Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier: 0P6BARDL9ZyQAjqKQNTEbhDTVmEXP3DIAcpZz+jBiKs=
Subject key identifier: 17:BE:42:43:1E:FF:07:B3:CD:5C:CC:3E:FB:19:17:E7:AB:18:4B:CB
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial: 019DA453982C7AD2A723C0D64C49B9FB0CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number: 11D5
Signing time: Sun 19 Apr 2026 06:00:35 +0000
Manifest this update: Sun 19 Apr 2026 06:00:35 +0000
Manifest next update: Mon 20 Apr 2026 06:00:35 +0000
Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: xRujNLDmBNtQLy2O9QOY0hKri4VVhdr741yiz6swnr8=)
2: a_2N7up7ge72iNFxhl27xYnKU30.roa (hash: j+RQUmxlIxzBlFZ8oJHxFEDFDPjNQtLyOqFD3f2oy3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:98:2c:7a:d2:a7:23:c0:d6:4c:49:b9:fb:0c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Validity
Not Before: Apr 19 06:00:35 2026 GMT
Not After : Apr 20 06:00:35 2026 GMT
Subject: CN=17be42431eff07b3cd5ccc3efb1917e7ab184bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:82:99:9e:a5:75:65:90:f4:02:69:b2:e2:
cf:f6:30:4b:3a:57:02:85:f9:16:85:a7:20:21:fd:
a9:16:7b:60:30:4c:2a:b6:f3:9b:e4:a6:bc:6f:df:
0c:27:bd:14:5a:96:b0:25:be:d7:fb:23:cb:8c:f9:
80:26:d0:7e:51:d2:0c:fa:d3:87:1e:dd:ea:4d:01:
91:3e:49:92:87:bf:97:e5:d3:9d:47:a3:e5:95:33:
f6:2a:47:d6:c7:6e:d7:71:af:af:c4:29:24:57:02:
98:5f:aa:44:43:dc:f3:09:02:f9:94:54:0b:70:4b:
1d:3e:0a:b1:1c:da:bb:6d:e8:73:86:05:9f:f1:ec:
1a:c0:05:36:50:7b:ed:e3:9c:0d:50:43:22:82:7b:
5d:73:d5:9f:2f:a4:f7:49:cc:ab:fd:e6:c1:9f:9a:
c4:e0:9d:70:9a:e2:88:52:88:dc:19:fb:57:41:2e:
5b:59:c4:6f:58:9f:ba:55:28:2e:ad:d6:f3:90:dd:
3b:c1:51:56:92:6b:1f:ed:87:ee:30:11:22:6c:18:
12:0b:99:8d:a2:61:bd:af:45:44:6c:f5:24:de:85:
cb:9b:de:31:63:7c:5f:bf:7e:b7:ae:21:e4:81:83:
71:cf:7b:aa:cf:4a:5c:ec:04:8e:88:dd:e3:d8:24:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BE:42:43:1E:FF:07:B3:CD:5C:CC:3E:FB:19:17:E7:AB:18:4B:CB
X509v3 Authority Key Identifier:
keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:e1:ee:b0:ce:00:00:f7:b0:33:6c:e2:7f:ab:f0:0e:f4:8f:
18:d5:e8:f8:0e:ca:61:18:8c:6c:ee:54:a5:28:26:69:ed:87:
ce:59:2f:e3:db:c7:9b:83:c3:f7:91:dd:8c:b9:6d:f5:be:1f:
6e:a0:98:ff:5e:75:cf:55:b9:5f:cc:51:c0:b3:f2:13:dd:f5:
1a:49:b4:b0:80:28:39:3c:68:a2:70:bb:14:7d:17:0e:fe:b4:
e6:97:42:d6:a9:15:f4:54:3c:74:30:e8:96:88:bb:0d:b3:b9:
72:26:ce:a2:42:1c:ad:a2:0b:8e:f6:fc:c4:4b:14:06:86:a8:
38:88:55:c8:ab:d0:91:51:9a:64:b7:94:ca:34:20:c2:63:ee:
26:6d:a7:76:97:a0:d0:ad:4d:f8:af:76:7b:22:27:b0:ec:c7:
70:fc:c4:39:de:7b:0c:4e:49:a2:a4:da:86:45:31:2a:f7:9c:
f0:04:6c:17:1e:73:db:82:60:96:af:2a:9d:90:8b:b5:2f:8a:
ce:11:23:12:6d:9d:6b:b0:72:49:b4:a5:ef:d4:3a:ea:41:64:
2a:db:13:bd:21:54:0e:7d:f2:eb:49:19:a4:50:76:a4:1c:4f:
51:5a:37:d6:39:fa:f6:e0:d9:ef:92:f4:53:a7:ac:74:c3:d4:
ea:40:2b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:09 2026 by rpki-client