Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier: A4wUdPFF8Y9ujF5GxWKygeIFfvegA8y3+cIcgfKgkkI=
Subject key identifier: 9E:B9:E3:BF:76:26:34:01:46:F6:98:DC:94:1C:A1:C6:74:C3:0B:18
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 019CA9B3F98DE5CD32118FE4876460EE9BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number: 0734
Signing time: Sun 01 Mar 2026 14:01:10 +0000
Manifest this update: Sun 01 Mar 2026 14:01:10 +0000
Manifest next update: Mon 02 Mar 2026 14:01:10 +0000
Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: 9wMwGRKKTyBbGib3BTSZlQ3dQQzRiDKfJuogpGtK8ek=)
2: AXoZHUW26vXOR2LyRAx6VrTRH_I.roa (hash: Ue79szgYBfSFiFIo+WhzLR9zMH7i+v0YgKPyWDmKeVQ=)
3: QpiOjtqqn3KLmCsEJyklJCGXtrE.roa (hash: FMtgXOF3ndtdUEWRQlHxouObzXHzScpjOr9+4JvRDuQ=)
4: bSrLj4dk7vC2yPiiS4puv6QDMCg.roa (hash: b2kWSMTdmZr8cROp9MUUr9c5xUNnNn9tLEdsg0Fja3c=)
5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=)
6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=)
7: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=)
8: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=)
9: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:f9:8d:e5:cd:32:11:8f:e4:87:64:60:ee:9b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Mar 1 14:01:10 2026 GMT
Not After : Mar 2 14:01:10 2026 GMT
Subject: CN=9eb9e3bf7626340146f698dc941ca1c674c30b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:3c:71:f3:02:df:b3:bb:00:00:93:08:05:
8e:28:8e:61:61:31:40:e9:fd:d1:73:d6:cf:5f:a7:
cc:37:56:25:65:15:7e:39:fe:10:2e:04:e3:0d:f4:
a1:51:c2:8e:1c:ca:6f:ea:13:b7:02:fc:b6:6b:b5:
47:4e:c1:2a:0d:ce:89:85:06:08:92:3f:2b:a0:00:
92:09:51:e6:e6:00:84:ff:13:c1:f3:d0:6c:b8:00:
19:3e:0b:2c:c6:97:1b:b3:12:67:6e:3c:5b:51:dc:
58:90:a4:2f:4e:39:c4:94:78:43:61:2b:a1:c4:9b:
42:66:79:06:50:34:79:03:7f:e8:68:c4:3e:5c:0c:
9e:bc:03:7a:c2:03:af:79:a8:6d:18:32:da:ec:88:
a3:57:48:8e:77:59:6d:c9:de:3c:96:c4:db:4b:52:
6e:2a:ea:43:3f:7c:fd:ad:35:2b:00:c6:7f:c2:ba:
d5:da:e5:e5:60:ed:81:f0:a6:ab:9b:fd:fc:7f:44:
6b:f6:1e:1a:c7:70:ba:7c:70:77:5b:12:fa:35:a0:
71:18:0b:51:d2:0d:93:43:40:d7:09:bc:37:f6:52:
3b:4d:5c:1c:d9:2e:2e:cd:d7:1c:64:19:4a:e2:19:
58:b6:69:ae:08:d2:4f:34:a6:77:3b:b7:ab:90:92:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B9:E3:BF:76:26:34:01:46:F6:98:DC:94:1C:A1:C6:74:C3:0B:18
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d3:da:64:32:45:80:e3:02:fc:88:ae:e9:05:28:24:5c:4d:
96:2c:93:35:ea:99:e5:d4:b0:a4:61:9a:41:10:98:eb:f9:4b:
4c:e7:57:d4:6c:68:6b:00:32:67:a0:7a:69:81:74:b0:8e:12:
f1:5b:19:ce:54:23:28:74:01:f7:db:5a:04:14:70:68:7b:46:
37:ee:ca:b4:c0:1a:7a:cf:82:e1:24:f9:38:0a:43:2c:b6:ea:
ef:ba:af:35:ee:2a:6c:d4:ac:07:b1:7c:18:3e:f8:84:87:c7:
f8:14:f6:68:d1:94:05:77:41:d2:16:84:36:47:3e:6e:61:42:
f2:09:e8:3d:8c:5f:36:38:87:f2:17:c2:74:da:cd:36:27:3e:
e3:98:82:1c:9d:f6:f2:c1:83:ee:9c:fe:ae:82:3c:92:75:fd:
af:a9:de:e9:0e:ae:9f:3a:92:a0:1c:c4:6b:7b:be:9e:78:5b:
a5:0a:d1:3c:c2:15:b3:a7:3d:d0:6e:89:01:76:21:8a:da:fe:
fb:27:9f:0c:2c:cd:9b:0d:6e:af:af:4d:46:a1:63:1e:a8:16:
53:f8:d8:b2:72:97:e9:4b:69:c3:73:13:ed:2d:7a:10:a3:71:
46:79:8a:c4:c2:af:95:1f:01:23:81:93:84:c0:86:18:13:bc:
6a:2d:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:52:04 2026 by rpki-client