Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: MD8V8CN3gE649P+EE1Kj5YvMrYSBEXhtj64ibrRlINo=
Subject key identifier: B1:19:FD:00:A7:91:88:D4:74:C1:52:C3:67:E9:24:64:8C:2D:C7:7E
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 019D27DF836E1B077EE06D631F783925B442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 11ED
Signing time: Thu 26 Mar 2026 02:00:52 +0000
Manifest this update: Thu 26 Mar 2026 02:00:52 +0000
Manifest next update: Fri 27 Mar 2026 02:00:52 +0000
Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=)
2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: 6h3asFihxNyOF4PmcyVr0jdH5huX0Cd+KgGJrmnYjKM=)
3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:83:6e:1b:07:7e:e0:6d:63:1f:78:39:25:b4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Mar 26 02:00:52 2026 GMT
Not After : Mar 27 02:00:52 2026 GMT
Subject: CN=b119fd00a79188d474c152c367e924648c2dc77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f8:ad:eb:fc:03:61:40:b8:b0:5f:65:71:73:
77:d8:93:09:24:d6:ad:8f:11:9a:69:03:63:49:19:
a0:7e:ed:f2:d5:4e:52:d1:9d:e1:d7:71:af:f7:d2:
30:3e:e0:04:e5:bb:1f:16:43:30:c1:cf:48:68:33:
9f:91:b8:f0:28:21:17:d2:a7:44:81:fd:34:bb:2f:
24:8e:fb:6f:81:81:5c:8f:b0:a6:b5:11:47:cc:8b:
3b:cf:e8:dc:02:26:d3:b1:61:2b:d2:ba:68:20:08:
3b:8d:b2:9c:fa:27:0e:a3:9b:81:34:7d:53:77:c1:
a0:38:e7:df:11:44:39:53:76:93:5c:91:8b:bb:b6:
93:db:bd:3b:43:f2:a9:98:45:b1:0f:2d:6b:a0:a5:
01:8a:83:b2:45:97:8f:41:9a:43:6f:09:1e:eb:fb:
af:62:7d:b2:17:d9:7d:68:5e:c8:9a:2e:d3:4e:ae:
84:da:1a:31:e0:0f:2c:d5:74:fb:e9:e3:3f:e3:f7:
b7:a6:e8:ac:6e:c1:3d:24:1e:12:a0:bd:37:d4:d9:
f4:64:06:f7:03:f6:5b:05:16:3f:d5:0d:a8:9a:e4:
7e:72:25:30:1b:07:c7:9f:41:f3:38:16:b3:13:78:
88:4c:71:66:0e:fd:2e:26:92:91:2d:76:d4:a1:6b:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:19:FD:00:A7:91:88:D4:74:C1:52:C3:67:E9:24:64:8C:2D:C7:7E
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:94:99:41:8c:39:7d:eb:d4:79:2e:fb:9f:1b:78:85:07:36:
0d:d4:bb:5c:4b:be:4a:d0:e1:3a:f7:1c:78:9f:f4:90:29:58:
b0:1f:ad:33:38:9e:15:66:fc:63:de:d4:06:16:1e:b6:b1:6c:
89:97:cb:63:21:da:b4:f3:28:a8:de:63:1d:34:af:a6:7e:95:
6f:4f:4a:a6:7e:7d:da:4f:1a:4f:0b:98:34:62:8d:8f:ab:ef:
ed:d6:be:4f:48:6f:39:a6:0e:7b:96:c6:70:3e:fb:e4:48:07:
2c:de:c5:39:97:90:9f:67:9d:9a:78:e0:6b:d8:b5:9d:b0:b7:
9d:70:21:00:53:06:55:70:52:42:69:48:f6:d7:f1:b6:17:e9:
74:ae:9d:51:b8:16:c2:80:b1:00:f1:db:6f:85:ec:fb:21:6d:
83:37:9b:a6:b7:c0:d1:05:68:fc:49:86:3f:35:58:05:e3:9f:
0f:f8:e7:6c:3c:3d:18:51:c0:1a:26:b0:a5:19:01:dd:6f:de:
23:4c:72:32:c1:e3:f8:76:e6:e2:33:02:cb:ba:8b:46:5f:50:
a7:95:a7:ae:35:67:38:53:e5:26:dd:75:1c:25:eb:de:fe:1a:
e4:e5:7f:d0:d1:54:a1:59:4b:db:1b:7a:ed:18:ac:fe:6e:0c:
96:e3:84:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n34NuGwd+4G1jH3g5JbRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzN2UxNzdmNzY2NjMxNjZjNzUxOTBlMmQyMDkzMzVhNmFh
ZTVhY2UwHhcNMjYwMzI2MDIwMDUyWhcNMjYwMzI3MDIwMDUyWjAzMTEwLwYDVQQD
EyhiMTE5ZmQwMGE3OTE4OGQ0NzRjMTUyYzM2N2U5MjQ2NDhjMmRjNzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/it6/wDYUC4sF9lcXN32JMJJNat
jxGaaQNjSRmgfu3y1U5S0Z3h13Gv99IwPuAE5bsfFkMwwc9IaDOfkbjwKCEX0qdE
gf00uy8kjvtvgYFcj7CmtRFHzIs7z+jcAibTsWEr0rpoIAg7jbKc+icOo5uBNH1T
d8GgOOffEUQ5U3aTXJGLu7aT2707Q/KpmEWxDy1roKUBioOyRZePQZpDbwke6/uv
Yn2yF9l9aF7Imi7TTq6E2hox4A8s1XT76eM/4/e3puisbsE9JB4SoL031Nn0ZAb3
A/ZbBRY/1Q2omuR+ciUwGwfHn0HzOBazE3iITHFmDv0uJpKRLXbUoWsDZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEZ/QCnkYjUdMFSw2fpJGSMLcd+MB8GA1UdIwQY
MBaAFIN+F392ZjFmx1GQ4tIJM1pqrlrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjIt
OGJhNzY4MDIyNzYzLzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjItOGJhNzY4MDIyNzYz
LzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZSZQYw5
fevUeS77nxt4hQc2DdS7XEu+StDhOvcceJ/0kClYsB+tMzieFWb8Y97UBhYetrFs
iZfLYyHatPMoqN5jHTSvpn6Vb09Kpn592k8aTwuYNGKNj6vv7da+T0hvOaYOe5bG
cD775EgHLN7FOZeQn2edmnjga9i1nbC3nXAhAFMGVXBSQmlI9tfxthfpdK6dUbgW
woCxAPHbb4Xs+yFtgzebprfA0QVo/EmGPzVYBeOfD/jnbDw9GFHAGiawpRkB3W/e
I0xyMsHj+Hbm4jMCy7qLRl9Qp5WnrjVnOFPlJt11HCXr3v4a5OV/0NFUoVlL2xt6
7Ris/m4MluOE2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:29 2026 by rpki-client