Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier: uumUO9eSmvmC1Bp4nJl+4cjc8yuBbBXwLi7AzFSxFJA=
Subject key identifier: 7B:E8:5D:4B:1A:9D:C5:6E:88:93:3E:99:38:22:09:2E:72:02:88:4E
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial: 01A0D727DFD21762034B19ED1E7E76E61BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number: 137D
Signing time: Fri 25 Sep 2026 06:01:49 +0000
Manifest this update: Fri 25 Sep 2026 06:01:49 +0000
Manifest next update: Sat 26 Sep 2026 06:01:49 +0000
Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: 22hfdbNecVF1KZY7ppmvlpasCo5wAH/FeXvlmzlazj0=)
2: a_2N7up7ge72iNFxhl27xYnKU30.roa (hash: j+RQUmxlIxzBlFZ8oJHxFEDFDPjNQtLyOqFD3f2oy3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:df:d2:17:62:03:4b:19:ed:1e:7e:76:e6:1b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Validity
Not Before: Sep 25 06:01:49 2026 GMT
Not After : Sep 26 06:01:49 2026 GMT
Subject: CN=7be85d4b1a9dc56e88933e993822092e7202884e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:18:e7:e8:36:76:b8:b7:30:5c:cf:23:80:
f5:23:94:2d:b5:c2:57:dd:3c:22:b9:80:bc:a7:8c:
45:73:38:8f:3b:7b:ed:e4:bb:a7:80:d3:1d:d2:5a:
c2:14:64:e8:ed:e0:78:2c:74:e1:b4:08:d8:42:ff:
aa:f3:45:b4:24:55:64:ba:b0:76:ff:58:c6:a1:bf:
d8:86:e4:71:8a:3b:14:c4:8a:4d:9b:85:3f:f1:5a:
49:65:a2:14:2b:07:96:b0:3a:43:57:09:4e:8e:d5:
39:80:d6:a6:a8:2c:5f:33:51:e5:b3:f5:1f:f3:df:
fc:8c:da:87:f4:0b:ef:ba:ef:2f:bf:bb:47:0f:80:
1b:4e:79:04:c8:f8:d0:eb:c9:97:82:14:18:5d:f8:
22:f4:95:55:bd:da:7c:f0:8b:bd:74:9e:6b:d6:43:
c7:d3:c3:04:09:22:11:9a:d2:1e:c5:73:c1:36:c3:
21:81:da:4a:d2:6b:2e:0e:a6:b9:ac:da:b1:53:d0:
bc:32:fa:87:3f:06:44:69:34:36:45:53:54:1c:73:
b0:1a:23:06:d2:c9:5a:5b:7f:84:33:94:c3:9d:e4:
d2:ba:4a:54:56:c2:07:56:8d:d8:47:c0:e3:d2:34:
1c:86:82:f7:ac:be:da:78:ef:e9:37:f3:c5:db:8d:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E8:5D:4B:1A:9D:C5:6E:88:93:3E:99:38:22:09:2E:72:02:88:4E
X509v3 Authority Key Identifier:
keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:76:7f:33:4d:5a:fe:fd:df:e0:6b:b1:60:58:ea:a3:b5:ff:
4a:f5:b1:0d:33:20:83:a6:81:56:84:6c:6d:37:6b:1a:44:15:
dc:f6:6f:00:8b:78:67:6a:88:4c:01:7d:34:c5:76:b3:df:3c:
d3:9c:32:19:d9:5c:45:3c:e0:3b:42:5c:50:52:42:24:12:ab:
a8:cb:07:73:7a:2a:d8:ef:e0:5c:b8:4f:c8:1a:9d:e0:bb:c9:
65:35:be:77:3e:21:5b:db:b4:91:54:3c:b7:18:52:7e:10:e9:
b9:e8:ee:27:74:34:ab:29:a0:a7:a3:76:5b:6d:73:74:ae:54:
bc:fc:c4:75:eb:77:3d:bb:3c:36:40:dd:1b:5a:41:de:f8:32:
af:9a:01:20:c8:62:d9:ea:a4:f0:58:3e:31:1c:c0:54:84:ea:
10:93:3e:f5:1f:b5:fd:30:7c:33:16:fe:22:7e:dc:e6:e0:7c:
30:43:df:ca:ce:11:48:56:f7:8b:c8:78:e1:7c:7f:92:97:5d:
89:c9:c8:fa:8c:78:43:60:68:8b:71:66:f0:65:29:a5:84:af:
2b:74:4e:96:be:a8:10:6a:5b:ae:9a:39:4e:d4:81:c4:72:9b:
b2:bb:8b:f6:7f:99:8c:b7:ad:c2:92:27:38:69:60:8a:c5:3d:
ac:56:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:20:00 2026 by rpki-client