Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
File: a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft (raw, json)
Hash identifier: o9CdFsdAOQlkMRTDQmUcihHOnl2RCQugHCNpSa43zuU=
Subject key identifier: CD:95:F8:96:54:4A:AF:48:26:82:10:4E:BE:DE:E1:C6:CF:EA:D1:38
Authority key identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
Certificate issuer: /CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Certificate serial: 019D9C2CEB951526193F91EC667F65E81AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
Manifest number: 0141
Signing time: Fri 17 Apr 2026 16:01:22 +0000
Manifest this update: Fri 17 Apr 2026 16:01:22 +0000
Manifest next update: Sat 18 Apr 2026 16:01:22 +0000
Files and hashes: 1: T__G1Ca-eMsMLPhR2fqq6jZzabE.roa (hash: /YNdonFxgiuSJ7bSBLLw5KHpjMZ1mWh/QAHnXBlZOVY=)
2: a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl (hash: CTzm2i4y6kay0YF2Y8/AlBF+K3hKoxs2aWuK4HTuQBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:eb:95:15:26:19:3f:91:ec:66:7f:65:e8:1a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Validity
Not Before: Apr 17 16:01:22 2026 GMT
Not After : Apr 18 16:01:22 2026 GMT
Subject: CN=cd95f896544aaf482682104ebedee1c6cfead138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:9f:a7:ba:05:b2:75:8a:22:cb:a1:ff:99:
3d:d2:7a:2a:5a:92:ef:91:a2:a0:f0:cd:2b:16:5f:
3c:92:97:8f:e1:9c:55:23:8c:c4:64:3f:dc:8a:4e:
6c:d2:e8:28:c4:fa:73:04:2d:0b:e1:39:79:b5:b0:
79:9d:54:28:83:03:ee:e0:9a:db:12:d6:25:29:ba:
92:68:d9:a1:09:c4:33:b1:c5:51:5a:6a:56:be:f6:
23:60:ed:60:b1:a0:63:b2:fc:95:63:ce:cc:53:25:
2b:cf:79:4f:0f:15:97:ef:33:90:b8:e4:c5:2c:f4:
81:80:e7:7b:1e:ba:1a:c9:e6:46:6d:50:46:b6:87:
d7:0f:c8:98:0c:94:fb:e3:9e:2b:c2:a7:20:24:9a:
6c:fd:40:60:8f:94:a1:50:3f:db:3f:45:87:29:05:
49:59:02:71:b5:34:e6:33:1c:44:c8:4d:45:92:f3:
34:f1:a6:e4:17:82:2d:12:0b:15:3b:1c:97:f8:ca:
f2:32:55:b6:93:05:fd:24:00:36:5d:8f:c0:c9:ec:
18:37:09:7b:7c:cd:f3:fa:d8:82:ca:ff:e8:1b:3f:
7b:79:c3:93:3d:2d:6f:44:e5:94:3e:bb:d5:ec:e5:
36:7e:21:df:4d:75:25:bd:34:d0:da:86:d2:42:d9:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:95:F8:96:54:4A:AF:48:26:82:10:4E:BE:DE:E1:C6:CF:EA:D1:38
X509v3 Authority Key Identifier:
keyid:6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:69:e3:26:a9:1f:c7:5e:43:1f:7b:41:2c:da:09:99:78:e6:
02:96:25:43:43:b5:5e:6c:35:62:9f:2b:8d:6f:2e:75:8a:2a:
03:10:b3:a5:91:84:58:f5:2a:15:7e:5c:3d:55:e9:28:8f:79:
26:c1:80:59:25:d8:fa:26:36:5a:14:d9:4f:5e:f5:e1:f4:7a:
54:34:f8:f0:c9:73:2d:15:c7:8b:b3:0a:13:56:e8:57:6d:a9:
e0:6b:58:1f:b4:59:e0:75:a6:1c:61:37:ae:a1:e3:68:2d:1d:
df:80:35:39:30:40:9e:20:19:4b:9e:71:70:4f:ea:e2:cb:3f:
ad:0c:08:04:71:e8:9c:b5:9d:e5:9b:99:41:96:87:26:c1:2f:
95:d9:43:ed:7d:95:86:fe:4b:8b:4f:1c:1f:08:15:55:51:5c:
51:9e:aa:6d:3f:cb:8b:a3:5c:b6:78:49:3e:49:d1:bc:52:76:
f7:b1:e3:6b:9a:0e:39:e9:a9:48:6b:b4:ae:ca:ca:a5:03:5a:
6f:f4:d0:ae:75:fb:cf:51:1d:12:94:d7:cf:ef:85:1e:9b:a4:
41:c6:76:58:06:e4:1d:71:df:50:83:6a:5b:77:30:f4:c3:6f:
59:9b:46:bd:74:9d:32:d2:05:46:c8:c0:ef:9b:d3:1e:e8:8e:
14:0d:02:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:00:42 2026 by rpki-client