Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: KB896+bI8ctZKAQaEmDa1GjQg/frTpmJoK71kyJieZU=
Subject key identifier: 8B:1A:CB:57:20:C9:7A:30:4F:C6:A1:56:23:3C:A2:4D:B0:C0:83:5C
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 019E1C4706FB1BC6764CB2987083A67775C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 12EF
Signing time: Tue 12 May 2026 13:01:17 +0000
Manifest this update: Tue 12 May 2026 13:01:17 +0000
Manifest next update: Wed 13 May 2026 13:01:17 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: OqOTlFoTaGlHK9BuCjeuUx/Sfe962+CbbLGSYEtHrG4=)
2: 8q9oSsZ4UYUMrh0rSwaxnqwZWJ4.roa (hash: UZuk/CP3WSM3LGuW3AkAPL5k1plOMJu2aZscVLHOeSY=)
3: B1oGCbp_lCKqrih8ynGfv6BUSjw.roa (hash: ZEKfqtdqNld+YDkZ9QlGUoE8oCQ7PZGkrXbAphwgc1E=)
4: WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa (hash: p/GOCcmj2ID1uwRfM042pGyDP5xNtN4A8xvh5ei0x1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:06:fb:1b:c6:76:4c:b2:98:70:83:a6:77:75:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: May 12 13:01:17 2026 GMT
Not After : May 13 13:01:17 2026 GMT
Subject: CN=8b1acb5720c97a304fc6a156233ca24db0c0835c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:fc:0d:fb:64:38:76:31:31:a1:82:1a:96:
68:cd:05:81:90:ec:a6:6c:d9:c5:eb:2e:53:92:b9:
df:15:18:af:17:65:59:7d:e4:3c:a6:86:03:58:20:
25:66:8b:86:b1:46:66:3a:9d:41:2f:c0:8d:d5:78:
ad:2c:87:7c:83:93:1c:c2:d1:b3:8a:8d:93:28:ce:
b2:8f:21:5d:72:16:23:92:0f:7e:d5:1a:a7:ce:0d:
73:cf:fc:0d:ed:d8:22:a9:64:2e:fb:08:7c:c9:be:
8c:f0:8d:34:5d:2f:38:27:26:4c:fa:d1:32:28:97:
3c:b9:62:01:2a:c1:cb:92:ac:7a:dd:b3:cd:b1:4b:
b2:fd:5d:bf:80:13:9b:be:82:81:d2:85:1e:44:61:
f0:ec:17:44:48:5c:0d:2e:89:ef:45:2d:24:e7:71:
42:31:1a:b7:f8:e7:75:72:ba:5a:35:d3:c5:5f:da:
cb:ca:9f:a7:c2:f9:08:aa:ab:72:3d:af:b2:4b:c6:
76:27:ad:28:53:90:f8:36:ab:20:5e:fe:23:77:f2:
45:91:7e:da:e5:e1:9d:89:bf:f7:43:ec:fa:0e:01:
90:1e:ce:cc:06:d7:cb:fc:e3:1d:6c:e7:8d:72:58:
3c:1d:0a:0d:61:f8:25:e5:ac:2e:ff:07:63:61:b0:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1A:CB:57:20:C9:7A:30:4F:C6:A1:56:23:3C:A2:4D:B0:C0:83:5C
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:42:cf:01:af:df:8e:a9:87:73:fa:17:59:2a:d5:5f:dc:0b:
00:5a:d5:fc:a2:f4:5c:00:dc:d3:dc:88:d0:81:d8:15:31:5a:
21:ba:ab:d2:50:17:7a:45:13:35:45:ea:7d:e2:fd:6c:20:38:
47:3d:df:3a:d4:a9:bc:0b:36:b8:fd:40:9f:cf:f5:a4:a9:80:
99:50:3c:e7:51:6f:80:69:6e:ee:e2:c3:15:73:82:3b:ae:ae:
76:5e:f6:a0:c5:4f:c0:f9:3d:a9:ef:ae:96:15:42:18:84:4c:
91:b5:60:ff:05:0b:c5:95:86:23:f4:5f:67:1e:8f:8f:76:7b:
f3:b5:ff:e2:c7:3a:24:fb:e2:9a:63:dc:4e:72:05:6b:f8:6f:
92:c1:46:4e:ed:4b:5b:59:cd:5a:5c:46:28:d6:2a:a8:7d:32:
c1:e7:8f:f5:fd:a9:ab:77:32:3e:31:c0:b9:77:b8:98:8e:25:
91:da:5d:d8:e0:3b:8a:56:8b:63:79:45:9d:e2:6e:23:23:10:
7c:e9:bd:11:77:52:ed:a1:98:9f:2d:ad:c1:0f:31:a0:e8:ce:
5f:3b:f7:c6:1a:e7:23:c6:de:e7:cb:f7:cd:28:ab:2b:4b:4c:
d0:bb:2f:76:b7:7a:2a:9f:ef:f1:b1:d0:56:32:43:7a:1e:c6:
6b:10:cb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:09 2026 by rpki-client