Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: qTFXHhekZwQ5vnVGu+bwt0tWByclw+62x+OXEtqS2Bg=
Subject key identifier: 33:3C:FF:A8:11:9F:F6:D8:4E:C1:C7:56:F1:AB:3A:9D:20:89:6D:47
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 019CE824B2CD2081600CDEA293C89BEBC262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 11CC
Signing time: Fri 13 Mar 2026 17:00:44 +0000
Manifest this update: Fri 13 Mar 2026 17:00:44 +0000
Manifest next update: Sat 14 Mar 2026 17:00:44 +0000
Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=)
2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: Aa0azQnO792aJ6UalHUu9piOcMtQhsqDoBQMRjztxCM=)
3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:24:b2:cd:20:81:60:0c:de:a2:93:c8:9b:eb:c2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Mar 13 17:00:44 2026 GMT
Not After : Mar 14 17:00:44 2026 GMT
Subject: CN=333cffa8119ff6d84ec1c756f1ab3a9d20896d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ef:ec:10:aa:59:b7:83:50:19:9e:c9:72:7f:
6f:7b:07:51:09:31:78:30:fc:48:45:b8:56:9c:11:
d5:80:06:df:bd:8c:f4:ac:7f:ec:a7:f0:bb:88:b3:
77:60:fd:7b:e5:af:09:b5:90:f9:74:7a:d1:68:74:
29:93:cb:f3:f5:45:7a:57:5c:c1:f3:81:8f:84:ab:
7f:7e:97:72:1f:38:5b:0f:a8:4d:42:f6:fc:3a:0b:
05:00:89:8f:4f:92:ee:63:12:dc:4d:91:b8:6a:14:
a6:90:c4:de:cd:22:0a:3b:b5:6b:74:82:9f:e1:ea:
15:85:35:65:e5:27:78:c5:11:00:7f:03:1e:c1:95:
a2:e3:32:1d:a9:c5:fb:89:7a:79:53:7a:c9:99:82:
16:35:0f:c1:97:f8:bf:11:91:8f:e0:c5:7d:31:c7:
a7:76:bb:f5:64:c0:ba:e0:1c:0e:c0:01:d2:18:8e:
c0:57:f7:b7:d9:78:ed:77:b7:a7:be:8f:f7:c6:26:
be:7b:8c:f7:5c:25:24:f6:ab:f1:e7:3e:27:24:b6:
61:f1:36:ec:15:07:08:69:b3:19:e0:5e:f2:fc:78:
c3:71:df:92:db:ff:5e:f2:be:cd:c8:df:80:dd:21:
96:c6:1c:87:5c:51:6e:3c:5a:de:95:c3:8e:db:7f:
e4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3C:FF:A8:11:9F:F6:D8:4E:C1:C7:56:F1:AB:3A:9D:20:89:6D:47
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:35:63:a1:d7:60:03:b9:5e:0e:e6:84:ee:4b:29:9d:7a:c0:
a3:6f:93:8b:26:14:68:df:32:05:fd:66:ce:c6:4d:9a:8d:7c:
d4:10:4e:70:54:8b:c3:f8:5f:c0:74:37:28:91:46:49:bf:4d:
0a:86:ed:05:3c:55:01:41:14:7b:0f:b9:e5:06:13:c4:7c:e3:
fb:64:e2:dd:62:3a:70:78:40:9d:48:a7:c0:3d:1e:de:72:e1:
d0:91:76:c3:09:19:b4:db:d1:fc:6c:09:83:91:55:d9:63:47:
50:17:0b:5f:84:54:92:0a:ae:5b:5b:5a:56:5a:38:bc:8d:03:
55:74:94:9f:62:1b:84:4b:c1:d0:c6:44:82:92:68:8b:2c:0c:
aa:2c:6d:5e:f7:38:6f:13:a9:a4:4b:61:ea:4c:8c:e4:c1:43:
2f:11:a5:0c:a1:85:7e:6a:24:77:04:d4:6f:d2:96:89:48:ab:
b8:65:09:6c:1a:e9:5e:1a:d7:0c:fa:59:ef:d4:13:f8:f5:fa:
9f:10:31:1d:ea:2e:de:00:a6:a4:eb:4b:db:b0:b9:73:bf:0a:
42:31:8e:5b:4c:d6:25:f5:c5:5a:ae:ea:4c:5d:11:a4:a4:af:
2e:96:0d:cb:e1:3b:73:b3:50:a0:a6:d1:c0:f4:ea:3b:2b:f3:
7e:f7:a0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:44:16 2026 by rpki-client