Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier: sWnXVcLLejSjultDPMk543PaQLOHx4neYEMvlsLIrwk=
Subject key identifier: 4E:F7:60:3A:25:D5:23:48:03:67:F3:51:B4:AD:19:B7:32:2A:47:94
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 019DCED0581D28B556587277ACFA1E104226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number: 07CC
Signing time: Mon 27 Apr 2026 12:00:53 +0000
Manifest this update: Mon 27 Apr 2026 12:00:53 +0000
Manifest next update: Tue 28 Apr 2026 12:00:53 +0000
Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: r4J1SHtZ9Nd8PEIcitBTOHeJhp2+2KCKPUx4t2RWUsk=)
2: JuSXc7ZVBBGZXnDq-To8XVkAvig.roa (hash: /cuVo97iW83fjQf6bGYtrLtSHZqgpkHovYO/W3VrbBk=)
3: QpiOjtqqn3KLmCsEJyklJCGXtrE.roa (hash: FMtgXOF3ndtdUEWRQlHxouObzXHzScpjOr9+4JvRDuQ=)
4: bSrLj4dk7vC2yPiiS4puv6QDMCg.roa (hash: b2kWSMTdmZr8cROp9MUUr9c5xUNnNn9tLEdsg0Fja3c=)
5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=)
6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=)
7: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=)
8: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=)
9: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:58:1d:28:b5:56:58:72:77:ac:fa:1e:10:42:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Apr 27 12:00:53 2026 GMT
Not After : Apr 28 12:00:53 2026 GMT
Subject: CN=4ef7603a25d523480367f351b4ad19b7322a4794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:95:c0:c8:ab:1e:94:20:09:8a:be:4e:7a:
b5:68:c3:aa:4c:40:2f:f6:dd:86:7f:e5:c2:83:9d:
62:e8:08:41:be:7b:8c:e5:71:8b:07:93:c9:0c:40:
8d:03:fd:83:89:ef:57:33:2c:13:17:20:48:1c:69:
73:25:73:36:b2:1d:d7:7b:46:55:d8:8f:50:e1:97:
0e:78:ff:c2:13:16:e2:ad:b0:43:fa:6e:91:7a:46:
5f:79:6e:e2:ad:54:d1:32:05:96:c0:f8:21:dd:6a:
7c:93:86:25:84:36:f8:be:13:63:9d:11:36:ac:2a:
ef:79:50:fa:0f:07:7b:ac:20:58:9c:b0:04:7e:57:
26:58:77:a8:48:47:ae:76:9f:af:f8:98:97:72:22:
70:ce:d6:57:71:6a:8f:be:20:6f:73:f7:4c:73:be:
26:32:09:ca:0c:28:e8:37:5e:65:b5:10:0c:52:8c:
59:54:a6:c5:82:83:14:43:ad:8d:f3:e3:e4:d7:e7:
2d:ae:ee:2e:a5:13:2e:dd:d5:23:e9:11:62:7e:91:
c0:65:b9:95:f7:d2:4e:0d:cb:5d:54:c5:a6:22:6c:
9f:fe:50:04:88:e1:1d:3c:1b:8a:ca:ee:89:2e:49:
c8:34:c5:6f:2f:aa:46:70:f2:ee:a1:e7:42:dc:02:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F7:60:3A:25:D5:23:48:03:67:F3:51:B4:AD:19:B7:32:2A:47:94
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3a:85:1c:60:f1:3b:05:f6:b2:f5:28:1c:9b:ff:77:fd:f5:
ad:3c:24:f3:b3:3c:2e:5d:49:5e:f3:c7:bb:5d:51:51:fe:74:
f6:4b:16:a3:06:0d:b2:80:21:09:1a:74:56:e8:bc:c6:93:c2:
7d:fd:c8:2b:0c:65:6e:09:9f:7c:03:3e:41:db:2f:6f:53:b2:
3e:18:70:6e:c7:5a:4e:7c:0a:66:ea:eb:d2:96:5f:ad:94:5d:
39:0f:af:97:27:3c:66:66:7b:cd:32:73:a8:f7:7f:1c:c6:2f:
fd:af:99:f6:27:6c:01:c1:43:99:35:e5:5f:e4:8b:ae:3b:df:
2e:ec:4f:83:50:0e:d3:fa:c9:4f:ac:d4:b1:c0:2a:b9:e0:a9:
0f:05:b8:d5:38:42:9f:ac:de:ca:cc:39:fe:9a:cc:51:03:06:
d4:3b:14:70:b2:bf:3e:37:1d:ec:30:4d:48:c4:b5:67:0a:d8:
41:c6:f5:7e:34:8e:95:67:fb:79:d8:14:c8:6e:84:a6:a7:51:
ba:39:67:6a:1d:06:50:2e:a3:56:9a:50:9c:25:06:c2:cf:89:
5e:fa:23:6d:46:36:25:7b:de:e0:6e:17:ce:15:cf:a7:77:fa:
a9:ca:d1:53:5c:65:59:b2:bc:dd:5e:75:f1:4a:a5:4d:45:f5:
b2:10:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:54:14 2026 by rpki-client