Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier: HJdR4jGcS40AJHNkHIJImU7XrmLi9UMYP5Y1DS+/zZA=
Subject key identifier: CE:09:58:1A:20:88:61:9F:C4:17:7F:8B:EA:41:7C:8C:26:CF:E5:05
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial: 019D28BB93DFC0AD4B03CCC4A112C5551AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number: 1195
Signing time: Thu 26 Mar 2026 06:01:14 +0000
Manifest this update: Thu 26 Mar 2026 06:01:14 +0000
Manifest next update: Fri 27 Mar 2026 06:01:14 +0000
Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: 2ELDYQ9mrCd3UZrNoCZmsj4VFCsXggtYOYPLSXfa6Hw=)
2: a_2N7up7ge72iNFxhl27xYnKU30.roa (hash: j+RQUmxlIxzBlFZ8oJHxFEDFDPjNQtLyOqFD3f2oy3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:93:df:c0:ad:4b:03:cc:c4:a1:12:c5:55:1a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Validity
Not Before: Mar 26 06:01:14 2026 GMT
Not After : Mar 27 06:01:14 2026 GMT
Subject: CN=ce09581a2088619fc4177f8bea417c8c26cfe505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:9d:af:87:ff:35:d7:1a:da:52:b5:ac:eb:
52:80:44:bc:53:60:f0:a3:6b:c4:54:43:e4:f2:82:
8c:c8:22:e6:33:25:bc:4b:2c:dc:e2:f6:18:b9:2b:
f2:d5:31:97:8f:b8:cb:da:c9:08:7e:65:a0:35:18:
22:d0:e0:bb:58:ea:fa:7d:38:71:32:b5:0c:4f:a4:
e3:e4:ec:f2:12:d3:ae:7c:0d:5a:e4:07:38:cf:46:
96:95:87:16:62:6f:9d:81:a9:33:75:ff:af:69:5a:
54:0a:a8:86:be:b4:14:d6:1b:94:4b:e8:cb:f9:6c:
e0:2e:6b:d5:11:a5:14:d4:5d:c3:96:71:ab:1e:b6:
70:be:41:2f:61:b9:c2:73:7a:6e:a0:fb:1d:19:8f:
23:c2:92:5c:dd:8f:08:59:fc:c4:89:e5:2f:cb:b6:
ed:e2:1f:cf:81:53:84:48:05:a7:2a:23:26:84:ff:
b5:be:7f:9f:e6:fa:aa:3c:01:8c:9d:0f:29:52:e2:
89:ed:17:77:80:95:84:ca:c9:02:16:08:44:ec:cd:
bc:59:ee:a3:27:57:dd:5c:c9:e3:5b:13:12:4a:32:
a7:e3:a6:e1:4e:24:64:35:8d:0d:b1:16:29:d0:41:
62:38:f0:5b:dd:06:b8:fe:ef:4f:4c:07:e4:36:f6:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:09:58:1A:20:88:61:9F:C4:17:7F:8B:EA:41:7C:8C:26:CF:E5:05
X509v3 Authority Key Identifier:
keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ea:44:f0:f2:b2:f0:47:f2:79:ff:77:c7:6b:3f:c5:a7:06:
06:f0:ec:42:b1:8a:7e:2c:e5:ed:24:24:4e:66:2b:fc:d5:e5:
9b:d1:6c:f8:40:73:c4:82:84:7a:5c:4f:5f:d4:e7:40:b8:c1:
d6:38:11:06:04:6f:88:65:b0:1b:52:10:b7:17:c3:f6:59:09:
84:c2:8c:77:55:19:4d:c7:3d:38:6a:35:34:3e:80:ad:d9:ca:
b8:0f:17:d1:9f:86:6c:c1:13:71:16:76:82:89:c8:73:95:3f:
ac:5c:7a:5c:b1:31:d2:77:28:96:c4:34:4d:14:a6:53:1f:9d:
5f:2f:2a:72:09:b0:f7:8c:e5:bf:b1:12:c2:89:aa:fc:ba:9a:
5a:de:b6:39:cb:ae:6d:bc:c1:0a:53:48:80:bf:eb:8c:27:cc:
21:35:dd:3d:53:76:96:ed:71:46:66:42:c5:4b:80:ca:ae:a5:
7f:35:a9:1d:4b:28:2a:04:28:5e:a9:94:be:66:97:df:91:69:
87:10:b0:e9:d6:ae:f8:76:14:b7:9d:20:96:d1:8f:63:a1:46:
be:c2:46:ba:f6:87:a3:3d:8d:a6:b2:23:f0:3e:9a:de:56:e2:
fb:e2:a5:db:3b:36:23:3a:2f:ad:68:33:06:39:eb:cc:52:5a:
e1:d1:0c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:25 2026 by rpki-client