Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: CdkywNUfM75+N33zojIGw+OOoxpHOztTJGnyzbBdSJc=
Subject key identifier: E8:F9:1E:54:00:59:8D:A0:44:68:96:03:F9:6F:47:21:F1:B6:84:7B
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 019EBF5A6B749EA2F40639B3CC643868B982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 12C0
Signing time: Sat 13 Jun 2026 05:00:34 +0000
Manifest this update: Sat 13 Jun 2026 05:00:34 +0000
Manifest next update: Sun 14 Jun 2026 05:00:34 +0000
Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=)
2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: 9UW6TynRV1xb3PMeVieC5GHi077HJUMrOzLI+A4ojJI=)
3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:6b:74:9e:a2:f4:06:39:b3:cc:64:38:68:b9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Jun 13 05:00:34 2026 GMT
Not After : Jun 14 05:00:34 2026 GMT
Subject: CN=e8f91e5400598da044689603f96f4721f1b6847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:aa:a3:44:6a:d2:dd:ca:3c:da:c3:41:45:
ce:7e:4f:72:24:3f:89:ce:63:15:90:72:71:cb:f5:
14:d6:66:41:30:28:5d:35:3e:ff:a8:43:89:15:39:
1e:90:16:84:cd:95:c1:4c:06:be:2b:60:2e:aa:4e:
59:1d:52:72:a4:ba:50:d4:80:a8:1d:33:02:53:f6:
0d:03:1a:44:a9:a0:6b:27:6b:fb:6f:b9:a0:79:e6:
3b:c3:c8:8a:3e:86:82:9d:4a:70:b2:57:9e:db:1f:
2e:a3:3d:b5:1b:47:0f:61:20:82:fd:5b:03:72:69:
30:75:55:67:85:25:6a:6b:46:c5:cb:d4:65:f7:cb:
4c:ff:82:9f:8d:19:60:1c:3a:92:24:a8:6f:90:d1:
b6:e7:bb:df:2d:53:da:ec:73:8e:70:75:84:fc:7a:
e0:4d:db:f8:7c:53:d6:f8:49:51:87:a9:e8:89:18:
c3:6a:77:92:9d:cc:3e:b7:de:c4:d8:01:f6:b1:c6:
cd:c5:01:ac:bc:14:9b:7e:d3:d5:41:14:e7:3d:4c:
56:17:90:1e:56:53:7d:34:d3:11:46:ed:a3:5a:cc:
f6:70:9c:02:27:01:0c:aa:49:0b:86:1f:8c:3f:6e:
f1:ef:27:ea:d7:33:69:b5:43:68:28:2c:d3:6f:0d:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F9:1E:54:00:59:8D:A0:44:68:96:03:F9:6F:47:21:F1:B6:84:7B
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:61:06:8d:28:7b:14:1d:ac:4a:d9:69:4c:69:c4:d0:06:4d:
3a:8a:67:0d:ea:60:27:0a:e3:39:84:41:86:cf:47:30:82:53:
58:3d:b3:93:0c:ce:b6:35:da:ea:70:4c:59:4c:bc:a6:02:ae:
e8:c9:52:93:8e:32:69:fa:e8:ef:05:9e:e4:45:14:c6:18:5c:
34:49:cd:2e:75:8b:02:b3:fc:a4:9c:46:c5:b3:a8:6c:f2:fc:
0a:a8:99:55:e0:ef:af:bb:f7:6a:70:a9:a9:d2:f8:9c:fb:dc:
59:6e:bc:0d:20:bc:5b:5f:26:d4:00:f2:99:7e:78:93:c2:af:
3f:19:14:53:f3:6a:e4:6b:2a:7c:89:82:ba:ef:dc:21:bf:a3:
b7:49:b8:58:d3:c8:90:9d:18:5f:ab:85:a6:07:fd:af:d7:08:
6d:5c:5d:c2:24:15:50:1f:4a:a8:ad:14:81:4c:29:41:5e:88:
98:33:9c:d7:76:e3:50:aa:10:1e:f3:74:1d:81:61:f6:49:82:
19:e7:d2:79:4b:2b:03:1d:ec:ad:f2:4c:9f:5a:06:be:fe:d5:
12:d3:00:53:5e:8c:7f:3f:bf:30:9a:05:18:24:c0:90:ad:3d:
c1:ea:1c:73:da:01:f6:6b:27:98:06:dc:d9:ad:03:03:ca:31:
79:e5:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:15 2026 by rpki-client