Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
File: 34IML0VYrBCvX1xwucbsJ2OAhOw.mft (raw, json)
Hash identifier: XUqdrpuy9yoo5Oz5wPYvl52kNnEJSw7elEBA6evRAvY=
Subject key identifier: 43:00:07:7A:C9:DD:CC:4E:8F:C7:57:F9:2F:F5:7A:91:2C:00:09:63
Authority key identifier: DF:82:0C:2F:45:58:AC:10:AF:5F:5C:70:B9:C6:EC:27:63:80:84:EC
Certificate issuer: /CN=df820c2f4558ac10af5f5c70b9c6ec27638084ec
Certificate serial: 019F8EA24201B0633C303766F985702916ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34IML0VYrBCvX1xwucbsJ2OAhOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
Manifest number: 3E
Signing time: Thu 23 Jul 2026 11:00:26 +0000
Manifest this update: Thu 23 Jul 2026 11:00:26 +0000
Manifest next update: Fri 24 Jul 2026 11:00:26 +0000
Files and hashes: 1: 34IML0VYrBCvX1xwucbsJ2OAhOw.crl (hash: 0XQujE3NAjTraiCHALzQYug0kWKtLdjBvTLnhzPsHaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/34IML0VYrBCvX1xwucbsJ2OAhOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:42:01:b0:63:3c:30:37:66:f9:85:70:29:16:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df820c2f4558ac10af5f5c70b9c6ec27638084ec
Validity
Not Before: Jul 23 11:00:26 2026 GMT
Not After : Jul 24 11:00:26 2026 GMT
Subject: CN=4300077ac9ddcc4e8fc757f92ff57a912c000963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:e9:ea:ac:59:33:7e:b6:49:5b:ea:38:26:
2f:17:af:ff:99:e5:b5:bc:63:e6:04:72:d8:c9:23:
3a:05:12:dd:e5:20:5a:7f:b5:0f:84:2e:1a:cc:b6:
ca:58:c7:8b:a9:6c:a6:0f:f9:32:19:94:6b:3e:6c:
d0:bf:d0:cd:75:3f:a6:6e:4c:46:99:86:ea:25:b8:
ed:19:c2:38:ed:b9:52:72:57:fe:b3:8a:e2:92:f2:
d0:63:5e:84:1d:b5:23:76:33:b8:37:a2:57:21:91:
6e:31:f5:08:a0:37:cf:16:b2:af:68:bb:4c:3f:3a:
58:4a:d3:0f:14:8e:48:96:84:ba:75:6b:6a:c7:11:
60:01:be:f3:63:fd:c8:5b:f2:0d:40:66:80:79:97:
31:64:3b:59:81:af:9e:e0:7e:09:4a:44:c5:78:5d:
f6:f1:34:89:fe:ca:0f:2c:4b:a7:bf:4e:f7:a6:88:
90:ff:d9:4f:e9:31:e5:6d:94:55:48:46:d0:65:e9:
0e:72:85:cc:28:48:bb:80:4c:8f:c8:34:6e:75:33:
73:36:df:c7:cf:8e:2b:3c:1d:f1:7d:f3:e9:39:f8:
04:47:57:55:09:82:7e:c5:ba:57:22:e2:50:67:80:
03:81:7b:37:d7:6f:e0:09:d3:a7:06:5d:06:2c:45:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:00:07:7A:C9:DD:CC:4E:8F:C7:57:F9:2F:F5:7A:91:2C:00:09:63
X509v3 Authority Key Identifier:
keyid:DF:82:0C:2F:45:58:AC:10:AF:5F:5C:70:B9:C6:EC:27:63:80:84:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34IML0VYrBCvX1xwucbsJ2OAhOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:35:73:3a:1b:7e:5c:1e:6a:12:cf:37:e0:b3:7c:7b:76:af:
0c:6d:b0:60:1b:cc:89:ca:e7:29:90:e8:fb:35:b7:35:53:36:
bb:97:2f:44:ad:b7:bf:6b:c4:1d:f9:36:5a:10:83:c8:78:4e:
17:aa:84:cd:0b:a4:dc:c9:21:b2:99:b5:bf:42:f1:e4:50:df:
9d:26:6f:88:11:81:92:b1:da:87:01:c2:7f:59:32:57:00:ae:
9d:ee:2e:05:80:bb:44:43:49:f8:35:e9:69:ac:9b:10:f2:c8:
fd:45:27:a8:0e:21:af:d7:cf:dc:ee:f2:7e:fe:d9:c9:87:b7:
99:79:ff:9f:aa:2c:0d:c8:c8:35:1f:db:73:f2:13:e4:9f:e7:
61:d7:9c:ad:e1:b9:94:2d:2c:a8:00:25:2f:07:16:77:35:d0:
32:4c:5c:e9:45:ec:55:a6:b1:17:f3:e6:1c:5f:37:c8:5f:89:
00:14:3a:b1:6e:7e:7e:f7:58:4e:ce:0b:a1:30:12:94:bb:f6:
43:41:80:5c:d4:09:c3:74:c3:54:9f:6b:27:4e:8e:2b:fa:0a:
db:bf:1f:34:ae:b1:b6:9f:4b:92:62:a9:76:c3:5d:6c:e1:3e:
82:a4:ff:ca:f6:da:a3:7b:1d:52:19:06:08:8c:f9:32:61:2b:
66:a7:d0:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OokIBsGM8MDdm+YVwKRbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODIwYzJmNDU1OGFjMTBhZjVmNWM3MGI5YzZlYzI3NjM4
MDg0ZWMwHhcNMjYwNzIzMTEwMDI2WhcNMjYwNzI0MTEwMDI2WjAzMTEwLwYDVQQD
Eyg0MzAwMDc3YWM5ZGRjYzRlOGZjNzU3ZjkyZmY1N2E5MTJjMDAwOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Xp6qxZM362SVvqOCYvF6//meW1
vGPmBHLYySM6BRLd5SBaf7UPhC4azLbKWMeLqWymD/kyGZRrPmzQv9DNdT+mbkxG
mYbqJbjtGcI47blSclf+s4rikvLQY16EHbUjdjO4N6JXIZFuMfUIoDfPFrKvaLtM
PzpYStMPFI5IloS6dWtqxxFgAb7zY/3IW/INQGaAeZcxZDtZga+e4H4JSkTFeF32
8TSJ/soPLEunv073poiQ/9lP6THlbZRVSEbQZekOcoXMKEi7gEyPyDRudTNzNt/H
z44rPB3xffPpOfgER1dVCYJ+xbpXIuJQZ4ADgXs312/gCdOnBl0GLEVQFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMAB3rJ3cxOj8dX+S/1epEsAAljMB8GA1UdIwQY
MBaAFN+CDC9FWKwQr19ccLnG7CdjgITsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRJTUwwVllyQkN2WDF4d3VjYnNKMk9BaE93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lNjdiMWItNGI2Zi00NTM1LTkzMTEt
NGI5MTg3ZDkxYzY2LzEvMzRJTUwwVllyQkN2WDF4d3VjYnNKMk9BaE93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lNjdiMWItNGI2Zi00NTM1LTkzMTEtNGI5MTg3ZDkxYzY2
LzEvMzRJTUwwVllyQkN2WDF4d3VjYnNKMk9BaE93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzVzOht+
XB5qEs834LN8e3avDG2wYBvMicrnKZDo+zW3NVM2u5cvRK23v2vEHfk2WhCDyHhO
F6qEzQuk3Mkhspm1v0Lx5FDfnSZviBGBkrHahwHCf1kyVwCune4uBYC7RENJ+DXp
aaybEPLI/UUnqA4hr9fP3O7yfv7ZyYe3mXn/n6osDcjINR/bc/IT5J/nYdecreG5
lC0sqAAlLwcWdzXQMkxc6UXsVaaxF/PmHF83yF+JABQ6sW5+fvdYTs4LoTASlLv2
Q0GAXNQJw3TDVJ9rJ06OK/oK278fNK6xtp9LkmKpdsNdbOE+gqT/yvbao3sdUhkG
CIz5MmErZqfQ5Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:24 2026 by rpki-client