Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: LJywPK+/zV74Aee4SX7ILL7Ijbd3stptknhJaMRbWuE=
Subject key identifier: CD:A6:C3:7B:4D:EF:65:99:B4:28:6F:58:8A:09:DF:BA:13:D3:43:5D
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 019D2CCF91B6E3361876D3ECC3278559C9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 1273
Signing time: Fri 27 Mar 2026 01:01:33 +0000
Manifest this update: Fri 27 Mar 2026 01:01:33 +0000
Manifest next update: Sat 28 Mar 2026 01:01:33 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: 0kafvgbGCGgpmBUTxBoFEE0BqJYIaRHvX825N5Z5hQI=)
2: 8q9oSsZ4UYUMrh0rSwaxnqwZWJ4.roa (hash: UZuk/CP3WSM3LGuW3AkAPL5k1plOMJu2aZscVLHOeSY=)
3: B1oGCbp_lCKqrih8ynGfv6BUSjw.roa (hash: ZEKfqtdqNld+YDkZ9QlGUoE8oCQ7PZGkrXbAphwgc1E=)
4: WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa (hash: p/GOCcmj2ID1uwRfM042pGyDP5xNtN4A8xvh5ei0x1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:cf:91:b6:e3:36:18:76:d3:ec:c3:27:85:59:c9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Mar 27 01:01:33 2026 GMT
Not After : Mar 28 01:01:33 2026 GMT
Subject: CN=cda6c37b4def6599b4286f588a09dfba13d3435d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5e:49:14:fb:47:e6:56:85:8e:f2:70:ad:77:
2c:47:51:6d:c6:51:30:8b:5b:34:f1:fd:b7:0c:bc:
53:ef:b4:49:3b:1a:4a:39:39:90:26:69:08:bb:30:
e8:19:4f:f5:7b:dc:6d:12:1e:3c:d3:2a:58:2c:2f:
31:66:b7:a6:cf:06:de:16:68:8c:a4:e9:66:49:b7:
3c:66:b3:ec:43:94:2f:e4:c2:72:e5:a0:22:78:55:
10:e5:4e:c5:57:f6:95:4c:4b:6f:a2:5c:9d:2d:b3:
5b:b8:81:f0:42:74:b0:5f:78:ff:1a:95:ee:8a:50:
4e:40:3e:5f:a5:77:1e:07:a0:ff:3e:ac:95:02:09:
51:4c:41:b9:c6:4a:42:92:d8:23:eb:9e:75:e3:c0:
d3:3d:cf:3b:11:b6:b1:1d:f0:6e:7e:48:ba:3e:59:
64:71:ee:31:b6:20:75:cf:98:da:39:23:4b:dd:1b:
b5:c9:2d:f2:4a:45:67:bf:8b:bf:6c:7c:bc:53:f2:
53:22:59:4e:8f:a9:6b:02:d9:d2:08:ec:c1:fa:3f:
3e:76:13:bb:79:0c:35:a7:11:f9:2d:d0:44:2d:da:
0b:0d:52:1f:da:e7:7d:5a:89:ee:91:27:a8:9e:7e:
8e:d8:93:8f:77:36:0c:6c:6e:1b:2b:f8:23:74:f0:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A6:C3:7B:4D:EF:65:99:B4:28:6F:58:8A:09:DF:BA:13:D3:43:5D
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1e:5f:13:cc:dd:f3:74:c8:f9:f5:05:65:e5:24:ff:8e:b1:
7c:5c:c3:77:e2:0c:c7:db:4d:8d:9d:e2:2c:1f:47:71:15:c9:
35:1c:c3:be:5f:22:c4:ce:58:05:54:46:51:a5:9f:4d:39:4c:
5a:39:66:f4:75:ad:6b:37:d5:a6:0a:0e:27:08:8f:86:75:81:
e3:73:95:c0:03:e1:01:28:ec:d1:02:22:56:59:e9:90:d8:ae:
8d:76:aa:0c:cd:2d:cd:63:b4:d0:2b:96:02:86:b2:e0:44:7e:
db:91:65:21:a6:4c:2a:6a:87:ba:66:27:ed:9a:d1:06:5f:c8:
26:f9:43:37:da:25:d0:68:95:c4:43:4b:55:2e:ff:d4:0c:15:
7d:58:4f:b7:97:47:f3:8e:90:d8:aa:ef:b7:e8:58:99:3e:14:
14:e8:b7:86:3f:5f:4e:b7:e3:1c:6f:2e:80:02:e0:77:c7:ab:
b9:7b:b0:5e:42:dc:a4:6f:e7:0d:25:37:97:f7:05:48:f5:80:
7d:d9:35:a8:a8:71:32:1e:0b:dd:90:91:95:59:db:38:4b:6a:
f2:32:1f:94:75:cc:f9:58:96:23:e7:90:2f:bc:95:6c:0b:d3:
fd:d8:4f:0d:35:a8:e6:f4:45:08:62:e9:f6:1d:72:49:42:39:
9b:7d:5f:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sz5G24zYYdtPswyeFWcmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj
NjZhZWIwHhcNMjYwMzI3MDEwMTMzWhcNMjYwMzI4MDEwMTMzWjAzMTEwLwYDVQQD
EyhjZGE2YzM3YjRkZWY2NTk5YjQyODZmNTg4YTA5ZGZiYTEzZDM0MzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l5JFPtH5laFjvJwrXcsR1FtxlEw
i1s08f23DLxT77RJOxpKOTmQJmkIuzDoGU/1e9xtEh480ypYLC8xZremzwbeFmiM
pOlmSbc8ZrPsQ5Qv5MJy5aAieFUQ5U7FV/aVTEtvolydLbNbuIHwQnSwX3j/GpXu
ilBOQD5fpXceB6D/PqyVAglRTEG5xkpCktgj655148DTPc87EbaxHfBufki6Pllk
ce4xtiB1z5jaOSNL3Ru1yS3ySkVnv4u/bHy8U/JTIllOj6lrAtnSCOzB+j8+dhO7
eQw1pxH5LdBELdoLDVIf2ud9WonukSeonn6O2JOPdzYMbG4bK/gjdPDqvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2mw3tN72WZtChvWIoJ37oT00NdMB8GA1UdIwQY
MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt
MjU0NTVhOGRkZDQ1LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1
LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARB5fE8zd
83TI+fUFZeUk/46xfFzDd+IMx9tNjZ3iLB9HcRXJNRzDvl8ixM5YBVRGUaWfTTlM
Wjlm9HWtazfVpgoOJwiPhnWB43OVwAPhASjs0QIiVlnpkNiujXaqDM0tzWO00CuW
Aoay4ER+25FlIaZMKmqHumYn7ZrRBl/IJvlDN9ol0GiVxENLVS7/1AwVfVhPt5dH
846Q2Krvt+hYmT4UFOi3hj9fTrfjHG8ugALgd8eruXuwXkLcpG/nDSU3l/cFSPWA
fdk1qKhxMh4L3ZCRlVnbOEtq8jIflHXM+ViWI+eQL7yVbAvT/dhPDTWo5vRFCGLp
9h1ySUI5m31f5Q==
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:59:11 2026 by rpki-client