Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: SR1TZKW2Viy84X+YkWjVd1LWQrIF4G535ZpAj4Zy70A=
Subject key identifier: E0:E4:B0:13:92:4D:9D:19:E7:1D:21:2B:FF:AD:22:4B:7A:BB:86:1D
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 019CAB6B8430FBF1645C7C806DA3377E8014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 1230
Signing time: Sun 01 Mar 2026 22:01:15 +0000
Manifest this update: Sun 01 Mar 2026 22:01:15 +0000
Manifest next update: Mon 02 Mar 2026 22:01:15 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: Eu1rNF/bMc4SerF7iOzoqEX4GvYlokNbT5GV5rVQJzI=)
2: 8q9oSsZ4UYUMrh0rSwaxnqwZWJ4.roa (hash: UZuk/CP3WSM3LGuW3AkAPL5k1plOMJu2aZscVLHOeSY=)
3: B1oGCbp_lCKqrih8ynGfv6BUSjw.roa (hash: ZEKfqtdqNld+YDkZ9QlGUoE8oCQ7PZGkrXbAphwgc1E=)
4: WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa (hash: p/GOCcmj2ID1uwRfM042pGyDP5xNtN4A8xvh5ei0x1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:84:30:fb:f1:64:5c:7c:80:6d:a3:37:7e:80:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Mar 1 22:01:15 2026 GMT
Not After : Mar 2 22:01:15 2026 GMT
Subject: CN=e0e4b013924d9d19e71d212bffad224b7abb861d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:bd:c5:b7:37:a7:5d:00:1a:da:0a:3a:b3:
2e:b6:e3:7e:02:ba:6a:f6:ca:75:fb:de:b7:29:f8:
f0:94:cd:aa:3f:59:83:c6:05:bd:6c:d8:d7:4a:03:
f6:af:94:e1:a8:c9:c4:e1:3c:9c:97:b7:75:c3:e7:
35:07:62:9c:83:34:99:2c:6c:0a:fc:15:1c:52:59:
f5:dd:c6:8d:73:a0:64:2d:21:40:77:c6:c2:b5:3f:
1d:20:1e:cc:9d:cc:16:ea:29:b6:34:77:39:19:47:
17:5a:c1:1a:cd:9d:a6:4a:64:70:49:90:13:7e:9e:
32:a5:18:bb:a8:f6:e3:4d:3a:28:e3:27:f0:11:f1:
7c:15:2f:f9:fd:2e:d6:d5:4a:10:77:ff:9d:34:71:
6f:6b:9d:8a:fe:a8:1f:9f:61:fa:ff:e5:d5:f0:89:
25:a6:41:68:44:37:0e:95:00:e1:74:69:dd:34:c7:
ef:4c:fc:86:8d:d5:d4:27:df:8a:8f:23:cf:af:8e:
0c:5c:94:08:16:45:d5:9c:38:03:1e:d7:a0:53:ab:
52:db:62:65:76:bb:f8:f0:86:bd:7c:b8:30:2f:1a:
33:17:f2:75:0e:28:0d:d1:eb:94:91:c3:e5:b4:60:
dd:86:81:a8:ea:cf:cf:bb:1b:92:84:1b:10:be:59:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E4:B0:13:92:4D:9D:19:E7:1D:21:2B:FF:AD:22:4B:7A:BB:86:1D
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ab:2f:58:2d:44:fd:1e:f9:b9:aa:44:51:7d:d4:bb:6d:63:
50:4f:79:8c:b8:85:fd:ff:7b:73:87:21:31:26:d3:02:75:91:
5a:ce:11:6e:c1:85:b4:da:80:25:98:ea:79:44:7e:bb:69:b3:
86:a5:66:62:00:69:09:3f:1a:be:ba:9f:9b:80:ad:50:22:ff:
ec:cf:55:e2:f1:7c:ad:b5:d0:7a:6a:ea:89:ec:03:4b:a3:4f:
a2:a8:fc:ca:67:c2:8e:17:e7:af:22:ee:23:9f:99:65:69:24:
84:45:5c:1b:43:07:9a:27:eb:55:e8:b6:a0:be:4c:1a:0b:45:
1a:8f:e2:25:d9:98:32:ce:73:fc:67:79:9b:5a:27:1c:34:29:
ca:4e:f7:12:c0:60:7e:d0:7b:bb:1a:83:d5:87:d8:0b:1b:90:
17:ef:ec:18:d0:0e:21:72:67:08:f6:41:bf:a4:af:89:59:f5:
48:40:5e:13:56:10:c2:fe:8d:62:d9:09:fe:9b:08:26:29:1b:
73:44:73:3b:62:bf:47:2a:73:33:f2:97:f3:20:c1:00:ab:86:
02:f7:ae:41:7a:db:57:d5:f6:30:03:76:0a:2f:7a:61:2d:b4:
b2:c3:87:3d:60:8b:cc:e1:17:fe:f0:38:fd:0f:7e:fc:35:56:
8e:71:8d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:44 2026 by rpki-client