Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File: a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier: 57di98Ut4Y1V142dLUhZCmkbWUnTWsHDfOL7qKRLm7c=
Subject key identifier: B0:C0:DA:2E:56:95:4F:85:E2:B5:59:2E:D5:4D:28:2F:AA:51:D4:A9
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial: 019CAB34AB28AE62F5B40FCAD1C6CE3882C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number: 12D5
Signing time: Sun 01 Mar 2026 21:01:21 +0000
Manifest this update: Sun 01 Mar 2026 21:01:21 +0000
Manifest next update: Mon 02 Mar 2026 21:01:21 +0000
Files and hashes: 1: T66u3sAZ1h5lcd7CohPfojjoGXM.roa (hash: b1dlk+UCa27l6BBCa3opEOMqOQC7JiJWknd1DaHG0Vo=)
2: Ud3In0OaskIaLWIkC7KZsdF241I.roa (hash: AB7KnYKNBO0Ndoa3Ocgqa4UpFDUV3mhvx0miDDfBz5E=)
3: WBUV1KvDkb2jOcRdkjFWIVt7ErY.roa (hash: ajrXPdqhe0OAtEgCrpBNnNMpZPGjD6DwlNl7HI0x0zY=)
4: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: aHiGsEaG/tUkhUHwfQuic63lBTwKMKKnrSB36THaVZM=)
5: kJEyi9t8ewQAOML32QKelXRnNQw.roa (hash: qisABknNXytALeoXTgeNFHWe1rQRJTNgqfs59Mw/Lek=)
6: n_fghfm4yvkyJN0aLgQKMYifpk8.roa (hash: s8M9V6kInMrZ8SN7cdYOAnlXWHjxa+Mtfe0ezUCITCc=)
7: zHv_4yLb29OZEPsryzQwrsubCmY.roa (hash: bf6GHsA4iW8nNCo3qaxOx39ntbWsQ60VlVEmI5fRZwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:ab:28:ae:62:f5:b4:0f:ca:d1:c6:ce:38:82:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
Validity
Not Before: Mar 1 21:01:21 2026 GMT
Not After : Mar 2 21:01:21 2026 GMT
Subject: CN=b0c0da2e56954f85e2b5592ed54d282faa51d4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:de:91:1e:60:03:ab:c2:db:61:91:ba:61:
f0:eb:06:f9:98:60:22:f7:cc:b1:54:cb:39:1c:cf:
d9:5d:58:2b:a7:22:d0:f2:bf:31:45:3f:30:ef:d1:
c7:79:f2:be:15:07:cb:d8:3d:7c:8a:56:79:f7:e9:
e1:f3:d1:92:c5:2b:37:35:06:9c:6e:bc:8c:3a:66:
f6:fa:30:fb:17:c5:d1:03:15:1b:c5:65:7b:a3:43:
07:28:bf:f0:c5:1f:88:0c:9a:19:c5:ba:48:61:1e:
b1:48:47:ab:b3:40:81:ae:f1:84:8c:f6:43:e0:c2:
a5:de:34:ce:8d:62:4f:8c:b5:4d:3f:c0:54:b5:72:
9f:50:55:5f:33:94:54:e7:9b:4a:71:c5:79:8a:b6:
e4:08:3e:3f:97:e7:e2:c9:26:b6:91:d8:fc:fa:83:
53:88:08:c6:ed:a1:df:b4:3f:83:75:58:92:b0:eb:
10:9b:b2:27:4a:9e:ae:0c:f0:91:64:d1:c6:4e:c1:
4e:29:54:a3:71:f6:27:d3:c3:65:0d:06:c7:e0:10:
75:a3:b5:b1:ac:81:38:bb:bf:bb:ab:d4:c1:c6:35:
8e:5f:fd:98:fa:6d:2f:c9:0c:88:ee:0f:d7:dc:06:
3a:c0:bc:f5:1c:86:80:46:44:1d:36:ae:a7:ce:4e:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C0:DA:2E:56:95:4F:85:E2:B5:59:2E:D5:4D:28:2F:AA:51:D4:A9
X509v3 Authority Key Identifier:
keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:81:f9:d1:b5:aa:7b:e3:26:f9:17:6e:67:08:53:fc:48:ed:
a3:09:ca:c7:38:48:38:31:71:14:45:3e:23:99:f9:51:5a:62:
e7:b6:1a:47:09:4d:0f:6f:70:f2:8b:ff:88:f8:d0:15:6b:63:
01:83:2b:2e:3d:59:43:91:42:d8:c7:c6:91:a8:57:ab:34:5e:
13:8d:64:05:b4:38:2b:56:68:13:7a:2a:ff:e6:69:5f:f6:d4:
fd:03:21:f0:c2:f2:d8:8b:6d:29:59:0b:38:6f:c0:0b:18:ce:
16:86:e5:c6:53:66:f8:b7:7c:84:7f:cd:2d:e5:4b:f4:05:4a:
08:bb:d0:9e:94:4f:de:66:b4:10:d0:06:ca:5c:f0:0a:76:72:
d4:16:88:a0:ba:dd:24:94:30:6d:8d:3a:0c:98:e4:02:12:59:
66:67:c8:ae:11:82:25:34:5a:97:47:5b:66:5e:29:de:2f:ab:
d2:5c:61:93:af:7d:82:d5:97:70:0b:b5:15:cc:b4:9c:02:49:
02:ba:7d:92:a3:60:d6:15:04:23:ee:39:90:ce:ed:aa:85:2c:
27:7a:fa:0c:c2:5a:ea:ea:c6:0f:6b:9d:07:6b:5f:83:1e:ec:
a1:41:bc:e8:06:c6:d9:c9:d0:07:91:0d:55:2d:8d:72:e0:23:
4b:6f:11:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:18 2026 by rpki-client