Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: GNvWB/UKElBaYHj325cw6q6OYivHJX9Nby4hzSnrFe0=
Subject key identifier: 6D:56:46:A3:90:C4:32:D1:8E:7C:19:8C:24:C2:11:C8:3E:AC:A5:33
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 019CAA5928BA3288F96EB6184DDE0D8B0A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 11AC
Signing time: Sun 01 Mar 2026 17:01:35 +0000
Manifest this update: Sun 01 Mar 2026 17:01:35 +0000
Manifest next update: Mon 02 Mar 2026 17:01:35 +0000
Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=)
2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: ZEW0cej+vNrE6JIjzrVODyoy0VYsO+fCi1wCl8d3Xd4=)
3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:28:ba:32:88:f9:6e:b6:18:4d:de:0d:8b:0a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Mar 1 17:01:35 2026 GMT
Not After : Mar 2 17:01:35 2026 GMT
Subject: CN=6d5646a390c432d18e7c198c24c211c83eaca533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:f9:72:fd:06:f5:05:35:cd:c4:2c:c9:62:
14:e2:bc:2d:1d:9b:ae:b7:ea:3f:95:88:98:47:cc:
46:c3:83:3d:91:ee:b7:a6:2b:4b:62:6e:f6:53:1d:
4c:f3:86:af:c2:6e:23:02:bb:e9:41:e6:29:a2:2c:
ce:fa:62:30:f0:e7:ff:09:bf:31:81:6a:99:77:7d:
28:3e:e8:9a:5a:3b:4f:68:00:43:1c:67:2a:02:55:
4b:de:c7:cd:65:66:cf:99:d6:1e:95:43:c7:2b:f1:
f2:b5:94:52:38:34:30:45:e6:4b:49:28:56:a4:51:
ac:13:8b:ab:44:d7:a4:b3:84:76:4c:20:e5:2b:1f:
6c:47:ca:d1:70:93:28:5f:59:93:cd:e7:b3:06:f7:
7a:5c:0a:b6:39:1f:5a:be:be:c0:b8:67:da:30:74:
13:e0:8a:82:33:82:6e:fc:9f:02:fe:0a:b1:ff:32:
06:77:c7:af:a3:51:c4:b4:50:71:b6:66:a3:fc:92:
b1:f4:aa:62:37:22:c7:71:69:75:1a:23:9e:eb:07:
db:3c:5d:3d:5e:85:f1:73:c1:eb:3a:04:c5:92:3c:
fa:e4:94:fd:ed:96:30:41:53:c4:60:51:ce:2d:9d:
76:04:30:a7:d0:aa:84:d2:2b:79:23:cc:74:d5:2c:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:56:46:A3:90:C4:32:D1:8E:7C:19:8C:24:C2:11:C8:3E:AC:A5:33
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e3:f5:44:b7:35:88:fa:d0:a0:76:b4:61:84:f8:a4:4a:19:
d5:28:34:7d:77:57:8d:82:1a:74:2a:4f:0f:48:62:2e:98:b9:
97:3b:a3:a4:7a:ef:87:4d:92:00:15:5d:d7:74:a2:dd:47:43:
0e:77:c2:3d:7d:91:c9:0c:a5:f2:a5:4d:25:64:14:b7:03:bd:
b0:5a:d0:e9:70:8a:74:2c:0c:0a:f5:67:57:99:d9:6c:a8:a8:
5c:a6:6e:22:b8:35:c2:4f:aa:fd:d5:71:4a:e1:ae:d4:84:59:
de:26:80:1f:ee:b8:de:a3:f9:21:a6:0c:0b:69:fe:0f:54:77:
df:89:77:72:6d:5c:5a:f2:86:c4:de:33:9e:08:4d:f7:a1:14:
bf:2c:bc:6f:6a:80:45:bc:69:3b:c5:47:8f:09:13:b1:a4:52:
b7:16:9b:4c:e0:b7:13:ed:25:12:e0:d8:e0:9d:4e:5d:42:dc:
24:3c:6a:10:26:ce:ba:c3:cf:80:53:7d:4c:0f:b8:54:db:a6:
e3:91:48:f9:04:a7:09:30:88:60:4f:69:72:68:d5:be:c4:0e:
70:3b:09:76:91:54:54:c1:46:b3:22:ce:84:f2:41:99:a3:da:
9b:13:fb:93:59:82:9d:95:b3:df:96:3a:16:ca:05:0b:ca:43:
55:14:e0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:38 2026 by rpki-client