Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier: oKLw8TOvP/P8FHh/1FMqQWP6Rbw5i6La9U2xIpO2SXg=
Subject key identifier: CF:84:F5:E7:47:20:59:AB:21:DF:F7:10:32:5D:DC:98:E2:49:F2:28
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 019D26CD1D55CF7B9D4138E4F91B032AE00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number: 0775
Signing time: Wed 25 Mar 2026 21:01:09 +0000
Manifest this update: Wed 25 Mar 2026 21:01:09 +0000
Manifest next update: Thu 26 Mar 2026 21:01:09 +0000
Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: Ievd43JzoeCEkbnAyrs+396vuDCko6pclEGdyvT7Qek=)
2: JuSXc7ZVBBGZXnDq-To8XVkAvig.roa (hash: /cuVo97iW83fjQf6bGYtrLtSHZqgpkHovYO/W3VrbBk=)
3: QpiOjtqqn3KLmCsEJyklJCGXtrE.roa (hash: FMtgXOF3ndtdUEWRQlHxouObzXHzScpjOr9+4JvRDuQ=)
4: bSrLj4dk7vC2yPiiS4puv6QDMCg.roa (hash: b2kWSMTdmZr8cROp9MUUr9c5xUNnNn9tLEdsg0Fja3c=)
5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=)
6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=)
7: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=)
8: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=)
9: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:1d:55:cf:7b:9d:41:38:e4:f9:1b:03:2a:e0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Mar 25 21:01:09 2026 GMT
Not After : Mar 26 21:01:09 2026 GMT
Subject: CN=cf84f5e7472059ab21dff710325ddc98e249f228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:e7:28:c2:2f:6b:e7:31:57:51:ff:c5:3e:
3e:76:e9:69:23:74:15:b9:88:60:76:40:82:0f:c6:
09:58:42:84:bf:ae:28:e6:6c:b7:58:87:9d:9e:0c:
c3:49:3e:d1:2c:6b:21:59:50:f8:47:5e:33:43:f7:
0f:da:01:92:a8:c0:42:93:bf:fe:48:29:80:28:f7:
7e:47:c9:c3:c7:39:f4:12:57:8f:e3:77:1a:f3:e8:
72:cb:b0:55:25:7e:c8:89:6c:3e:6d:8f:9a:a9:c1:
07:0b:b5:a0:b6:ea:20:0d:f5:db:c9:7c:02:27:4a:
e0:0d:e0:cd:49:9e:65:3a:ae:9b:92:95:63:a6:cf:
1d:3c:a7:4c:4f:c9:2d:e6:4c:89:13:9e:c3:05:de:
72:f0:b7:ad:4a:41:8e:42:09:3d:b4:04:ec:a8:b1:
f8:6c:ed:9a:81:27:b2:69:89:ef:4b:e0:bc:4d:6c:
8d:0a:9a:c9:ea:c2:ad:43:6f:e6:2e:43:4f:3e:55:
54:f5:c1:6c:61:73:aa:5b:b6:3f:78:4d:d4:5a:26:
ba:20:08:d7:22:70:5d:f5:a0:77:25:00:d3:a2:52:
ea:0b:0b:48:68:f2:c3:db:68:99:a1:b6:00:61:d9:
e0:62:ba:c5:67:28:26:3c:59:4e:e9:53:de:15:c0:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:84:F5:E7:47:20:59:AB:21:DF:F7:10:32:5D:DC:98:E2:49:F2:28
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:31:5c:bc:88:65:1e:71:ab:ed:19:8d:39:3f:1c:b1:7d:93:
f3:fa:b9:90:f2:65:5d:2f:66:70:8f:f8:b0:11:c0:df:37:c7:
71:ec:dd:99:32:7d:c9:19:d1:29:63:fd:99:e3:6b:d3:cd:4b:
81:db:e5:9d:c1:75:54:2e:fa:f2:02:2f:80:8d:f5:14:96:31:
f9:ac:86:4c:39:35:80:b9:35:4a:c9:e0:22:40:7b:bd:41:ce:
3a:09:9e:0d:db:25:b1:e1:6e:7e:ca:64:3d:04:61:35:25:ec:
f8:27:95:3f:78:bf:4a:2e:b0:51:7e:de:f7:5d:4d:3d:ed:da:
9d:30:f9:90:9f:a6:9b:70:c6:66:da:c3:6f:6e:04:0d:32:8b:
e4:aa:cb:58:76:a7:fd:3f:09:42:98:25:8f:d7:e3:a5:b7:09:
aa:2c:5c:34:37:91:5d:c5:c7:f7:4e:90:60:20:db:0f:f7:3e:
f2:7b:51:3b:aa:93:31:5d:07:ba:1e:f0:e0:21:16:dd:73:39:
1f:b5:0d:0b:14:5d:bb:60:d8:07:23:2a:e9:e9:a1:d7:05:20:
85:7b:84:59:1e:dc:49:11:d8:3f:0b:57:68:d3:b2:a3:b1:9d:
a6:58:3c:17:e4:c8:6b:5b:5e:e1:7b:c5:f3:65:9d:4b:e1:15:
90:ec:ef:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:02:22 2026 by rpki-client