Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier: PRk+wLkesW2YztymdmCc80K5myRXcKzsmTBSPSNrn/w=
Subject key identifier: 05:00:CB:B8:E5:BD:FF:30:E0:BE:A6:C0:68:46:FD:01:92:92:58:C8
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 019E1E6C97301210DB8A5E3AAFE58D053C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number: 07F6
Signing time: Tue 12 May 2026 23:01:33 +0000
Manifest this update: Tue 12 May 2026 23:01:33 +0000
Manifest next update: Wed 13 May 2026 23:01:33 +0000
Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: TYvYs4lI5CSC9LJpeODrMY0S9EXlAlUJZb17M7Q+UU0=)
2: QpiOjtqqn3KLmCsEJyklJCGXtrE.roa (hash: FMtgXOF3ndtdUEWRQlHxouObzXHzScpjOr9+4JvRDuQ=)
3: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=)
4: bSrLj4dk7vC2yPiiS4puv6QDMCg.roa (hash: b2kWSMTdmZr8cROp9MUUr9c5xUNnNn9tLEdsg0Fja3c=)
5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=)
6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=)
7: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=)
8: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=)
9: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:97:30:12:10:db:8a:5e:3a:af:e5:8d:05:3c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: May 12 23:01:33 2026 GMT
Not After : May 13 23:01:33 2026 GMT
Subject: CN=0500cbb8e5bdff30e0bea6c06846fd01929258c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:dd:93:51:e0:59:a2:22:78:0a:19:cd:5e:
65:ab:75:52:4c:25:b4:4f:68:f8:c2:8d:7d:39:71:
2b:31:75:5c:78:cc:22:ac:67:da:da:5d:2c:e5:46:
ba:55:b3:d6:68:0d:fd:6b:f5:89:37:4f:e8:a8:c6:
78:8b:c8:04:e8:d9:e3:1c:d0:42:a2:54:b5:a4:b3:
76:55:cf:51:52:b6:32:42:b1:90:0c:78:f8:12:4b:
aa:d8:d7:b8:44:aa:41:ad:47:8c:58:fe:60:75:23:
70:87:11:15:cd:78:82:4d:a2:46:2d:c5:ba:46:47:
29:90:bb:a4:ab:c2:9e:2f:bd:56:c2:db:9f:fa:7f:
19:5f:4a:de:3b:22:2d:34:ee:76:21:77:4e:62:06:
bf:52:6f:47:b4:d0:c9:84:cd:29:56:5b:ce:57:46:
c0:98:10:17:25:3d:70:21:96:52:07:ea:77:6e:35:
59:80:4d:7c:f7:77:30:b1:df:ef:be:b7:8e:eb:9d:
c8:4d:dc:d3:90:6a:00:ed:7d:ee:26:84:db:5d:22:
5a:4c:24:32:7a:3d:62:c0:3b:43:15:7a:ba:35:68:
84:4b:89:ff:4c:83:96:3f:3c:91:8f:57:2f:a3:74:
e7:a5:00:58:ec:59:8e:2e:e0:f2:f6:ec:b3:65:88:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:00:CB:B8:E5:BD:FF:30:E0:BE:A6:C0:68:46:FD:01:92:92:58:C8
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3a:f1:b0:81:e0:32:28:ac:05:ef:96:41:ee:d6:7b:1c:48:
1a:8c:0d:72:c2:61:80:f9:ee:2e:32:9f:1c:59:65:24:89:45:
f6:72:4e:1d:76:35:94:22:52:86:51:d3:0a:95:a9:b0:0c:65:
ed:4e:ae:ca:7c:a3:b4:5e:7b:01:8f:71:29:d9:00:33:50:12:
33:b7:f6:da:f8:dd:a8:2d:d8:1f:5b:e8:04:e4:9e:fd:be:1c:
bf:6f:2c:86:ae:0a:f7:b1:34:a3:93:38:a8:8c:47:b2:c6:c8:
98:20:27:69:2f:05:29:5c:51:49:4d:ad:c5:e4:1c:fc:27:1b:
2d:53:85:13:96:8b:70:3a:11:aa:c5:73:29:31:62:c3:37:a5:
a3:96:05:88:8b:f4:53:ec:b9:10:11:8c:23:64:85:4f:7b:0e:
5e:c6:69:48:aa:1b:d9:fb:bb:ab:85:83:43:32:ed:cc:ed:ac:
20:50:df:db:9a:6d:65:35:08:01:09:40:c7:d6:e7:ae:16:25:
48:84:c2:7c:4b:b7:3d:12:e0:8a:70:8c:45:b3:3d:d9:fd:60:
ba:3c:8e:48:28:59:f6:6d:e0:4d:66:2f:5b:6a:48:1a:a4:0d:
b1:8d:53:05:86:a8:26:bf:aa:16:42:ca:30:13:45:5f:a1:56:
73:15:4d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:35 2026 by rpki-client