Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: Hs6xPaFN5AOA+PgESjS6TC3W7/xy9IURGfpIGa9kFAg=
Subject key identifier: 7C:7F:34:1A:DC:FF:D7:79:8F:50:0E:19:E5:AC:0A:87:AD:36:19:4F
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 019D99D0870DE0AF90265D4F29DA7F6FA3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 1228
Signing time: Fri 17 Apr 2026 05:01:13 +0000
Manifest this update: Fri 17 Apr 2026 05:01:13 +0000
Manifest next update: Sat 18 Apr 2026 05:01:13 +0000
Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=)
2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: nNMfvHYkt/Q29A21rvb6eGLcVI102T95vTFF7WGZVnk=)
3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:87:0d:e0:af:90:26:5d:4f:29:da:7f:6f:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Apr 17 05:01:13 2026 GMT
Not After : Apr 18 05:01:13 2026 GMT
Subject: CN=7c7f341adcffd7798f500e19e5ac0a87ad36194f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:59:34:3d:dd:20:d5:6e:75:27:a3:e2:28:d4:
cc:6e:fa:00:12:a3:b5:00:4c:83:93:9c:7f:21:bb:
b6:16:13:91:d3:e8:9c:9b:60:5d:fc:ae:fd:a2:dc:
fd:1c:84:2d:39:14:71:d1:b2:f7:a9:b3:ef:b5:88:
07:8b:dc:98:30:0f:78:df:ec:ed:82:1d:b3:e4:dc:
d1:e4:5b:d2:97:5a:49:88:3f:82:56:a0:0c:bb:82:
e1:6f:a0:05:5b:38:70:c1:65:2f:77:c6:4c:23:d6:
9d:89:72:fb:fb:19:69:49:81:f8:cf:d1:62:8a:1e:
91:e8:4c:c1:1e:f9:9f:38:b6:c0:72:11:19:ff:21:
cb:94:1d:83:f4:c9:79:2b:53:9b:29:bd:8e:3d:8d:
4b:8d:1d:06:4c:1b:e7:63:06:e2:de:43:3a:2f:9a:
c3:89:3b:4f:84:eb:98:90:f3:b0:92:db:28:2b:c5:
84:12:1e:a8:f2:fd:db:0d:72:f4:f8:53:80:86:2e:
96:df:99:28:da:05:62:82:c5:d3:8f:77:ef:ff:0f:
6f:91:a1:98:6c:ff:4f:33:5b:a6:e5:c2:ec:60:ae:
bc:14:ca:ea:32:d0:72:5d:c2:c6:c5:e2:51:ab:9b:
75:52:96:f9:b0:0a:b4:8a:4c:20:7a:cb:29:81:e1:
64:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7F:34:1A:DC:FF:D7:79:8F:50:0E:19:E5:AC:0A:87:AD:36:19:4F
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:45:82:43:1f:7a:f3:67:37:fc:88:99:d5:04:ee:1d:b7:d6:
43:78:63:45:9c:2d:ac:14:07:76:c9:09:f6:c6:66:74:a4:0d:
75:eb:0c:59:e6:64:3c:2c:48:c6:67:c7:d9:0c:ac:52:df:72:
94:b9:9f:83:ca:cd:96:ed:f5:d9:05:e9:65:08:74:5f:63:a3:
ac:c9:5c:56:48:e4:68:5d:c9:16:6b:fc:20:11:17:50:3b:39:
f7:38:82:d0:a0:33:de:c7:03:08:60:21:6d:07:80:90:ea:d9:
b5:45:ff:d2:64:91:96:a8:f3:34:c4:7c:27:df:f3:a5:71:43:
10:c1:b5:74:4f:b0:21:98:38:b6:fb:29:54:74:c9:aa:f0:43:
74:ce:06:02:08:7e:a0:5c:7d:49:c5:dd:67:bc:0f:c1:2f:e0:
6e:cc:97:1e:fc:6b:82:17:12:0a:7b:5b:18:cd:1f:c4:f0:43:
24:7d:b4:84:d3:5e:8f:f6:04:e2:da:a8:b6:8b:5f:d3:a3:ce:
f1:1f:0d:74:d4:85:c4:44:b0:18:4e:cf:b9:75:a8:95:56:14:
7d:f3:8f:c5:1e:a1:e7:fb:a9:16:4f:c7:d2:5e:10:88:b6:3f:
ec:15:8a:ce:85:c5:56:11:69:d8:e1:37:ed:77:af:d0:a6:75:
dc:09:01:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:44 2026 by rpki-client