5:b9:42:1b:80:f6:21:be:d9:4f:f0:f0:64:52:82:33:
68:50:cb:17:fc:28:26:41:03:68:ab:f0:07:84:74:b4:37:04:
bc:6b:cf:b4:f2:54:9d:e4:d2:c9:1d:6a:67:af:29:2d:2c:9b:
49:2a:89:1f:e2:3b:11:27:42:bb:e2:a4:c8:6b:38:63:87:41:
fb:ae:22:f3:b0:c6:2d:df:6f:b0:d1:71:80:b3:5f:e7:e8:00:
e9:84:c2:b2:a3:17:2d:b1:26:4c:ba:35:5b:49:f6:ec:ae:80:
25:1a:69:e2:5e:c7:cd:15:a6:40:cf:07:7b:c2:19:11:59:52:
77:c3:ad:c1:bb:82:af:b6:b9:13:17:4a:e0:f1:04:f6:37:88:
8c:4d:13:09:f2:ac:ae:6b:49:3c:26:94:2b:48:06:0e:18:85:
9b:81:3b:84:39:30:30:75:c8:ee:42:0c:04:17:72:8e:01:82:
b1:ae:c0:a7:62:ae:ba:d9:ea:0e:e8:a6:5e:6a:70:ba:ab:2e:
83:56:f6:0e:bc:a9:50:de:b1:b1:28:de:a4:c0:fb:35:47:49:
d5:d5:c9:1b:a6:8a:56:23:b2:a9:36:a4:20:05:f5:13:17:29:
4a:a3:6c:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvg6O7X5XAPZQRNLTTAUmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWRmNGJlMzEzYWUxYzFiZTY5ODgxZTJlNDQ0N2VmMmJm
MGIxOTYwHhcNMjYwOTA1MDMwMTMzWhcNMjYwOTA2MDMwMTMzWjAzMTEwLwYDVQQD
EygxODU1YTIwNDMwZmRkN2QzOWViNTJlYTYyMWFjNDU0NjY5ZGIzNzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvUA2pKCeCE6BlTa7DJO7Q2cO67G
OeN3mHVoVWEhJ84/0nWP01j8yIjCeyqKJbZ0XONHiAIXdm1j1/DqjvB7j773Bfh9
lXb+OqTvMsB1QhPuWgWyjSJLHAi8hZR2iyfqUhAhHI5TYqF1JiydWJFf3+VBR+tl
ruUJjCqAOne8WQLh07IElqsyKbxUkXAibxcn+yV/B79xmYrNWdXR33/xEFMDV/yq
cTi5qEiIszRBe1z0SrArVvTb7pb8oOqkxtGu5yD80ZXgmwE+y4r9ca0DJS0jYqNT
s6gKduWYp+fpPiLDoXK9TNx5XpuGmynQ44XanvI5uap7+E2VJCqpVnQtcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhVogQw/dfTnrUupiGsRUZp2zc1MB8GA1UdIwQY
MBaAFBPt9L4xOuHBvmmIHi5ER+8r8LGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zZTZmOTYtMGNmOC00ZDY2LTg0YmEt
YjQxMzM1YjAwNTg3LzEvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8zZTZmOTYtMGNmOC00ZDY2LTg0YmEtYjQxMzM1YjAwNTg3
LzEvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOW50GOr
pQs4XhrO873qXxqHoqi1uUIbgPYhvtlP8PBkUoIzaFDLF/woJkEDaKvwB4R0tDcE
vGvPtPJUneTSyR1qZ68pLSybSSqJH+I7ESdCu+KkyGs4Y4dB+64i87DGLd9vsNFx
gLNf5+gA6YTCsqMXLbEmTLo1W0n27K6AJRpp4l7HzRWmQM8He8IZEVlSd8OtwbuC
r7a5ExdK4PEE9jeIjE0TCfKsrmtJPCaUK0gGDhiFm4E7hDkwMHXI7kIMBBdyjgGC
sa7Ap2KuutnqDuimXmpwuqsug1b2DrypUN6xsSjepMD7NUdJ1dXJG6aKViOyqTak
IAX1ExcpSqNshA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 10:13:12 2026 by rpki-client