
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier: dIpzrrpC6dskU+o7KB2YpM/58aBLh/Eu/s3HKvoyXGA=
Subject key identifier: 99:4F:FD:8A:F2:76:6D:5F:B2:23:ED:43:9F:D9:93:C7:C1:3F:13:66
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 01A0F11E42257D5C091A2E7C7250F26F4F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number: 0972
Signing time: Wed 30 Sep 2026 07:01:27 +0000
Manifest this update: Wed 30 Sep 2026 07:01:27 +0000
Manifest next update: Thu 01 Oct 2026 07:01:27 +0000
Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: 2ioq6aSBEsgyru0D+ZPEH1F/eoPudxQJC9msE8WV54o=)
2: Dq_PeQEX9w9AZ7hhB8jGjaPXdek.roa (hash: x2vJKbCmJ/r1uDEib+Z5d15/ZK6XfDckYPBmz+6pfec=)
3: JbC08AZZ4yXpMlH-fCQSdJypEsk.roa (hash: dv25QT/BTHr/Vmlb0AXRPmd0ZYYxQm5AHmzhJRYqsHI=)
4: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=)
5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=)
6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=)
7: j-PFBiL03S6WRSrBU8S47xwyndA.roa (hash: K7P+QUsdp4yG+ErvjouO0SB+AUJcFrNu/1BLrwwoCmk=)
8: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=)
9: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=)
10: wNRTB3A2q9f-yV1rTSijUO5gEB8.roa (hash: Mvkmn5/K4C/vX+W0bmirSKlojMyVfTuv4C+eRU2oTlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:42:25:7d:5c:09:1a:2e:7c:72:50:f2:6f:4f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Sep 30 07:01:27 2026 GMT
Not After : Oct 1 07:01:27 2026 GMT
Subject: CN=994ffd8af2766d5fb223ed439fd993c7c13f1366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b3:f9:f5:4b:15:3a:c4:44:0d:4e:38:f3:ed:
8a:48:8a:05:40:5e:5a:e3:28:15:c1:d2:5a:15:62:
f9:7f:84:a7:91:75:bd:a1:b0:bc:08:0d:f6:24:ae:
26:bb:53:04:02:b3:18:f8:47:40:18:7a:42:21:41:
f7:b5:47:a3:fc:28:c2:0d:b9:49:b6:ed:1d:d6:bd:
12:03:3a:2b:60:1a:54:b7:65:3d:eb:fd:c1:00:c7:
0f:2a:6d:a2:b6:8a:b4:6f:8e:23:44:9b:66:98:1c:
d4:83:ce:70:bd:9e:5d:74:35:c7:06:8d:13:3a:d0:
48:90:2f:a1:10:b4:4a:d0:5f:d7:31:e1:df:56:83:
fc:fd:ee:32:e4:0e:34:f3:1a:c1:6a:55:f8:dc:72:
06:c7:fe:af:70:d0:9b:55:45:30:81:24:a4:3b:1f:
0c:5a:d9:3e:c8:b3:29:48:65:c5:65:6e:7f:51:f2:
48:dd:40:a2:80:0e:db:f6:25:86:88:76:6f:8f:bb:
45:7d:10:e2:23:0b:f8:98:f2:3f:b6:95:9f:a7:1c:
f5:f2:b1:c4:9f:cf:db:ef:f7:ec:98:87:0e:55:c8:
d0:92:66:66:4f:41:52:14:ec:cd:b7:b4:a2:ea:e0:
08:1d:3b:b0:a9:6e:93:03:c8:07:f7:fe:5f:63:65:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4F:FD:8A:F2:76:6D:5F:B2:23:ED:43:9F:D9:93:C7:C1:3F:13:66
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fc:9c:53:85:ee:c4:7b:80:6f:8a:cc:5f:ee:ad:ea:aa:f7:
2a:1e:6a:2a:c9:a6:f9:96:19:96:d5:a8:11:0a:81:b4:9e:e4:
3e:a7:d1:cd:68:66:ba:18:88:cf:ac:36:39:57:43:24:87:df:
ab:cf:ad:ce:8f:e9:a5:40:f5:47:c2:0d:dc:e4:3f:6e:92:c0:
e0:ff:a2:37:47:55:9b:f6:b0:b3:cb:91:ab:fa:8c:67:2e:fa:
22:ff:45:73:cb:a6:28:4b:61:9b:9a:ec:03:70:6d:25:19:1f:
e7:bc:2c:1b:7c:11:27:4a:2f:32:b6:e3:7f:af:3b:0e:8f:2b:
0b:46:11:ee:fb:1a:23:2c:f2:a5:d1:45:60:bb:dd:ce:b5:30:
10:57:fd:9d:33:17:1c:cd:10:ef:ef:e0:eb:78:86:78:64:9e:
73:4d:98:38:cd:bb:80:28:d4:99:df:d9:2a:77:90:38:96:e0:
99:99:95:4b:92:48:05:ad:4c:7a:3e:1e:36:09:d0:2b:28:2b:
7a:48:e5:84:85:29:fd:3a:4b:34:2d:61:5c:00:c2:f2:ed:58:
a9:ff:57:fe:88:0e:b9:db:b0:eb:45:a3:43:61:0d:b0:81:9c:
e9:c5:0f:d1:fd:e2:dd:6c:8e:af:bb:23:a5:11:30:ce:d0:b8:
26:7d:28:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:28:30 2026 by rpki-client