Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
File: s30V5DRw7wodxwEHQ5P-cPLfjQY.mft (raw, json)
Hash identifier: 3pPV/YYawBkVKIDdrCbnjLDuyDVuf1kyoBVrwKajtVU=
Subject key identifier: 88:58:07:17:B8:13:EA:F8:21:6B:F8:07:18:24:11:0E:ED:10:85:CC
Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
Certificate issuer: /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Certificate serial: 019CAB346E3C24A1B52EA96AF3495812CA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
Manifest number: 090B
Signing time: Sun 01 Mar 2026 21:01:05 +0000
Manifest this update: Sun 01 Mar 2026 21:01:05 +0000
Manifest next update: Mon 02 Mar 2026 21:01:05 +0000
Files and hashes: 1: cq8gxju5oWNcYnI5PxKC4JIOX9U.roa (hash: jLj78jxraqm7W54FO62Mu8iYhA0T1LmaYubfOc77vt0=)
2: s30V5DRw7wodxwEHQ5P-cPLfjQY.crl (hash: 7HPVU1U7bWLbtzfhLOV/RYgywZdvEEESLqApFy2OjqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:6e:3c:24:a1:b5:2e:a9:6a:f3:49:58:12:ca:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Validity
Not Before: Mar 1 21:01:05 2026 GMT
Not After : Mar 2 21:01:05 2026 GMT
Subject: CN=88580717b813eaf8216bf8071824110eed1085cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:02:54:64:bd:35:29:d8:49:0a:76:32:34:00:
91:c2:ba:58:c6:c3:69:ef:3f:9d:0b:ae:7f:c1:8a:
c8:bc:81:88:ea:3e:dd:5f:21:48:59:e9:49:f6:14:
b4:df:b2:90:28:ba:37:6a:b8:17:a7:70:04:00:af:
42:5d:ff:6f:32:03:6f:39:96:6b:7c:b6:c1:7e:c6:
63:37:1b:8e:57:26:b1:c8:d6:54:6e:ca:64:93:d7:
b8:05:99:74:b5:9c:b4:ad:ba:92:fc:ca:27:52:5a:
11:55:a9:ee:8a:6b:9d:ce:3a:de:be:44:4a:bb:27:
72:63:28:33:91:8a:a3:83:80:ab:50:b8:8c:38:ad:
55:c4:5a:94:f6:4b:bd:b7:d8:ca:54:16:e4:98:73:
39:c0:0c:5b:54:a5:13:37:0c:d6:3c:e1:ba:88:44:
24:99:ee:15:1b:52:d3:7d:b3:1e:d6:ea:18:23:96:
f5:d4:21:09:49:a7:ba:a9:5e:11:bf:9f:a0:a9:05:
38:c5:0a:20:49:ed:ce:6e:49:3a:e1:8d:50:a5:9e:
c1:b1:f9:6b:5a:a2:a7:50:4f:40:a0:6c:6e:63:08:
5e:0f:db:de:32:6f:7f:8d:43:17:4e:e8:41:60:23:
a1:78:80:45:09:ee:78:74:85:bd:4a:53:ec:6e:e7:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:58:07:17:B8:13:EA:F8:21:6B:F8:07:18:24:11:0E:ED:10:85:CC
X509v3 Authority Key Identifier:
keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f3:d0:19:db:57:28:a7:aa:80:fe:1c:99:05:2f:70:5c:9c:
a4:ba:88:94:a5:74:d7:9d:76:d7:f8:79:35:20:1f:a7:ed:02:
c1:c8:1a:a5:33:cf:f3:46:12:ab:22:ff:ca:b1:01:28:d7:f1:
12:1d:cd:59:c4:c7:28:c9:b6:f2:ca:f0:40:36:37:49:03:53:
1c:7d:b4:97:11:16:dd:ce:26:ee:48:cd:40:c6:9f:86:76:3c:
7c:61:96:3a:c8:8b:06:a1:f5:05:9e:4f:0f:85:99:df:96:f4:
41:83:92:d1:92:b8:30:01:02:10:60:65:c3:ce:76:8b:59:bb:
cd:95:f8:20:92:32:cc:26:5d:0e:1d:63:df:88:5e:af:af:08:
4b:a9:d4:b0:39:09:e0:fa:54:82:60:c5:3c:54:25:df:d1:f3:
0a:1d:00:d7:f2:51:c5:fe:1e:05:63:79:e4:ee:51:97:2e:fc:
2f:c8:fb:15:88:4f:40:2f:d7:e9:b9:12:c8:54:ad:40:e9:64:
8c:cf:40:43:ba:7a:8d:83:d8:31:12:ee:18:56:05:63:ba:64:
03:e8:56:5d:0b:c5:cf:d7:1e:5b:6a:f9:4b:3a:07:88:3a:8b:
3e:c6:4f:34:9c:ec:ea:16:18:4c:14:b0:01:80:c0:dc:d8:8d:
c3:a2:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:07 2026 by rpki-client