Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: 0Q6o3menSfElGyvPV/hPcudpQjnhsRkyG6MNuyYCc+8=
Subject key identifier: 4A:46:DC:A2:CA:98:44:EA:28:9C:F4:FA:83:62:78:08:9E:7D:40:E9
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 019DD1D1A1BE8EBEFD1CFC04EED10DC13533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 1245
Signing time: Tue 28 Apr 2026 02:01:09 +0000
Manifest this update: Tue 28 Apr 2026 02:01:09 +0000
Manifest next update: Wed 29 Apr 2026 02:01:09 +0000
Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=)
2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: 2wmlU0cfrbr9aNTfEhkol3XDVQxmPcuWjNyeiXiKLXs=)
3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:d1:a1:be:8e:be:fd:1c:fc:04:ee:d1:0d:c1:35:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Apr 28 02:01:09 2026 GMT
Not After : Apr 29 02:01:09 2026 GMT
Subject: CN=4a46dca2ca9844ea289cf4fa836278089e7d40e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:34:c2:c0:bc:3b:d9:62:b4:c5:f4:e0:bf:
8b:25:38:85:ac:39:62:c3:d5:7c:6a:03:95:15:ff:
da:e2:5b:29:a4:19:7b:e6:8c:f2:3b:61:01:c9:80:
79:b0:9a:d3:48:a5:bd:80:b8:d8:16:16:b4:32:a5:
6e:1a:71:21:91:23:d7:8f:4f:11:fa:2b:7c:0e:17:
f3:5d:e5:f1:58:6c:7e:4f:e0:6f:26:2b:aa:cb:33:
85:ff:53:0f:05:b9:ae:e1:49:6b:e2:92:4f:14:47:
21:28:aa:97:3c:7c:43:19:a0:15:72:1b:57:7e:d1:
85:64:77:da:a5:cc:84:d9:15:85:d3:f9:fc:ae:ca:
49:19:7c:e4:ec:d7:3c:b8:c3:37:c9:9e:5a:a5:ec:
b2:c0:34:83:2a:07:62:84:4e:4c:54:a0:75:5f:f0:
42:92:46:63:1d:5b:e3:80:9b:0f:12:64:8c:0f:4f:
9b:89:b2:d0:0e:15:ae:62:28:6a:91:21:b5:bb:2e:
6a:aa:85:c6:eb:7d:2a:5e:a1:85:bb:56:4a:61:9a:
38:9e:c0:a6:4a:9b:fb:c6:26:38:89:5a:ec:91:96:
c2:a8:cc:c6:48:7a:02:50:2c:dd:5a:3e:fc:51:18:
de:a0:ca:eb:40:64:6a:3a:1c:63:54:31:74:82:ee:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:46:DC:A2:CA:98:44:EA:28:9C:F4:FA:83:62:78:08:9E:7D:40:E9
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:56:07:45:75:a7:1e:0d:78:77:da:06:65:c8:77:97:6e:64:
92:83:1a:3f:29:a1:b6:df:02:84:80:e9:e9:4e:6f:a5:3d:a1:
c3:20:b4:f4:df:23:b4:e2:11:75:43:3b:aa:8e:27:11:4b:b3:
d9:16:a9:fc:c9:7d:26:f1:b8:fd:79:a0:78:f3:24:a2:fa:e3:
27:14:1a:fd:a6:fd:df:c1:ba:5a:92:58:01:67:1d:ce:22:2e:
72:14:e1:86:fb:90:38:c7:27:93:6d:e3:74:15:2a:ea:b4:0c:
b1:94:18:8d:cb:6e:0e:5c:f8:55:e0:a5:e1:68:0c:df:43:d5:
a8:c6:41:cc:5a:f8:e2:db:0b:f3:61:27:e3:b8:0a:59:b8:1c:
37:c2:55:b8:37:93:31:db:02:15:2f:a0:04:81:7d:d0:0c:19:
19:ce:e2:e5:f9:3b:3e:33:d3:d7:f6:ba:a0:cc:1e:9c:14:f4:
5e:3b:a6:30:3b:38:37:1a:8e:09:8a:f9:b1:65:f7:6b:a0:14:
85:91:97:a3:a0:3f:4e:28:2a:b4:ce:a1:26:3f:6c:a0:30:b0:
47:f9:5b:9e:cd:b1:40:02:b5:cc:50:8d:c5:b6:65:db:cf:89:
17:c2:0c:b3:30:7f:d1:0e:5c:63:cc:fe:27:23:26:21:91:0e:
7d:35:35:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3R0aG+jr79HPwE7tENwTUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzN2UxNzdmNzY2NjMxNjZjNzUxOTBlMmQyMDkzMzVhNmFh
ZTVhY2UwHhcNMjYwNDI4MDIwMTA5WhcNMjYwNDI5MDIwMTA5WjAzMTEwLwYDVQQD
Eyg0YTQ2ZGNhMmNhOTg0NGVhMjg5Y2Y0ZmE4MzYyNzgwODllN2Q0MGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN40wsC8O9litMX04L+LJTiFrDli
w9V8agOVFf/a4lsppBl75ozyO2EByYB5sJrTSKW9gLjYFha0MqVuGnEhkSPXj08R
+it8DhfzXeXxWGx+T+BvJiuqyzOF/1MPBbmu4Ulr4pJPFEchKKqXPHxDGaAVchtX
ftGFZHfapcyE2RWF0/n8rspJGXzk7Nc8uMM3yZ5apeyywDSDKgdihE5MVKB1X/BC
kkZjHVvjgJsPEmSMD0+bibLQDhWuYihqkSG1uy5qqoXG630qXqGFu1ZKYZo4nsCm
Spv7xiY4iVrskZbCqMzGSHoCUCzdWj78URjeoMrrQGRqOhxjVDF0gu6IQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpG3KLKmETqKJz0+oNieAiefUDpMB8GA1UdIwQY
MBaAFIN+F392ZjFmx1GQ4tIJM1pqrlrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjIt
OGJhNzY4MDIyNzYzLzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjItOGJhNzY4MDIyNzYz
LzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVYHRXWn
Hg14d9oGZch3l25kkoMaPymhtt8ChIDp6U5vpT2hwyC09N8jtOIRdUM7qo4nEUuz
2Rap/Ml9JvG4/XmgePMkovrjJxQa/ab938G6WpJYAWcdziIuchThhvuQOMcnk23j
dBUq6rQMsZQYjctuDlz4VeCl4WgM30PVqMZBzFr44tsL82En47gKWbgcN8JVuDeT
MdsCFS+gBIF90AwZGc7i5fk7PjPT1/a6oMwenBT0XjumMDs4NxqOCYr5sWX3a6AU
hZGXo6A/TigqtM6hJj9soDCwR/lbns2xQAK1zFCNxbZl28+JF8IMszB/0Q5cY8z+
JyMmIZEOfTU1lw==
-----END CERTIFICATE-----
Generated at Tue Apr 28 04:31:43 2026 by rpki-client