Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier: t0++qwWuKVbqejo+KOrmGFWELYNCIsXH0EIpd1Cq7VA=
Subject key identifier: D4:29:52:35:55:6D:89:DE:77:09:FF:38:3B:D5:DF:24:BC:2C:02:28
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial: 019DA830B58222AA340931919C24D8502429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number: 11D7
Signing time: Mon 20 Apr 2026 00:00:57 +0000
Manifest this update: Mon 20 Apr 2026 00:00:57 +0000
Manifest next update: Tue 21 Apr 2026 00:00:57 +0000
Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: 15jkoPPoC7fYNqct0h4QW443QOAgMDWMWjWnG2cqk2U=)
2: a_2N7up7ge72iNFxhl27xYnKU30.roa (hash: j+RQUmxlIxzBlFZ8oJHxFEDFDPjNQtLyOqFD3f2oy3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:30:b5:82:22:aa:34:09:31:91:9c:24:d8:50:24:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Validity
Not Before: Apr 20 00:00:57 2026 GMT
Not After : Apr 21 00:00:57 2026 GMT
Subject: CN=d4295235556d89de7709ff383bd5df24bc2c0228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:ff:cc:b8:e9:be:a7:af:3c:7e:09:dc:8e:
f9:4c:40:e7:dd:53:ad:fd:5f:a5:a7:ad:7b:14:34:
24:cb:d0:1c:78:04:84:1f:96:92:74:91:df:a2:a4:
39:a3:ca:86:5e:75:fa:47:5d:b7:f4:bb:9d:eb:9c:
96:10:49:d3:2b:d0:be:87:f7:34:f7:e9:96:9a:8d:
11:c1:dd:eb:7b:0c:f3:f1:28:a7:d6:12:2a:50:c9:
e1:06:44:cf:98:6e:73:c2:56:75:96:a7:62:56:2c:
26:52:a3:00:6d:78:b0:b5:e5:3d:fd:73:f9:68:6b:
9f:60:81:23:35:e6:5c:5f:73:c4:b8:29:c6:1a:b6:
74:12:31:63:13:6c:3b:05:94:a4:73:8d:b9:34:dc:
b1:d6:c2:90:75:9c:4a:93:ba:c8:97:62:3f:a3:dc:
06:41:82:6c:23:80:1f:c8:ee:b9:e1:ba:ff:f5:a4:
a2:8a:a4:88:a5:d1:19:a4:14:d2:f7:da:0b:f2:ba:
40:2f:0d:75:6e:61:ba:d7:ef:fc:4a:e9:52:9b:66:
bb:d6:75:7f:53:70:4a:f2:ab:55:9b:d7:52:aa:f1:
6d:24:0e:b7:9e:26:6c:6c:ff:74:84:0b:b0:2d:bf:
ed:69:a4:74:ba:1f:94:00:16:4f:6d:f6:5e:9a:de:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:29:52:35:55:6D:89:DE:77:09:FF:38:3B:D5:DF:24:BC:2C:02:28
X509v3 Authority Key Identifier:
keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8a:74:8b:d8:c7:96:36:f7:e7:89:75:2d:3f:a7:87:8f:15:
ad:32:e3:f2:e0:99:0a:88:5a:39:22:0e:34:d9:db:26:00:ce:
1c:8f:ad:00:27:4e:8c:7e:2b:31:15:48:9e:6b:32:ae:61:b0:
19:e0:17:0b:03:9b:c1:ef:5c:6b:af:55:5b:91:1b:2f:75:12:
92:39:30:2e:10:5d:d4:f5:28:35:e5:63:a6:cd:85:2c:b0:fa:
34:84:a1:d3:c8:3e:f9:35:b3:3a:79:db:70:77:26:7a:d6:a9:
37:26:1f:a8:48:6c:fe:c2:00:81:a3:f6:7b:1d:6b:0f:67:37:
e6:9a:c8:da:44:8b:e0:d9:1e:c4:13:2f:01:93:bb:45:c4:48:
b6:8a:cf:1c:5f:08:19:67:69:5c:a1:ea:b0:c8:6e:02:6e:be:
63:6a:64:64:8f:61:47:8c:4d:c1:f1:73:80:93:7c:5b:2d:b3:
65:4a:dc:94:bb:5e:31:d7:22:34:0c:f5:24:01:bb:5d:a0:68:
ed:eb:44:47:1d:c1:5a:45:b0:ed:af:65:7a:34:77:be:9d:6c:
f9:3c:cb:dd:ec:18:ca:55:c3:5a:88:c6:ec:c1:f8:20:8f:91:
f4:da:ec:9c:db:c4:50:49:ee:69:d2:00:f8:7e:e1:26:b7:51:
98:f7:b7:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2oMLWCIqo0CTGRnCTYUCQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODA4OWFhOWUxZDVjMTJhYmFkNDNhNzAxNTExZGExYzY1
ZjlmYTYwHhcNMjYwNDIwMDAwMDU3WhcNMjYwNDIxMDAwMDU3WjAzMTEwLwYDVQQD
EyhkNDI5NTIzNTU1NmQ4OWRlNzcwOWZmMzgzYmQ1ZGYyNGJjMmMwMjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbb/zLjpvqevPH4J3I75TEDn3VOt
/V+lp617FDQky9AceASEH5aSdJHfoqQ5o8qGXnX6R1239Lud65yWEEnTK9C+h/c0
9+mWmo0Rwd3rewzz8Sin1hIqUMnhBkTPmG5zwlZ1lqdiViwmUqMAbXiwteU9/XP5
aGufYIEjNeZcX3PEuCnGGrZ0EjFjE2w7BZSkc425NNyx1sKQdZxKk7rIl2I/o9wG
QYJsI4AfyO654br/9aSiiqSIpdEZpBTS99oL8rpALw11bmG61+/8SulSm2a71nV/
U3BK8qtVm9dSqvFtJA63niZsbP90hAuwLb/taaR0uh+UABZPbfZemt5SeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQpUjVVbYnedwn/ODvV3yS8LAIoMB8GA1UdIwQY
MBaAFN+AiaqeHVwSq61DpwFRHaHGX5+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYt
ZmQ2NDQ2NTdjYTJiLzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYtZmQ2NDQ2NTdjYTJi
LzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEop0i9jH
ljb354l1LT+nh48VrTLj8uCZCohaOSIONNnbJgDOHI+tACdOjH4rMRVInmsyrmGw
GeAXCwObwe9ca69VW5EbL3USkjkwLhBd1PUoNeVjps2FLLD6NISh08g++TWzOnnb
cHcmetapNyYfqEhs/sIAgaP2ex1rD2c35prI2kSL4NkexBMvAZO7RcRItorPHF8I
GWdpXKHqsMhuAm6+Y2pkZI9hR4xNwfFzgJN8Wy2zZUrclLteMdciNAz1JAG7XaBo
7etERx3BWkWw7a9lejR3vp1s+TzL3ewYylXDWojG7MH4II+R9NrsnNvEUEnuadIA
+H7hJrdRmPe3rg==
-----END CERTIFICATE-----
Generated at Mon Apr 20 04:53:30 2026 by rpki-client