Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: ClqjezzVCcTlZPtsGE1iV+PhEktHoyCA5M1XsWGJ83g=
Subject key identifier: B9:F3:34:A6:FC:20:B4:AA:C0:3F:99:5F:07:9E:89:32:23:97:8D:2E
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 01A0DA2900D747F599CA230574B675E4551F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 13D7
Signing time: Fri 25 Sep 2026 20:01:55 +0000
Manifest this update: Fri 25 Sep 2026 20:01:55 +0000
Manifest next update: Sat 26 Sep 2026 20:01:55 +0000
Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=)
2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: sea/Wn+1v9T143m5Lx0IubcHtVdW1s68MOEVM1s5hYw=)
3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:29:00:d7:47:f5:99:ca:23:05:74:b6:75:e4:55:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Sep 25 20:01:55 2026 GMT
Not After : Sep 26 20:01:55 2026 GMT
Subject: CN=b9f334a6fc20b4aac03f995f079e893223978d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:e3:f0:1f:fa:be:dd:38:2b:3d:48:9d:05:
81:12:ed:c4:fe:61:60:b0:8f:88:a3:2a:55:cf:01:
b4:76:26:e9:e9:8f:ea:64:9a:94:ef:de:3e:16:a0:
f0:19:ba:53:3d:46:d7:34:aa:66:f0:b4:f3:97:dc:
d8:f7:b8:82:e7:9e:11:78:82:b8:47:ef:db:f7:27:
61:30:bc:89:14:01:f2:5f:8d:03:89:7f:77:aa:bb:
33:4c:14:08:98:32:f2:f1:81:65:19:9a:81:16:62:
7b:49:28:b3:cf:19:b4:e5:f4:3b:76:f4:3b:31:e6:
ed:15:19:da:79:29:42:ae:27:0d:b4:e1:42:83:33:
58:24:30:ba:09:30:f2:b0:74:04:f9:98:53:11:bf:
0b:be:e5:cc:71:ae:e2:0f:ab:ba:1a:69:db:af:c1:
e4:a4:a0:e4:ba:61:3e:23:66:38:5d:a7:21:04:36:
41:b5:8a:c0:ad:fb:7a:2c:98:19:16:5a:f0:7d:9b:
3c:58:b8:6a:98:50:1d:de:c0:fc:a3:9f:eb:81:e7:
19:9f:89:f0:19:43:8d:9d:8b:92:dc:33:09:cc:35:
0e:01:f2:08:6f:5d:d7:76:7a:1c:01:2d:a0:23:7b:
ad:6c:c9:20:59:7f:0e:d4:80:cb:90:e9:fb:64:78:
d5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F3:34:A6:FC:20:B4:AA:C0:3F:99:5F:07:9E:89:32:23:97:8D:2E
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5f:64:cd:de:db:ed:44:01:a6:3d:b9:32:f3:29:52:ff:2a:
eb:22:4d:d1:38:33:5d:f9:33:47:27:00:bb:ba:52:45:62:32:
6a:a5:d7:7e:a5:0e:39:38:30:69:a5:5f:9f:8c:6b:fe:5a:b7:
d0:ff:03:f6:76:c2:35:51:36:a4:de:a0:39:b5:b6:61:1f:5e:
7c:80:e0:8a:91:bd:c1:e0:cc:f5:35:e7:72:21:73:37:cf:ef:
b1:d7:e2:10:74:b5:af:ec:4d:35:09:a5:57:9f:be:7e:93:5d:
eb:c9:7a:b1:63:c1:f5:65:54:e1:71:d1:ca:d5:bb:90:90:f8:
37:ba:87:12:be:b8:fc:44:e2:f4:b0:64:16:10:8d:d5:75:f8:
c7:47:4e:b1:e4:55:5b:f7:c0:3c:7e:bf:e8:77:ed:c3:a7:77:
a6:d4:03:70:14:47:af:49:06:8f:6a:3c:5b:b4:d8:60:de:f6:
7f:e9:be:8b:15:a7:b6:3e:c8:28:c3:c7:cf:db:09:2c:3b:39:
e7:2e:5e:2a:be:75:f6:72:60:b7:58:1a:51:8b:57:5a:e2:17:
bb:20:54:76:66:8c:48:f5:8a:01:49:3c:4a:fd:cf:2f:6a:37:
66:ee:57:ec:cd:8d:47:5f:5f:f1:29:1e:15:86:92:dd:6e:b1:
5b:f4:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:30:29 2026 by rpki-client