Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: vKPV9WWQmfp6amwUMXEKlbCqht6gxmUnRJhodumoLmg=
Subject key identifier: 3E:28:8A:05:F1:1B:C9:39:B8:E4:CD:D7:73:D8:BF:B3:DE:EE:EE:43
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 01A0C2FAF7078247BB22D59F9CC3174B24F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 13CB
Signing time: Mon 21 Sep 2026 08:00:22 +0000
Manifest this update: Mon 21 Sep 2026 08:00:22 +0000
Manifest next update: Tue 22 Sep 2026 08:00:22 +0000
Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=)
2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: /Z0EjXLJiSod/g2hbOkI9J4mYlz4bTsbK4lPybw79+4=)
3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:f7:07:82:47:bb:22:d5:9f:9c:c3:17:4b:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Sep 21 08:00:22 2026 GMT
Not After : Sep 22 08:00:22 2026 GMT
Subject: CN=3e288a05f11bc939b8e4cdd773d8bfb3deeeee43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:11:10:b1:e7:2a:f9:a6:a0:80:00:57:67:
cb:41:2a:d8:e7:47:92:05:1e:68:65:b0:5b:29:68:
5f:9f:10:4b:5d:86:d4:be:1a:70:bb:c5:aa:f8:d5:
aa:6c:53:17:a7:2e:3c:fb:e8:cb:bd:d9:0f:ca:83:
23:03:94:e0:7f:05:e9:16:61:e9:36:f9:81:d1:a8:
35:96:7a:49:92:6c:e2:ea:14:5b:1b:12:89:8a:07:
0e:81:90:41:bf:02:a5:23:ac:89:c2:5c:87:84:3e:
ad:2d:17:f5:4f:8e:76:e7:29:76:1c:29:7f:25:22:
f6:57:d7:ce:44:1d:3f:72:0f:d1:05:30:17:6a:e0:
ff:a8:65:8c:0e:f3:be:fe:bc:64:b9:66:20:4e:55:
e8:5d:f5:9c:ed:7f:fd:3c:c2:06:88:4e:d4:1f:c7:
a2:7c:dd:57:46:a4:d2:c7:88:b7:9f:48:99:9d:ca:
5f:be:81:f5:96:1a:e4:bf:1a:37:a8:6b:6b:2a:c6:
fa:90:6f:25:ff:73:62:15:f3:72:85:9c:8b:97:8b:
72:3e:e7:f4:20:78:9f:7b:ca:1b:0e:be:a4:22:1f:
6f:ee:66:81:a3:b2:fa:4a:50:fc:64:d2:7a:53:f5:
25:a7:c6:f2:79:65:46:a5:c8:aa:9a:42:86:0a:3c:
e0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:28:8A:05:F1:1B:C9:39:B8:E4:CD:D7:73:D8:BF:B3:DE:EE:EE:43
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f7:93:79:61:a8:87:58:07:cf:b9:63:18:b9:a6:3b:77:92:
9b:fa:12:27:3d:62:8b:17:ac:fb:fa:b4:3f:a8:c2:d8:fc:63:
85:e1:2c:91:f8:1d:78:e0:1a:b5:94:35:16:45:1f:1d:ef:49:
5f:10:f8:6e:db:8d:cd:b7:73:17:cc:fc:3e:ca:c9:02:e0:b8:
a4:25:b3:a5:5f:6f:3b:0f:70:1b:8c:da:35:a9:cf:81:7e:7e:
0b:09:6f:61:e2:6d:7f:41:b9:9d:c7:1e:7f:75:cd:b5:42:75:
b8:0b:17:e5:42:83:d5:ec:fa:78:53:8e:4e:d9:24:ec:cd:f9:
3b:0a:99:52:27:ad:da:54:bb:5e:22:82:3b:6b:3c:7a:55:4e:
1a:c1:5c:53:fb:19:57:a5:b2:8d:0e:cf:d4:8f:1d:84:03:c8:
50:65:2f:d8:db:42:85:13:14:70:19:e6:89:c1:81:1d:21:34:
33:94:50:a1:38:8a:da:03:72:78:1a:3d:36:89:1a:27:23:7a:
bb:be:42:c1:0c:60:e5:dd:aa:86:4d:c5:06:af:01:6e:18:46:
ee:d1:5e:0d:05:7b:ae:e7:c5:ca:a6:cd:7c:53:20:17:50:08:
01:a4:e1:6a:08:5b:78:45:5f:bd:63:06:65:b8:7b:e5:ab:52:
9d:05:05:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:56:09 2026 by rpki-client