Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: TmBMppKEKa3zEZLGpts2UMlZdRnfiYE0uLn3A9CdlGo=
Subject key identifier: 8B:B6:75:D3:E6:19:6B:97:91:09:58:7F:60:1E:2C:D9:C3:1E:E3:25
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 01A0C7EAF40F3692DD8D94FA498C6E8A3A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 1451
Signing time: Tue 22 Sep 2026 07:00:58 +0000
Manifest this update: Tue 22 Sep 2026 07:00:58 +0000
Manifest next update: Wed 23 Sep 2026 07:00:58 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: Apc/iUKTKYFRr3vit76hJiZwgu+U0J8QbJ4KPqLvFOE=)
2: 8q9oSsZ4UYUMrh0rSwaxnqwZWJ4.roa (hash: UZuk/CP3WSM3LGuW3AkAPL5k1plOMJu2aZscVLHOeSY=)
3: B1oGCbp_lCKqrih8ynGfv6BUSjw.roa (hash: ZEKfqtdqNld+YDkZ9QlGUoE8oCQ7PZGkrXbAphwgc1E=)
4: WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa (hash: p/GOCcmj2ID1uwRfM042pGyDP5xNtN4A8xvh5ei0x1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:f4:0f:36:92:dd:8d:94:fa:49:8c:6e:8a:3a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Sep 22 07:00:58 2026 GMT
Not After : Sep 23 07:00:58 2026 GMT
Subject: CN=8bb675d3e6196b979109587f601e2cd9c31ee325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:d7:3e:25:1a:64:de:59:d7:c0:12:15:ae:
3e:95:d4:6d:ab:3c:17:ab:33:80:a7:4c:d0:99:43:
d5:b7:c3:78:c9:a3:7c:fe:3a:ab:60:ce:8b:02:15:
24:b3:99:78:89:fd:4d:74:61:91:1e:4c:0a:b6:1b:
83:a8:1a:29:f4:f2:f5:23:7f:5c:9f:38:3a:d0:5c:
72:80:19:c6:5a:33:5c:3d:0d:26:5a:31:0a:e7:ae:
14:86:76:bb:84:77:57:46:aa:93:55:e6:2f:e3:79:
6c:f5:11:1f:37:3f:dc:18:87:7e:03:b6:b8:84:98:
29:2b:15:b7:d9:73:ca:14:22:4d:27:a7:fd:26:91:
56:76:a9:7d:c9:ea:3c:6e:66:7d:d9:16:64:a8:d6:
a8:5c:78:69:b9:ef:e6:a7:16:0b:66:d2:39:df:e7:
ad:6b:23:90:78:ea:ef:d3:01:ff:42:ba:29:23:72:
4c:ef:0d:31:e3:89:7c:71:95:27:72:5d:4c:72:77:
51:bd:87:09:51:6a:4e:d5:d7:f3:83:24:68:7c:28:
09:19:d5:cf:e2:9f:49:a0:bf:08:52:8d:1f:5c:11:
0f:23:c4:e9:9c:cb:f2:75:ad:fa:45:d8:ef:ba:4f:
04:b8:25:6e:3f:6d:8d:be:9c:fa:89:88:50:75:76:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B6:75:D3:E6:19:6B:97:91:09:58:7F:60:1E:2C:D9:C3:1E:E3:25
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ce:40:8e:19:3f:1e:5b:ed:ab:15:3b:3c:a5:74:ee:ef:8f:
46:86:76:42:d6:67:00:15:60:c8:5d:4d:08:46:22:ca:df:80:
cf:a4:4b:ed:bf:b5:f0:ac:6b:ae:44:b7:0e:2c:73:74:95:9f:
e7:0b:d9:b5:8f:fd:f1:f4:ad:ef:4b:e0:90:aa:2b:2f:3a:dd:
96:af:98:d2:f5:c2:b1:ef:e4:71:b5:1b:2e:62:2c:fb:ce:9c:
06:ae:8d:48:c7:44:4a:96:45:9a:fb:a9:62:a7:65:af:93:f2:
e0:b4:51:bb:3c:0a:76:47:da:0a:2f:b7:4c:23:48:a9:22:51:
97:3a:ca:57:09:f9:59:15:ed:be:00:4c:50:53:ff:e7:27:cd:
02:55:66:47:07:68:bc:9c:2d:1f:12:a0:0d:c6:52:5f:9c:fe:
8f:30:7c:03:48:3d:4e:0b:d0:a5:e5:20:c6:4c:d3:14:dc:4a:
c5:bd:80:10:ca:dc:22:f2:6c:93:d6:51:9c:3a:e6:ae:36:27:
78:dd:01:a1:75:95:fe:f1:ac:ad:85:c9:ef:b8:ce:b0:cc:c3:
a3:91:58:f1:04:44:04:76:65:f0:f1:e8:2b:ea:e1:28:94:ae:
74:c8:a1:04:fd:4c:ba:0b:f1:5e:8f:c4:36:2f:7d:9c:a0:78:
1c:d5:d0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:14:07 2026 by rpki-client