Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
File: 34IML0VYrBCvX1xwucbsJ2OAhOw.mft (raw, json)
Hash identifier: MrDFYZhMkaK/DRiCM1VJworAPS97hLKPal2WgjSUHLY=
Subject key identifier: 0C:FA:CE:E3:E1:6A:62:27:8E:FD:D5:A6:C5:22:AB:C7:77:81:72:AC
Authority key identifier: DF:82:0C:2F:45:58:AC:10:AF:5F:5C:70:B9:C6:EC:27:63:80:84:EC
Certificate issuer: /CN=df820c2f4558ac10af5f5c70b9c6ec27638084ec
Certificate serial: 01A0D502205B068737D186AFD815C5B0C9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34IML0VYrBCvX1xwucbsJ2OAhOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 20:01:21 +0000
Manifest this update: Thu 24 Sep 2026 20:01:21 +0000
Manifest next update: Fri 25 Sep 2026 20:01:21 +0000
Files and hashes: 1: 34IML0VYrBCvX1xwucbsJ2OAhOw.crl (hash: b1w1HyL9dzaHrmTWH5OTVQGWvFl0nBNX3uWC7I7MOW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/34IML0VYrBCvX1xwucbsJ2OAhOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:20:5b:06:87:37:d1:86:af:d8:15:c5:b0:c9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df820c2f4558ac10af5f5c70b9c6ec27638084ec
Validity
Not Before: Sep 24 20:01:21 2026 GMT
Not After : Sep 25 20:01:21 2026 GMT
Subject: CN=0cfacee3e16a62278efdd5a6c522abc7778172ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:48:1f:fe:9d:b8:a5:2b:bf:15:69:87:29:
bb:8d:d5:0e:db:fe:0a:9f:c3:20:8a:3a:fe:57:48:
d4:89:1c:0f:3d:c0:f4:e7:f7:d1:e7:58:35:1e:8b:
8f:b9:7e:de:c1:9c:62:6a:c4:68:0b:82:eb:c5:36:
b0:bf:e4:df:e0:b4:26:82:78:7c:23:4a:4a:21:2d:
2e:22:d6:75:e7:3a:36:2d:bc:e6:c8:70:ab:7c:4a:
a2:a0:2c:e4:3d:69:d9:98:89:03:18:ba:45:a5:5e:
44:bf:17:b7:fa:f9:0e:09:7b:a7:1a:d6:f4:e1:c8:
f7:0f:c3:48:8e:32:82:cd:de:d3:3c:d3:cc:5b:00:
b0:68:96:15:8e:27:3d:a3:9c:32:ee:35:b3:53:36:
f5:81:40:d0:a7:da:bb:57:bb:2d:b7:16:aa:57:8c:
a6:00:4c:1c:07:b1:9d:0b:00:3f:23:30:ce:03:21:
74:b9:e8:6c:bd:4d:cb:1c:2a:1f:5a:6b:f7:9b:58:
50:f3:e3:bc:a3:7f:1a:c9:a8:b4:f5:36:5f:7a:bc:
ec:90:a7:9f:99:25:39:2b:a0:35:84:7e:93:4f:65:
55:4f:db:79:1f:e3:77:05:7e:49:21:83:bc:f4:9d:
87:eb:4b:e4:bb:25:03:7c:a0:b9:ee:9e:67:05:40:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FA:CE:E3:E1:6A:62:27:8E:FD:D5:A6:C5:22:AB:C7:77:81:72:AC
X509v3 Authority Key Identifier:
keyid:DF:82:0C:2F:45:58:AC:10:AF:5F:5C:70:B9:C6:EC:27:63:80:84:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34IML0VYrBCvX1xwucbsJ2OAhOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4b:b7:ae:22:0a:c9:b0:c3:b1:7e:3a:ac:e5:27:d9:34:ac:
52:70:09:bc:d6:ba:d1:dc:5e:1c:66:58:67:06:5b:94:96:cb:
48:58:6c:5c:51:49:ff:93:30:b1:b0:e1:f9:37:cc:ef:d5:13:
c7:d0:ae:6d:e3:28:be:c3:2b:9e:43:3e:3c:fa:60:08:86:a8:
7f:11:75:c5:57:b4:40:b7:78:12:5d:d6:8b:e9:fc:af:93:87:
87:7d:eb:4b:b2:09:56:d1:27:c0:47:2d:1a:47:15:fb:f8:48:
9d:be:5a:0f:f5:54:1e:6c:d5:8f:28:25:5c:53:6f:3a:f8:42:
e6:63:1c:be:a1:7c:9f:9d:71:bc:8e:2d:0d:fa:b4:23:8b:6c:
c2:dd:ba:62:7d:ba:86:df:3b:7f:3b:37:af:1f:0d:c8:1c:9c:
a4:23:5e:8e:64:d4:d4:b9:4f:c0:b7:06:e0:ed:22:f3:01:45:
1a:38:9b:07:d8:b1:d5:42:12:0d:14:bc:3a:ef:e6:6c:1b:a0:
1c:06:23:02:9e:89:0d:64:46:89:c5:4c:40:bb:09:a7:1e:c8:
74:c6:fe:77:57:e0:66:ae:c1:38:14:6e:d1:44:72:f9:28:57:
a1:c7:0e:61:15:4b:df:6f:b7:91:9f:a2:f3:f2:95:b9:dc:71:
d7:f3:47:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:25:15 2026 by rpki-client