Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: z4/W9mDJp6xc+iOZpjOzoz8ziOu4OtkfgYzx5qh53M0=
Subject key identifier: C9:1F:06:CD:0F:45:9D:D1:2C:BE:71:94:4A:F1:57:54:4A:17:6E:23
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 019FAAF55BF810535DF45AC9CEC811A3E252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 133A
Signing time: Tue 28 Jul 2026 23:00:34 +0000
Manifest this update: Tue 28 Jul 2026 23:00:34 +0000
Manifest next update: Wed 29 Jul 2026 23:00:34 +0000
Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=)
2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: i1ZSVS5MgPcNWYz/pg85UjZygE817vGb02WbgRbe7PM=)
3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:5b:f8:10:53:5d:f4:5a:c9:ce:c8:11:a3:e2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Jul 28 23:00:34 2026 GMT
Not After : Jul 29 23:00:34 2026 GMT
Subject: CN=c91f06cd0f459dd12cbe71944af157544a176e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:44:02:66:02:61:ff:ed:4c:d0:34:48:8b:cb:
ac:2f:05:3f:25:cb:bc:05:22:0e:e7:2d:43:f7:5f:
fc:dc:27:8c:e1:98:8a:a9:e2:02:b8:7e:f1:83:65:
20:b3:9e:4f:53:54:d9:49:88:88:32:0b:67:e2:f3:
a6:2f:61:7e:80:61:24:1b:9b:2f:f1:20:a8:83:75:
2c:5d:96:d2:8f:de:9c:ac:d4:c8:e3:66:b1:59:b3:
40:55:61:0b:b5:7b:94:31:dc:11:1d:b2:c1:69:36:
9e:2f:85:59:c3:2e:0f:d2:5f:9d:ba:ac:21:31:8d:
1b:d1:7f:30:11:81:35:e5:56:0f:45:cf:07:19:51:
d5:85:46:b0:aa:d0:19:2c:36:29:ee:82:d0:85:ff:
60:40:90:9f:f1:ec:ad:16:0d:1e:95:3f:bf:06:c0:
61:0e:b8:0a:dc:07:dc:33:b1:d4:c7:f8:6e:02:1a:
f3:e4:2d:28:0c:79:95:74:31:0e:a1:03:0f:63:d5:
6b:59:61:a0:88:35:ed:52:ea:63:6b:f3:e7:40:39:
7a:2d:b6:0f:77:d3:67:6c:80:5c:86:66:df:f9:1a:
ed:28:92:5f:3d:fa:89:14:1d:ed:24:13:e9:5c:08:
82:98:84:69:2f:52:78:52:ab:9f:1a:d5:bf:68:01:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1F:06:CD:0F:45:9D:D1:2C:BE:71:94:4A:F1:57:54:4A:17:6E:23
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8c:c5:aa:e4:b3:ae:23:e6:fa:2c:dd:c1:91:4f:d1:11:88:
45:57:f5:eb:e0:36:dd:66:4a:9f:5e:6a:8b:0e:a3:51:77:70:
54:ef:ee:e6:1a:1f:4c:49:9c:ab:87:c7:8b:6d:a6:ad:7b:32:
f4:33:ee:ca:0e:27:ea:f9:47:25:99:02:c3:98:0a:30:50:36:
01:e1:cd:3e:27:d0:bb:a3:6e:fa:c3:b8:f1:6b:26:20:d0:40:
9a:9d:bd:88:99:b0:99:14:5b:0d:66:6c:19:84:e7:6a:10:08:
09:dc:9b:2d:a7:d3:56:de:34:a4:a3:97:83:d7:f2:27:bd:9c:
5d:79:66:3d:01:77:9f:23:40:75:86:11:b2:b0:59:4c:4b:35:
10:3b:95:d8:98:5e:d7:35:cb:20:52:99:4f:ab:15:de:6e:f1:
3c:4d:30:34:ac:a1:45:95:b8:33:dd:28:5a:fd:e3:6c:99:d1:
27:97:36:29:4b:11:ed:1f:bc:4f:eb:98:a2:88:8c:09:a4:35:
03:a9:df:53:21:c3:0d:23:f6:a0:97:c7:57:d4:8a:69:63:c0:
b1:33:7c:22:83:71:f5:ae:e4:ad:64:b9:41:45:c4:25:fd:8b:
e4:92:b1:0e:b1:25:29:a3:75:13:57:63:d1:e9:89:36:66:38:
c6:d0:8a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:54:43 2026 by rpki-client