Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier: bOPl2IR1fcRs8Q4hK0Qtp6CNHSvOnwOfc767adZhUJo=
Subject key identifier: AB:E5:C3:D1:AD:06:EC:E6:90:CD:1A:E5:AF:3E:75:19:72:DA:A1:00
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 019D9AABDCA9CA4700134E19166604C804DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number: 07B1
Signing time: Fri 17 Apr 2026 09:00:47 +0000
Manifest this update: Fri 17 Apr 2026 09:00:47 +0000
Manifest next update: Sat 18 Apr 2026 09:00:47 +0000
Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: 3Puv98yIX0l2q5bM9LUGEu6+ydsFjrwPm2wz7dueCgU=)
2: JuSXc7ZVBBGZXnDq-To8XVkAvig.roa (hash: /cuVo97iW83fjQf6bGYtrLtSHZqgpkHovYO/W3VrbBk=)
3: QpiOjtqqn3KLmCsEJyklJCGXtrE.roa (hash: FMtgXOF3ndtdUEWRQlHxouObzXHzScpjOr9+4JvRDuQ=)
4: bSrLj4dk7vC2yPiiS4puv6QDMCg.roa (hash: b2kWSMTdmZr8cROp9MUUr9c5xUNnNn9tLEdsg0Fja3c=)
5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=)
6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=)
7: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=)
8: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=)
9: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:dc:a9:ca:47:00:13:4e:19:16:66:04:c8:04:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Apr 17 09:00:47 2026 GMT
Not After : Apr 18 09:00:47 2026 GMT
Subject: CN=abe5c3d1ad06ece690cd1ae5af3e751972daa100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:58:97:82:c0:35:97:41:dc:99:43:cf:c8:
3f:25:e4:35:f0:09:f3:cf:83:b1:7a:07:30:e9:db:
1e:ca:07:81:27:24:5f:cd:f3:14:e8:60:ab:03:e1:
6b:cd:69:42:d5:e8:c1:9e:cc:51:bb:3b:c2:c0:02:
d1:c3:f2:c6:76:ab:ac:fa:c2:c5:2f:ab:6e:06:01:
a0:a4:46:60:95:0a:c1:32:ba:d1:ae:84:c6:fa:53:
b0:63:f9:9f:22:00:71:fa:47:f3:5c:ec:c9:1a:32:
45:52:c8:60:b6:f1:46:6e:97:11:7b:8d:ba:70:fc:
52:1c:90:1d:f7:cd:37:10:b4:69:85:d9:15:bc:78:
e8:5a:0e:67:07:3b:f6:ce:e1:96:3e:28:00:4b:35:
b5:f5:73:03:fe:0b:d8:06:3c:dc:a0:37:d7:86:38:
cd:08:ad:18:22:fa:e5:3b:5c:69:62:7b:43:03:87:
67:5a:92:14:94:4f:2b:ef:6a:d2:eb:37:e4:20:e9:
bb:1e:8c:f3:c1:ed:9a:80:79:1f:69:a1:f0:ec:0c:
d0:da:1e:be:a5:27:fa:ee:cd:ac:16:eb:e0:5a:62:
6d:f1:40:0a:a1:e0:88:82:72:ed:29:d2:13:0b:a2:
e4:a6:6c:f5:a6:b4:9a:f4:85:a7:47:8f:37:74:ff:
69:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E5:C3:D1:AD:06:EC:E6:90:CD:1A:E5:AF:3E:75:19:72:DA:A1:00
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:44:fc:e9:15:e3:7c:8b:af:80:cc:c3:ec:55:8c:23:19:68:
cd:28:47:db:51:87:e0:a0:2b:bf:78:ab:6c:6d:d7:15:8f:d4:
8e:a2:db:c9:f7:59:21:c1:0e:67:c8:42:19:8f:b7:f9:6b:b6:
03:63:71:bf:53:3d:8e:48:8f:3a:bd:f9:b8:ae:5e:65:59:d8:
6c:6b:9a:f4:f5:1c:eb:a0:4a:1b:88:ef:07:09:f9:a5:16:37:
91:82:d0:78:e9:f1:3d:c0:96:2f:13:f9:b9:4e:62:ef:db:63:
89:65:95:63:73:1e:90:0a:00:06:0e:28:71:5c:8e:b1:a4:c1:
77:3a:37:03:c7:54:06:08:c0:74:6e:90:c8:a3:0e:b4:29:40:
30:1f:c1:3f:5f:ee:3b:8a:2a:09:bf:b8:9c:1d:9a:05:cd:bf:
b2:c7:9c:ec:37:28:a3:a5:5b:eb:4c:60:ac:88:e1:3a:dc:a2:
76:5f:69:95:1f:49:7a:63:ed:e7:08:27:0f:0c:a8:3b:0d:50:
2c:e4:a9:b9:9e:87:68:36:80:b0:cd:ef:b2:9c:15:1c:ad:96:
eb:4c:32:db:28:ac:1c:24:74:04:20:04:df:04:b4:2b:c2:be:
cf:66:a7:75:06:cb:6a:14:0d:97:23:e0:5e:bb:98:e7:cd:ea:
26:82:63:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:51 2026 by rpki-client