Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File: _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier: OKnHLrvJEzNn0hdouYANFrmS2c4EpmJvo8JXe85XsOE=
Subject key identifier: 17:A4:3B:DB:21:97:F7:6E:AC:C1:DC:4B:13:AA:A3:D1:35:D0:A9:AA
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer: /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial: 01A0BD9DE88C16AD7A2FA2EED1E070C74E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number: 16DD
Signing time: Sun 20 Sep 2026 07:00:37 +0000
Manifest this update: Sun 20 Sep 2026 07:00:37 +0000
Manifest next update: Mon 21 Sep 2026 07:00:37 +0000
Files and hashes: 1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: lWUEUEUuuoD880ThHabv++0r36oSUbZmOBhU2sMs3Ag=)
2: dH15cbq5Y6Zy8iqzGzlnY9ZG-s8.asa (hash: VBUuhHt9rKOYb0Tn/kVePRp5RzDldrdaMvqER4megYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9d:e8:8c:16:ad:7a:2f:a2:ee:d1:e0:70:c7:4e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
Validity
Not Before: Sep 20 07:00:37 2026 GMT
Not After : Sep 21 07:00:37 2026 GMT
Subject: CN=17a43bdb2197f76eacc1dc4b13aaa3d135d0a9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:7e:03:37:53:2d:45:26:d3:b9:5c:dc:ce:
71:0c:c2:06:09:0c:04:c6:2f:a3:12:41:84:c1:f1:
ba:fc:ce:ca:ea:b5:18:11:3f:9d:f5:6c:81:de:6b:
20:83:5b:ad:07:bd:12:2c:7b:fb:44:4e:84:c3:2e:
7c:0c:da:96:ed:0f:87:0a:c3:5f:0e:cd:97:c5:d9:
70:48:c9:82:cf:9d:dc:31:6b:20:bc:14:e7:eb:4a:
46:ef:cd:e1:68:f9:0e:1d:b2:9e:f2:db:a5:2b:a5:
37:67:48:9c:3f:84:0d:a8:f5:d1:46:36:0a:f8:d4:
b0:47:45:8a:4d:5a:3f:01:c6:da:72:66:27:fa:00:
88:f4:f0:30:46:3b:43:ed:0a:ca:5e:fe:3d:ad:5f:
37:7e:2c:bc:9a:fd:3e:2a:c9:91:0c:7f:75:c1:01:
db:18:a8:94:84:0a:c0:71:5f:b9:32:7c:8f:7e:e7:
26:49:8e:a5:7d:9a:af:98:52:09:3e:af:64:cd:25:
e4:fa:50:02:57:6e:4c:ca:7a:d2:01:d6:62:da:f9:
03:cf:9c:22:5a:6c:17:f5:ca:93:40:01:76:7b:38:
94:e2:9c:2b:5e:a6:ea:8e:fb:53:96:63:43:e1:96:
02:0c:56:c8:a0:a3:dc:d8:a1:fc:e6:10:b3:3e:5f:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A4:3B:DB:21:97:F7:6E:AC:C1:DC:4B:13:AA:A3:D1:35:D0:A9:AA
X509v3 Authority Key Identifier:
keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:56:eb:aa:70:3f:1a:b6:be:46:2c:12:0f:d6:1f:39:3a:a8:
0f:cc:2b:a2:17:f5:d6:cf:04:19:23:41:6d:ec:4b:80:b1:dd:
a9:4f:a7:d9:8c:57:a4:a7:9a:58:80:43:6e:b2:64:4f:7b:44:
78:af:57:59:2e:ea:04:cd:d4:d8:e8:be:b0:42:fb:b4:1b:5f:
ee:50:7c:58:99:3a:e3:58:a4:2f:4e:d8:ae:48:e4:9b:15:d0:
a0:c7:e0:4b:d7:65:f8:1e:be:43:33:a1:6a:31:4d:77:ca:0b:
65:ff:17:89:fa:e5:8e:37:89:9c:36:50:d8:d6:84:3f:f9:4a:
d5:8f:c8:33:9b:32:52:9d:86:46:92:9f:02:6d:97:b9:5b:e0:
ff:4f:69:3b:ed:0d:0f:a4:3e:f0:a4:86:a0:49:f4:83:6c:a0:
d7:04:ce:88:99:fb:22:74:08:de:3e:0a:4e:5f:fc:15:e9:c6:
b6:da:1b:64:bb:76:91:9d:f4:55:a0:e5:f3:ef:7d:f6:a3:a7:
72:29:5d:91:f8:72:7a:91:3d:da:b7:31:37:b8:d1:a0:a3:68:
0a:31:72:20:f3:7d:8b:77:4f:cc:45:db:f3:73:61:c6:b5:12:
67:fd:dd:2e:8c:d1:f1:0a:ba:08:89:7e:c0:0a:a9:37:d5:31:
41:24:0e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:53:27 2026 by rpki-client