Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File: a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier: 7fyeJ5ueEIQ2Im+zPJ0AnRyz2aeFdekZxAixXW4ZHM0=
Subject key identifier: B3:EA:64:4B:0B:A0:6C:86:58:7F:06:56:74:0D:99:9D:8C:23:7A:23
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial: 019CAF117365FA2D815A5C0AF19FF1597347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number: 12D7
Signing time: Mon 02 Mar 2026 15:01:22 +0000
Manifest this update: Mon 02 Mar 2026 15:01:22 +0000
Manifest next update: Tue 03 Mar 2026 15:01:22 +0000
Files and hashes: 1: T66u3sAZ1h5lcd7CohPfojjoGXM.roa (hash: b1dlk+UCa27l6BBCa3opEOMqOQC7JiJWknd1DaHG0Vo=)
2: Ud3In0OaskIaLWIkC7KZsdF241I.roa (hash: AB7KnYKNBO0Ndoa3Ocgqa4UpFDUV3mhvx0miDDfBz5E=)
3: WBUV1KvDkb2jOcRdkjFWIVt7ErY.roa (hash: ajrXPdqhe0OAtEgCrpBNnNMpZPGjD6DwlNl7HI0x0zY=)
4: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: m2VnP97BfsXNIVCOinMApSXaJTt2woRaHUulOiZaiSM=)
5: kJEyi9t8ewQAOML32QKelXRnNQw.roa (hash: qisABknNXytALeoXTgeNFHWe1rQRJTNgqfs59Mw/Lek=)
6: n_fghfm4yvkyJN0aLgQKMYifpk8.roa (hash: s8M9V6kInMrZ8SN7cdYOAnlXWHjxa+Mtfe0ezUCITCc=)
7: zHv_4yLb29OZEPsryzQwrsubCmY.roa (hash: bf6GHsA4iW8nNCo3qaxOx39ntbWsQ60VlVEmI5fRZwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:73:65:fa:2d:81:5a:5c:0a:f1:9f:f1:59:73:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
Validity
Not Before: Mar 2 15:01:22 2026 GMT
Not After : Mar 3 15:01:22 2026 GMT
Subject: CN=b3ea644b0ba06c86587f0656740d999d8c237a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:69:67:9d:eb:7b:a5:9e:c6:0e:44:7a:0c:
3c:45:47:0e:06:0d:de:6b:ab:2c:76:c3:81:c8:7e:
eb:a9:39:49:7b:e2:10:e8:ee:41:57:7d:3b:5d:0d:
09:50:3e:00:40:c1:a4:bb:5b:4d:58:c2:44:94:cf:
28:de:f9:f8:e9:5f:0c:a1:02:af:7a:00:8c:b1:98:
38:59:e6:e3:e3:aa:88:33:30:06:3f:36:3d:e1:7d:
62:2c:ce:21:f6:20:c7:2c:63:79:c8:cb:68:f6:27:
24:15:db:3f:93:2a:f1:3d:79:2d:91:4c:55:25:61:
24:57:2b:99:29:d8:b0:99:e1:6f:d6:7c:ee:0d:84:
f9:5c:d6:e0:88:b6:29:5f:0a:94:60:0b:9d:32:46:
31:17:2d:a0:2f:65:75:c1:bc:5d:21:80:dd:4b:84:
57:e4:b8:55:ed:fe:1e:b8:3d:8d:4d:de:38:e1:09:
14:3c:a6:b9:68:26:c5:c4:83:87:75:90:cb:1f:9d:
62:20:15:6d:1c:b3:d1:fd:b9:db:68:d4:aa:66:d3:
d4:c5:10:c2:5c:a9:22:20:2c:55:56:a7:76:f8:c8:
63:7b:3c:cf:c9:cd:36:da:4a:e3:ba:b9:3a:de:88:
68:b8:3b:2f:72:6b:94:77:8d:82:6b:7d:f8:0a:ec:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EA:64:4B:0B:A0:6C:86:58:7F:06:56:74:0D:99:9D:8C:23:7A:23
X509v3 Authority Key Identifier:
keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:07:6c:8b:f8:94:3d:5d:74:92:34:20:17:11:d4:1a:74:5d:
00:91:74:c1:1e:f2:5c:1c:25:02:fd:37:d5:11:00:25:a5:3f:
bb:75:5f:63:53:57:45:aa:07:87:50:64:b8:b3:3d:58:c9:15:
d7:dd:23:fc:f4:c5:53:b3:9f:99:61:18:1e:5a:e2:99:c7:e0:
0d:2c:02:1f:88:b7:85:43:a8:03:93:f3:8c:ef:f1:15:a4:5f:
06:6e:cb:a6:b6:9d:9e:4f:d5:3b:82:53:1d:9b:e7:b8:8e:83:
69:98:5e:a0:4d:af:3f:13:57:14:40:24:73:42:5a:60:63:e7:
2f:18:fc:1f:97:10:3d:c6:11:5d:46:1b:23:e0:17:8f:14:be:
4d:92:20:2f:2d:a3:eb:9c:12:4b:8f:77:e4:03:53:58:fc:d6:
a9:4f:a6:ee:aa:0a:07:bd:b2:0d:cc:3c:ac:e8:5c:af:da:f6:
4d:cf:8d:8e:8b:b3:93:de:fd:44:01:8f:44:f9:32:59:47:82:
4a:f0:6d:8d:dc:be:19:0d:fb:2f:c4:a5:89:6b:64:4a:60:c8:
12:1c:60:21:a4:1c:e2:fc:b4:ba:17:c1:16:e2:3d:af:5e:47:
34:4f:b9:8b:a4:af:33:f3:af:1f:7f:1c:1f:7e:09:c5:17:dd:
f3:55:f2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:17 2026 by rpki-client