Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: X+SSqgPspyNOcDJUAQhOSU4ZCnRbCbLPLPb33u5pynA=
Subject key identifier: 10:8E:51:FE:21:37:FE:4C:6C:83:11:98:AE:BD:CF:A7:E0:6D:EA:58
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 019D2AE1110F9269667BAA1B3CFC382704F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 1272
Signing time: Thu 26 Mar 2026 16:01:25 +0000
Manifest this update: Thu 26 Mar 2026 16:01:25 +0000
Manifest next update: Fri 27 Mar 2026 16:01:25 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: qF2FRkoBd8n8H2Z6TMTGKc397W7CL4Vl0dz+kpTtBik=)
2: 8q9oSsZ4UYUMrh0rSwaxnqwZWJ4.roa (hash: UZuk/CP3WSM3LGuW3AkAPL5k1plOMJu2aZscVLHOeSY=)
3: B1oGCbp_lCKqrih8ynGfv6BUSjw.roa (hash: ZEKfqtdqNld+YDkZ9QlGUoE8oCQ7PZGkrXbAphwgc1E=)
4: WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa (hash: p/GOCcmj2ID1uwRfM042pGyDP5xNtN4A8xvh5ei0x1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:11:0f:92:69:66:7b:aa:1b:3c:fc:38:27:04:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Mar 26 16:01:25 2026 GMT
Not After : Mar 27 16:01:25 2026 GMT
Subject: CN=108e51fe2137fe4c6c831198aebdcfa7e06dea58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:44:6a:8f:b0:0c:73:8f:6f:62:ca:06:1b:
d8:13:66:cf:91:84:b9:42:96:80:20:75:a9:6e:d6:
3e:0f:18:70:9a:bf:3f:0b:8f:a1:14:04:1a:01:60:
8d:b5:9b:12:71:2d:dc:05:fd:00:07:36:8d:c0:ff:
91:19:5c:d6:03:e6:91:22:50:e8:64:59:0c:5a:82:
ae:eb:fa:cc:ab:19:a0:a4:83:af:f7:d4:62:ed:a4:
70:48:e2:e8:d4:de:9b:22:48:37:9f:72:ec:a5:5c:
25:af:a1:17:5a:c4:d0:0f:4e:e3:36:3a:ab:6b:cd:
c6:16:99:be:5a:37:2d:66:0e:f0:49:1e:a8:9b:db:
82:b4:c2:be:31:95:08:7d:73:9b:18:43:3e:5a:42:
fa:01:0b:34:5b:16:b1:85:b3:34:47:fb:fb:8d:b0:
b7:e6:83:34:85:92:23:33:09:06:84:0a:d2:33:d0:
41:83:30:d1:a8:4e:a3:a8:31:a3:80:b6:30:b9:87:
3d:a1:45:e4:38:e7:80:fb:88:b8:74:c4:77:1e:8a:
1f:c2:1f:8e:f1:c1:f7:f0:2c:09:ad:cf:62:75:45:
d4:af:1b:1c:82:0c:77:87:59:be:20:3a:f4:87:ff:
ab:0c:3d:03:74:b4:91:b7:c1:21:83:fb:8e:ea:5b:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8E:51:FE:21:37:FE:4C:6C:83:11:98:AE:BD:CF:A7:E0:6D:EA:58
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e9:fd:1f:b4:20:24:6a:2e:a5:72:b7:d5:47:2c:9c:02:0b:
31:28:b8:18:60:e4:62:a4:c4:31:27:00:db:54:35:62:11:dd:
7c:a8:c7:40:c3:b0:f0:63:a6:99:99:34:81:be:18:8a:27:55:
bd:8a:f9:c1:1f:4b:da:e9:f1:64:0c:f9:ca:d2:c0:80:ee:b1:
56:00:10:ae:fa:ae:f5:c7:93:e6:99:95:7f:ab:e4:80:fb:3f:
73:d2:5c:ba:56:2e:7f:f9:77:8c:d1:a9:54:30:57:8c:f5:17:
18:47:07:a8:e5:a7:31:ef:cf:56:15:19:31:a0:6d:47:c1:02:
85:90:99:19:c7:79:da:b2:ec:26:30:fa:fb:08:0d:de:21:45:
4a:38:a1:33:2c:e4:f2:d5:65:3c:4a:34:ef:12:63:98:a6:d6:
27:f3:83:65:2d:d6:dc:4f:81:d0:00:2e:89:0c:84:a5:44:9c:
7e:8b:14:63:13:a6:ad:11:2d:06:c4:6a:d9:38:aa:ad:a3:c0:
b5:c8:b3:80:b5:30:f7:d8:7e:f4:6e:d6:04:35:77:d0:1a:0a:
b9:42:5c:81:9e:b4:68:84:fa:25:57:f5:2d:a1:76:c6:72:55:
58:04:f8:cd:56:d0:6e:0f:27:30:8b:5f:b5:70:b5:35:31:f7:
0f:1a:64:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:19 2026 by rpki-client