Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier: YINBDqILS5BSkeOqRU+1s/UhlfwO1GQ1oPAtjzq0p/I=
Subject key identifier: DB:1B:7E:7C:10:8D:96:BB:F1:8D:F9:F6:8E:E9:70:CE:C4:EE:0B:D9
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial: 019FA9E30B19C412FE356BD0BFAC96A6F64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number: 12E1
Signing time: Tue 28 Jul 2026 18:00:56 +0000
Manifest this update: Tue 28 Jul 2026 18:00:56 +0000
Manifest next update: Wed 29 Jul 2026 18:00:56 +0000
Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: U16Bn3piGgB4zdfI5Y5VYknSSBXpBV5ZEaMeOb8pRgc=)
2: a_2N7up7ge72iNFxhl27xYnKU30.roa (hash: j+RQUmxlIxzBlFZ8oJHxFEDFDPjNQtLyOqFD3f2oy3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:0b:19:c4:12:fe:35:6b:d0:bf:ac:96:a6:f6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Validity
Not Before: Jul 28 18:00:56 2026 GMT
Not After : Jul 29 18:00:56 2026 GMT
Subject: CN=db1b7e7c108d96bbf18df9f68ee970cec4ee0bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d4:05:4d:76:f2:74:e2:85:9c:ce:63:7d:f9:
10:32:b2:25:25:c8:7b:de:4b:1b:96:e3:b1:9f:be:
8e:3c:62:67:64:df:8e:3d:90:d7:1b:6c:c0:18:df:
80:f2:60:ab:18:77:dc:21:54:53:86:d1:b9:03:26:
10:a2:e3:a1:0b:16:1b:6d:e5:78:53:cb:16:74:62:
04:8d:45:2b:1e:12:a0:16:0f:6b:cd:2d:2b:cc:93:
95:be:82:1a:0f:0a:b2:55:2d:20:4b:d5:dc:22:44:
3d:46:8f:27:9a:c4:63:cd:83:d1:12:47:0c:e8:8f:
db:a8:69:32:9f:a6:13:84:e8:b7:f9:7c:ea:5c:6e:
52:76:c3:6e:6e:93:47:2e:80:64:79:69:2e:29:7b:
e0:8e:43:db:0d:b3:c0:c1:36:0f:46:85:56:c7:76:
70:42:39:b4:60:31:b0:5f:6c:fc:74:b0:61:2d:0c:
01:7f:91:9c:b9:62:f8:66:31:79:be:fa:4c:7c:e5:
95:ae:0f:85:83:db:4d:2e:2d:cd:a6:75:e0:d8:c2:
4a:5f:47:ca:cf:32:64:db:22:d9:90:e8:5a:cb:de:
cd:a6:15:99:55:87:02:b0:ff:c9:df:3f:58:77:88:
31:2e:c3:79:da:53:16:2e:00:63:1f:a1:ae:e4:84:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1B:7E:7C:10:8D:96:BB:F1:8D:F9:F6:8E:E9:70:CE:C4:EE:0B:D9
X509v3 Authority Key Identifier:
keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ae:3c:75:64:b0:16:d7:3a:1a:b7:24:84:03:ff:80:c3:85:
97:ca:b4:e9:7a:03:53:d2:5c:b2:6f:5d:f4:c4:5c:e3:c7:22:
26:d1:b7:30:eb:68:11:f1:5d:92:2c:34:6e:12:58:c9:46:20:
4e:5c:75:04:fe:30:9e:cb:d2:e4:69:6d:b1:93:7e:9a:fa:7c:
08:40:40:f4:4c:1e:ac:49:a6:93:14:6d:46:9f:ab:84:43:97:
b3:7f:4a:74:08:bf:ab:70:9f:97:63:1e:22:56:3a:a6:11:77:
e6:87:6b:19:d1:d2:0f:72:04:42:00:62:37:b5:cc:20:f8:70:
ff:93:c6:e9:95:d2:10:e0:73:d8:8f:53:38:10:c2:b9:74:12:
36:b9:4c:dd:2c:db:a6:64:da:71:96:39:77:4c:80:69:e1:1f:
53:99:d6:c5:8f:e0:5d:f7:2f:39:60:23:ab:d9:97:29:9b:4f:
01:08:e9:57:f8:a5:04:19:53:33:3f:c5:66:4b:46:33:46:9b:
5f:d2:fb:a7:fd:1c:3e:38:85:d3:89:12:15:ba:e3:35:ca:be:
3c:94:f3:3f:d4:26:12:a3:e5:1a:95:1e:b6:50:e3:aa:3b:53:
a8:6f:83:b1:cf:88:b3:a9:b5:28:e9:67:41:05:3f:c3:9a:4f:
b1:0b:52:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4wsZxBL+NWvQv6yWpvZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODA4OWFhOWUxZDVjMTJhYmFkNDNhNzAxNTExZGExYzY1
ZjlmYTYwHhcNMjYwNzI4MTgwMDU2WhcNMjYwNzI5MTgwMDU2WjAzMTEwLwYDVQQD
EyhkYjFiN2U3YzEwOGQ5NmJiZjE4ZGY5ZjY4ZWU5NzBjZWM0ZWUwYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdQFTXbydOKFnM5jffkQMrIlJch7
3ksbluOxn76OPGJnZN+OPZDXG2zAGN+A8mCrGHfcIVRThtG5AyYQouOhCxYbbeV4
U8sWdGIEjUUrHhKgFg9rzS0rzJOVvoIaDwqyVS0gS9XcIkQ9Ro8nmsRjzYPREkcM
6I/bqGkyn6YThOi3+XzqXG5SdsNubpNHLoBkeWkuKXvgjkPbDbPAwTYPRoVWx3Zw
Qjm0YDGwX2z8dLBhLQwBf5GcuWL4ZjF5vvpMfOWVrg+Fg9tNLi3NpnXg2MJKX0fK
zzJk2yLZkOhay97NphWZVYcCsP/J3z9Yd4gxLsN52lMWLgBjH6Gu5ISuiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsbfnwQjZa78Y359o7pcM7E7gvZMB8GA1UdIwQY
MBaAFN+AiaqeHVwSq61DpwFRHaHGX5+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYt
ZmQ2NDQ2NTdjYTJiLzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYtZmQ2NDQ2NTdjYTJi
LzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUK48dWSw
Ftc6GrckhAP/gMOFl8q06XoDU9Jcsm9d9MRc48ciJtG3MOtoEfFdkiw0bhJYyUYg
Tlx1BP4wnsvS5GltsZN+mvp8CEBA9EwerEmmkxRtRp+rhEOXs39KdAi/q3Cfl2Me
IlY6phF35odrGdHSD3IEQgBiN7XMIPhw/5PG6ZXSEOBz2I9TOBDCuXQSNrlM3Szb
pmTacZY5d0yAaeEfU5nWxY/gXfcvOWAjq9mXKZtPAQjpV/ilBBlTMz/FZktGM0ab
X9L7p/0cPjiF04kSFbrjNcq+PJTzP9QmEqPlGpUetlDjqjtTqG+Dsc+Is6m1KOln
QQU/w5pPsQtSMw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:32 2026 by rpki-client