Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: pWoPfStWxK6dWti0Ot0k4FHHIhP4nLHoq3iZSMqpJ/o=
Subject key identifier: E9:E8:6B:66:2B:6D:0C:F6:1C:B0:64:5A:CD:99:F9:EB:F6:87:8A:56
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 019D98F447265E78D15DC2CD7D647426B027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 12AB
Signing time: Fri 17 Apr 2026 01:00:38 +0000
Manifest this update: Fri 17 Apr 2026 01:00:38 +0000
Manifest next update: Sat 18 Apr 2026 01:00:38 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: IhyNIcjmFahZEsjACz/PjVUln/YeQmtar7e0p0Niee4=)
2: 8q9oSsZ4UYUMrh0rSwaxnqwZWJ4.roa (hash: UZuk/CP3WSM3LGuW3AkAPL5k1plOMJu2aZscVLHOeSY=)
3: B1oGCbp_lCKqrih8ynGfv6BUSjw.roa (hash: ZEKfqtdqNld+YDkZ9QlGUoE8oCQ7PZGkrXbAphwgc1E=)
4: WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa (hash: p/GOCcmj2ID1uwRfM042pGyDP5xNtN4A8xvh5ei0x1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:47:26:5e:78:d1:5d:c2:cd:7d:64:74:26:b0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Apr 17 01:00:38 2026 GMT
Not After : Apr 18 01:00:38 2026 GMT
Subject: CN=e9e86b662b6d0cf61cb0645acd99f9ebf6878a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:c5:61:5d:a6:ab:18:b0:7f:4e:93:c7:62:
40:08:c5:08:b6:71:d2:e3:6d:4c:d5:41:35:21:d3:
ca:f6:41:4a:be:b3:4f:23:fd:f0:64:62:8a:db:3a:
07:9b:4f:20:21:81:1e:93:0f:88:a0:e9:93:ce:a4:
3a:db:3c:79:3e:3b:84:71:47:07:ad:1b:2e:8b:ad:
f6:97:d4:1a:4b:86:85:1c:4e:3f:84:a1:b4:13:3a:
49:ce:b9:e9:3e:96:eb:3d:d0:fa:12:d7:82:ee:7a:
1a:4a:59:41:de:20:75:fc:5e:1d:10:e0:31:cd:3f:
a8:6f:26:f9:0b:3d:9e:cb:b4:87:e9:b4:55:04:20:
91:24:5d:9a:5a:3d:e5:0a:aa:fb:7d:f5:95:c6:2a:
37:20:98:39:62:9c:c1:b6:5b:6c:90:e5:d7:df:5f:
8a:9c:83:c6:8e:81:10:86:05:4e:0d:ec:72:96:7d:
3e:5d:fc:98:a1:0e:8a:26:bf:c3:26:23:23:ae:f3:
c1:ef:ff:38:9e:fc:50:75:43:98:21:55:43:e3:3f:
c9:4f:79:63:4c:eb:21:d4:b1:e8:61:d8:f8:c0:37:
67:c9:1a:9c:82:d1:a5:35:3f:9a:09:43:78:a9:e3:
04:4c:cf:20:55:40:86:7b:80:79:08:9a:1b:45:41:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E8:6B:66:2B:6D:0C:F6:1C:B0:64:5A:CD:99:F9:EB:F6:87:8A:56
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c4:3c:67:fe:58:09:b2:6e:02:3f:40:df:7a:4b:78:5e:f9:
ea:47:5c:1c:25:7a:29:a9:05:fa:a6:75:4a:8d:b7:29:18:18:
b4:ec:9e:8e:5e:c4:e7:09:c6:ac:a2:35:55:65:13:22:12:e5:
cf:e1:33:74:5d:88:96:b8:71:a2:3a:ea:6d:77:27:f2:9c:3b:
25:dd:d9:78:35:be:4c:45:f6:de:5b:14:d5:a9:3e:6e:d7:43:
0d:0a:36:62:fe:c3:6e:7a:ce:63:15:50:cb:8b:11:e4:bb:52:
0c:c7:32:29:e9:ee:e2:f0:49:a7:ad:48:b4:0a:ba:1a:ba:52:
a8:0e:d4:1e:5a:21:4a:2f:e8:75:bd:ee:bc:88:31:39:ef:a2:
11:6f:94:45:d3:d0:97:18:84:5e:35:f0:66:2b:60:55:83:e3:
71:d5:0f:0b:1f:3e:66:c8:7e:0f:f9:09:55:8e:86:5b:9b:d2:
d7:7e:01:ee:10:e0:33:07:8c:ac:9e:1f:69:55:eb:36:d6:1b:
82:6f:ed:19:d2:2a:18:20:08:e1:4b:1f:cb:6f:7d:68:38:ac:
6e:8b:bd:7f:a2:43:82:41:8d:e9:c7:d5:cf:5b:03:96:4e:92:
de:09:b9:51:bd:85:d7:39:82:f6:87:78:d1:20:82:92:43:66:
3c:f0:f0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:14:36 2026 by rpki-client