Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier: uj9bo47rnlukbiCQwNRh9T2GiXOKhRZTfwAwIbETpTM=
Subject key identifier: 83:11:CD:58:BE:61:31:EE:AF:C9:FE:64:F4:01:0A:74:20:1C:D3:41
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial: 01A000CA61D2FD9AF52957AA5228784AD136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number: 130E
Signing time: Fri 14 Aug 2026 15:00:58 +0000
Manifest this update: Fri 14 Aug 2026 15:00:58 +0000
Manifest next update: Sat 15 Aug 2026 15:00:58 +0000
Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: /AxweLBOp6TEjfVALQUF5MgCkHg94qgW5qBZu7pN8Kw=)
2: a_2N7up7ge72iNFxhl27xYnKU30.roa (hash: j+RQUmxlIxzBlFZ8oJHxFEDFDPjNQtLyOqFD3f2oy3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:61:d2:fd:9a:f5:29:57:aa:52:28:78:4a:d1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Validity
Not Before: Aug 14 15:00:58 2026 GMT
Not After : Aug 15 15:00:58 2026 GMT
Subject: CN=8311cd58be6131eeafc9fe64f4010a74201cd341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:75:c7:ac:6b:3c:cd:32:f7:2d:78:89:c3:
5a:01:47:ea:07:6d:d4:65:02:9a:00:2b:5e:19:3c:
5e:99:b1:3d:b5:5f:2f:2a:bd:04:8f:04:63:71:7b:
05:e4:5d:69:70:31:10:cb:b2:40:f8:99:81:eb:a3:
33:af:20:6a:96:b9:25:67:1c:27:86:4c:51:8f:20:
cf:64:64:fc:7b:9c:c5:d0:0c:fd:66:cd:f1:c7:3a:
ce:f3:c2:e5:21:95:80:39:9d:38:23:42:1e:a5:a0:
d7:13:b2:c5:31:eb:ae:d5:c0:24:12:3f:83:82:de:
46:56:17:1c:ec:91:90:c6:08:36:5f:48:f8:dc:4e:
7c:f9:32:2e:1f:5a:b2:21:f3:e1:4a:4d:2f:8a:bc:
f6:3d:04:a0:f7:74:87:8b:b6:d5:c5:f1:5c:fe:b7:
8a:c9:2b:62:91:ff:11:df:e7:b8:72:7f:4e:e5:74:
54:2b:14:17:77:bf:d5:dc:0a:c1:64:a8:1c:b3:7b:
6a:30:d5:46:76:12:56:69:01:55:a9:6c:39:db:7b:
e6:89:2e:4b:42:49:a6:d0:23:ac:5e:82:41:46:d5:
0a:85:b9:cb:4f:79:68:a6:bb:ae:eb:b6:f0:2a:df:
2c:15:f2:00:dd:01:75:e3:e1:40:50:d4:1d:e2:a5:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:11:CD:58:BE:61:31:EE:AF:C9:FE:64:F4:01:0A:74:20:1C:D3:41
X509v3 Authority Key Identifier:
keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a3:59:56:df:94:19:82:b8:24:e4:31:8e:89:5d:2d:fc:60:
b4:7a:e5:4d:2a:ba:f5:8d:2f:37:04:fa:52:63:42:b6:f1:9f:
13:ba:e5:0d:46:01:ea:86:da:bb:7a:e2:c1:23:ef:ab:2c:04:
ff:0b:3a:75:e9:1f:c0:8c:71:38:7a:63:0a:b2:31:a8:dc:c7:
b3:fd:c5:9a:c0:11:d2:5c:37:d6:75:d0:9a:9a:a3:82:8e:9d:
3a:78:96:87:3d:18:db:de:ba:25:74:0c:28:1a:3c:cd:c8:b0:
cf:0b:3d:6f:2d:74:84:cd:6a:5e:da:77:ed:22:4b:df:65:c2:
f3:02:1f:a4:07:8a:a4:dc:a8:2b:60:40:9b:7f:18:cc:8f:34:
8d:71:69:50:42:c0:e0:d3:71:93:2d:f2:b8:bd:09:9b:ec:dc:
83:9b:47:2e:59:18:95:1a:e8:5b:de:07:51:00:5f:12:d6:94:
08:d0:a4:34:c2:c5:dd:a7:79:1a:b8:65:b7:79:82:6f:59:7d:
eb:89:5c:2a:e1:b9:f2:b2:19:80:bf:ee:d6:1e:80:7c:24:09:
1e:a7:a8:ff:4e:16:47:35:c1:8a:95:2b:cb:50:7b:e4:92:c5:
f9:23:67:82:80:09:77:22:44:41:a6:a5:b4:b5:07:3e:f7:1d:
d2:f6:bd:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAymHS/Zr1KVeqUih4StE2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODA4OWFhOWUxZDVjMTJhYmFkNDNhNzAxNTExZGExYzY1
ZjlmYTYwHhcNMjYwODE0MTUwMDU4WhcNMjYwODE1MTUwMDU4WjAzMTEwLwYDVQQD
Eyg4MzExY2Q1OGJlNjEzMWVlYWZjOWZlNjRmNDAxMGE3NDIwMWNkMzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt251x6xrPM0y9y14icNaAUfqB23U
ZQKaACteGTxembE9tV8vKr0EjwRjcXsF5F1pcDEQy7JA+JmB66MzryBqlrklZxwn
hkxRjyDPZGT8e5zF0Az9Zs3xxzrO88LlIZWAOZ04I0IepaDXE7LFMeuu1cAkEj+D
gt5GVhcc7JGQxgg2X0j43E58+TIuH1qyIfPhSk0virz2PQSg93SHi7bVxfFc/reK
yStikf8R3+e4cn9O5XRUKxQXd7/V3ArBZKgcs3tqMNVGdhJWaQFVqWw523vmiS5L
Qkmm0COsXoJBRtUKhbnLT3lopruu67bwKt8sFfIA3QF14+FAUNQd4qXK6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMRzVi+YTHur8n+ZPQBCnQgHNNBMB8GA1UdIwQY
MBaAFN+AiaqeHVwSq61DpwFRHaHGX5+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYt
ZmQ2NDQ2NTdjYTJiLzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYtZmQ2NDQ2NTdjYTJi
LzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6NZVt+U
GYK4JOQxjoldLfxgtHrlTSq69Y0vNwT6UmNCtvGfE7rlDUYB6obau3riwSPvqywE
/ws6dekfwIxxOHpjCrIxqNzHs/3FmsAR0lw31nXQmpqjgo6dOniWhz0Y2966JXQM
KBo8zciwzws9by10hM1qXtp37SJL32XC8wIfpAeKpNyoK2BAm38YzI80jXFpUELA
4NNxky3yuL0Jm+zcg5tHLlkYlRroW94HUQBfEtaUCNCkNMLF3ad5Grhlt3mCb1l9
64lcKuG58rIZgL/u1h6AfCQJHqeo/04WRzXBipUry1B75JLF+SNngoAJdyJEQaal
tLUHPvcd0va9pA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:24:00 2026 by rpki-client