
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
File: a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft (raw, json)
Hash identifier: U1FCk+J+valCAnbf6uzmSkzTVIZOi8lnLwiz4rMHPiA=
Subject key identifier: A9:4C:DC:C2:2A:2D:A7:14:EA:59:92:52:4F:B4:9C:57:59:C1:20:A1
Authority key identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
Certificate issuer: /CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Certificate serial: 019EC3A4D943D3CC7BAB24535D0AEB4AFEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
Manifest number: 01DA
Signing time: Sun 14 Jun 2026 01:00:20 +0000
Manifest this update: Sun 14 Jun 2026 01:00:20 +0000
Manifest next update: Mon 15 Jun 2026 01:00:20 +0000
Files and hashes: 1: T__G1Ca-eMsMLPhR2fqq6jZzabE.roa (hash: /YNdonFxgiuSJ7bSBLLw5KHpjMZ1mWh/QAHnXBlZOVY=)
2: a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl (hash: +pll38XXdYJVwFF+7OGTFZ2m/EzyCrj7JVWqH9rkyUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a4:d9:43:d3:cc:7b:ab:24:53:5d:0a:eb:4a:fe:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84
Validity
Not Before: Jun 14 01:00:20 2026 GMT
Not After : Jun 15 01:00:20 2026 GMT
Subject: CN=a94cdcc22a2da714ea5992524fb49c5759c120a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:8c:09:9b:13:f3:2a:72:8b:73:23:03:0b:d8:
1d:d4:4f:f0:07:82:ba:83:5f:f2:86:8d:fa:f3:a0:
39:90:8d:5d:f0:14:38:18:52:e9:e3:af:39:02:f3:
ba:ed:9f:3b:b8:b6:b1:e1:73:f8:d2:3f:b1:e0:02:
41:fc:1a:4f:a0:57:e3:bc:0c:7a:03:46:41:27:cf:
dc:a4:73:fe:8b:06:1d:04:5c:af:29:4a:11:e9:a6:
cc:c5:65:c0:8f:b0:00:af:29:92:36:50:9a:b9:15:
bd:b0:9c:13:0d:50:c3:e5:95:f2:71:43:66:f6:4e:
4f:90:70:3f:9f:2c:b5:14:45:d3:6e:20:50:c8:fc:
70:19:8e:a6:2b:71:a5:df:9e:47:15:2e:ab:33:ee:
36:e3:06:bc:27:e7:be:4f:88:67:ad:f5:ab:ce:87:
82:ce:26:d1:b5:ce:aa:fe:59:98:29:ad:29:51:75:
b4:80:97:af:7a:a4:de:1e:b6:96:f8:aa:c0:82:e4:
d3:24:c6:2a:6c:00:1f:ea:a1:b2:82:f2:63:c1:a9:
69:10:a9:61:27:f2:44:fb:34:fb:1f:54:3f:d0:08:
8c:2a:2b:45:a2:0b:a0:49:13:f7:fb:7f:31:bc:5e:
16:b3:13:69:de:fb:b9:b9:d7:11:42:99:eb:b3:0f:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4C:DC:C2:2A:2D:A7:14:EA:59:92:52:4F:B4:9C:57:59:C1:20:A1
X509v3 Authority Key Identifier:
keyid:6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ec:70:a0:ee:3e:d4:41:a7:42:41:84:c3:cf:be:75:29:2c:
df:6b:83:84:de:cb:66:a8:0a:05:7d:89:64:cc:6b:65:04:e8:
62:d9:68:82:e3:02:a0:e9:d8:45:43:e6:bc:80:e0:e4:ba:0b:
08:94:85:69:01:87:e2:c7:44:82:61:86:37:f2:7e:e4:3c:b3:
62:10:a3:ff:61:cf:7d:04:57:a8:18:41:6d:63:5d:6a:3f:31:
03:8f:d1:c8:af:f9:b2:22:ec:e1:7f:8e:2c:75:64:2a:df:c7:
7d:93:a2:51:79:6e:b2:83:71:25:06:43:a4:33:81:16:84:51:
8c:e6:93:15:65:65:e2:a5:03:c8:00:61:0a:4b:7b:de:06:fd:
f2:63:d1:f7:7a:4d:26:b2:64:59:4d:58:53:1c:30:28:65:41:
f7:3a:5c:70:d2:82:2d:36:30:d9:5b:ba:01:6e:30:4b:4c:2d:
25:53:91:a0:d9:3c:5c:9a:49:85:12:9e:48:c9:92:c1:c3:7b:
9d:b0:c5:ea:67:a0:f0:c7:b9:7b:29:e7:75:a5:c1:10:08:41:
eb:e8:b3:4d:25:fd:ed:13:3e:5c:df:b1:ca:87:bd:f4:04:b0:
3e:37:20:cd:c4:47:ff:e7:bb:0b:87:b7:2b:64:37:8e:54:8c:
88:8c:88:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DpNlD08x7qyRTXQrrSv7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2QwMWRkZTNjMmFiN2ZhN2I1ODhlY2FkNGQxY2QzMTM5
N2JkODQwHhcNMjYwNjE0MDEwMDIwWhcNMjYwNjE1MDEwMDIwWjAzMTEwLwYDVQQD
EyhhOTRjZGNjMjJhMmRhNzE0ZWE1OTkyNTI0ZmI0OWM1NzU5YzEyMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/YwJmxPzKnKLcyMDC9gd1E/wB4K6
g1/yho3686A5kI1d8BQ4GFLp4685AvO67Z87uLax4XP40j+x4AJB/BpPoFfjvAx6
A0ZBJ8/cpHP+iwYdBFyvKUoR6abMxWXAj7AArymSNlCauRW9sJwTDVDD5ZXycUNm
9k5PkHA/nyy1FEXTbiBQyPxwGY6mK3Gl355HFS6rM+424wa8J+e+T4hnrfWrzoeC
zibRtc6q/lmYKa0pUXW0gJeveqTeHraW+KrAguTTJMYqbAAf6qGygvJjwalpEKlh
J/JE+zT7H1Q/0AiMKitFogugSRP3+38xvF4WsxNp3vu5udcRQpnrsw9X5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlM3MIqLacU6lmSUk+0nFdZwSChMB8GA1UdIwQY
MBaAFGt9Ad3jwqt/p7WI7K1NHNMTl72EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMwQjNlUENxMy1udFlqc3JVMGMweE9YdllRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGYyM2QtMWZjOS00NzFhLTgyYmQt
ZmU4YWY5YTZlZmQyLzEvYTMwQjNlUENxMy1udFlqc3JVMGMweE9YdllRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yMGYyM2QtMWZjOS00NzFhLTgyYmQtZmU4YWY5YTZlZmQy
LzEvYTMwQjNlUENxMy1udFlqc3JVMGMweE9YdllRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuxwoO4+
1EGnQkGEw8++dSks32uDhN7LZqgKBX2JZMxrZQToYtloguMCoOnYRUPmvIDg5LoL
CJSFaQGH4sdEgmGGN/J+5DyzYhCj/2HPfQRXqBhBbWNdaj8xA4/RyK/5siLs4X+O
LHVkKt/HfZOiUXlusoNxJQZDpDOBFoRRjOaTFWVl4qUDyABhCkt73gb98mPR93pN
JrJkWU1YUxwwKGVB9zpccNKCLTYw2Vu6AW4wS0wtJVORoNk8XJpJhRKeSMmSwcN7
nbDF6meg8Me5eynndaXBEAhB6+izTSX97RM+XN+xyoe99ASwPjcgzcRH/+e7C4e3
K2Q3jlSMiIyI0Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:35:54 2026 by rpki-client