
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier: npjMGvai/ieXZUw8b5vYoX4IeuL23hEWw8r5CeuQv18=
Subject key identifier: CC:A1:CD:21:3A:30:AA:91:4A:2E:FC:FB:5B:A0:EE:16:CF:5E:BB:C2
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 019EB7D83E27FCE64D9FF90F69516E0FF5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number: 0847
Signing time: Thu 11 Jun 2026 18:01:02 +0000
Manifest this update: Thu 11 Jun 2026 18:01:02 +0000
Manifest next update: Fri 12 Jun 2026 18:01:02 +0000
Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: 4+7+hQdQ9BGHb3Z+qaaF/YRtPEKkQzsvpZ17NJTFoTM=)
2: 9D5WwjKLKWgOIgPanR8axjhLcU4.roa (hash: ZLdDEz7U/sFImJ7TRS2LLSrQd9lNXvIbMcJRDgvz3sA=)
3: QpiOjtqqn3KLmCsEJyklJCGXtrE.roa (hash: FMtgXOF3ndtdUEWRQlHxouObzXHzScpjOr9+4JvRDuQ=)
4: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=)
5: bSrLj4dk7vC2yPiiS4puv6QDMCg.roa (hash: b2kWSMTdmZr8cROp9MUUr9c5xUNnNn9tLEdsg0Fja3c=)
6: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=)
7: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=)
8: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=)
9: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=)
10: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d8:3e:27:fc:e6:4d:9f:f9:0f:69:51:6e:0f:f5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Jun 11 18:01:02 2026 GMT
Not After : Jun 12 18:01:02 2026 GMT
Subject: CN=cca1cd213a30aa914a2efcfb5ba0ee16cf5ebbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:5b:14:c0:85:6b:82:09:a2:91:1b:04:ab:
28:70:7b:d9:05:5a:21:a0:76:69:ec:7e:5a:68:32:
a1:4d:4c:45:93:6c:45:64:32:4c:8f:f6:a0:b1:6e:
4b:ff:c0:20:d9:85:dc:e5:b1:b4:24:54:61:a8:b9:
df:da:ed:07:6b:e3:23:5c:af:3d:61:fe:4c:cf:19:
bc:f8:66:62:ed:51:c1:d6:b3:ce:b5:f1:09:df:f9:
d9:61:ea:02:6e:75:08:06:d6:2b:c9:15:d6:6d:8a:
21:0d:ff:62:93:be:91:a9:37:ef:ee:65:0a:ab:d6:
55:41:bd:6e:bf:0c:00:23:92:66:eb:d6:e0:cf:46:
cb:5c:31:d9:9a:56:8b:57:ab:e7:70:59:c2:a4:01:
63:43:a1:96:64:27:2e:dd:24:9f:a6:e4:24:ec:32:
e4:37:ea:d2:36:86:68:39:aa:97:78:f2:92:4f:77:
9a:57:ee:70:d8:3f:77:36:e5:29:2d:89:3d:c3:f6:
89:ff:d3:7f:66:88:87:b9:59:8d:d6:68:8d:46:96:
41:0d:13:3e:5c:17:aa:0a:8c:17:f1:40:58:bb:b8:
86:25:3a:79:19:66:4a:b9:3d:be:a3:f9:1c:6b:09:
5e:8b:71:25:59:17:f0:18:84:2e:39:4b:45:f0:eb:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A1:CD:21:3A:30:AA:91:4A:2E:FC:FB:5B:A0:EE:16:CF:5E:BB:C2
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3f:8f:28:33:7b:d3:e4:94:1a:a7:be:77:ba:48:66:0a:7e:
21:4c:44:a1:f4:36:7f:9c:ac:98:cc:ff:94:93:44:4f:b6:d2:
d8:19:85:b1:f0:81:98:f8:8d:2f:3b:97:c5:13:dd:6f:51:c4:
11:6a:e0:9b:4b:89:5c:3d:c2:9c:98:6d:c5:9f:30:ac:c2:34:
f3:ca:cd:61:f7:14:3d:8b:da:3b:a5:79:41:53:5d:37:2b:db:
be:6e:7d:2c:e9:15:3e:fc:31:0e:40:38:c6:c5:fd:5c:df:11:
87:92:86:9c:24:34:81:1b:13:a7:a7:c1:1f:e6:82:18:07:9c:
b6:3b:89:0d:ef:30:ce:eb:8a:a7:de:4f:bc:ee:e7:bd:a7:47:
91:88:e3:71:57:a1:e7:3e:97:e1:b2:95:59:f1:33:62:47:c0:
de:fa:15:91:26:34:84:ca:0d:d1:c3:23:f7:92:7b:7d:b6:18:
6f:cb:82:46:8e:7e:fe:3f:3c:15:bb:3b:da:8e:82:82:9a:5a:
9d:6b:f8:60:4f:64:33:47:00:a1:b2:de:05:d4:1f:c3:21:2d:
e3:6e:7b:38:00:82:70:77:df:2c:5b:2b:c2:db:e7:ff:70:25:
c0:21:8f:79:d8:50:33:75:84:5e:56:66:f9:4f:ed:46:c1:6d:
fb:40:55:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ632D4n/OZNn/kPaVFuD/XkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk
NjYyNjkwHhcNMjYwNjExMTgwMTAyWhcNMjYwNjEyMTgwMTAyWjAzMTEwLwYDVQQD
EyhjY2ExY2QyMTNhMzBhYTkxNGEyZWZjZmI1YmEwZWUxNmNmNWViYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKBbFMCFa4IJopEbBKsocHvZBVoh
oHZp7H5aaDKhTUxFk2xFZDJMj/agsW5L/8Ag2YXc5bG0JFRhqLnf2u0Ha+MjXK89
Yf5Mzxm8+GZi7VHB1rPOtfEJ3/nZYeoCbnUIBtYryRXWbYohDf9ik76RqTfv7mUK
q9ZVQb1uvwwAI5Jm69bgz0bLXDHZmlaLV6vncFnCpAFjQ6GWZCcu3SSfpuQk7DLk
N+rSNoZoOaqXePKST3eaV+5w2D93NuUpLYk9w/aJ/9N/ZoiHuVmN1miNRpZBDRM+
XBeqCowX8UBYu7iGJTp5GWZKuT2+o/kcawlei3ElWRfwGIQuOUtF8OsgiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyhzSE6MKqRSi78+1ug7hbPXrvCMB8GA1UdIwQY
MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt
NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4
LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACD+PKDN7
0+SUGqe+d7pIZgp+IUxEofQ2f5ysmMz/lJNET7bS2BmFsfCBmPiNLzuXxRPdb1HE
EWrgm0uJXD3CnJhtxZ8wrMI088rNYfcUPYvaO6V5QVNdNyvbvm59LOkVPvwxDkA4
xsX9XN8Rh5KGnCQ0gRsTp6fBH+aCGAectjuJDe8wzuuKp95PvO7nvadHkYjjcVeh
5z6X4bKVWfEzYkfA3voVkSY0hMoN0cMj95J7fbYYb8uCRo5+/j88Fbs72o6Cgppa
nWv4YE9kM0cAobLeBdQfwyEt4257OACCcHffLFsrwtvn/3AlwCGPedhQM3WEXlZm
+U/tRsFt+0BVxg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:14:09 2026 by rpki-client