Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: AaF4YJFLJmhNtEbzcXZZaC2+9KObNiVlNVeCwSJgkeM=
Subject key identifier: 36:D9:F5:9E:2B:23:40:EE:94:BE:C8:2A:6F:36:29:83:2D:09:6F:35
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 01A17E4F9EA6BFA5550281B2C8E1A53C5ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 142C
Signing time: Tue 27 Oct 2026 17:01:49 +0000
Manifest this update: Tue 27 Oct 2026 17:01:49 +0000
Manifest next update: Wed 28 Oct 2026 17:01:49 +0000
Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=)
2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: ErB6m3F0f6n6sDJLjuObvneCTTEPtcjHooS1LET79HQ=)
3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:9e:a6:bf:a5:55:02:81:b2:c8:e1:a5:3c:5a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Oct 27 17:01:49 2026 GMT
Not After : Oct 28 17:01:49 2026 GMT
Subject: CN=36d9f59e2b2340ee94bec82a6f3629832d096f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:8d:67:cd:b5:3d:9a:67:02:26:d8:12:06:
42:fd:ea:b7:7a:f8:8e:0e:c3:67:21:67:dc:e7:4c:
f1:69:2c:8c:dd:4c:dd:76:8d:50:57:1d:c1:16:95:
9d:a3:b3:cd:7a:d3:9a:b1:87:11:a7:70:97:b8:41:
e0:b9:f3:a8:7c:6e:05:04:ec:a9:d6:44:8e:e7:48:
6a:c8:19:b6:37:bc:92:1c:e9:4e:cc:63:0e:45:2d:
4e:ff:f7:17:fa:57:01:2f:a3:0e:c5:98:a5:9f:03:
dc:cc:41:6c:36:47:70:f5:dc:40:15:ce:e1:3d:af:
71:47:34:2c:12:a9:fe:23:10:d5:9c:a4:73:d9:52:
66:d9:ce:73:4a:e8:2d:b7:1c:b7:16:11:07:e9:90:
65:a1:bd:07:0a:5f:7a:de:f8:aa:7a:50:dd:4e:05:
f2:2a:00:a8:14:e4:a3:3e:ad:55:8e:6c:94:39:f0:
7d:00:9a:b5:f4:31:88:53:21:0f:e3:f4:ef:7a:c5:
7f:dc:90:cf:0a:9c:e8:d5:d3:fa:f4:d1:cd:aa:2b:
7f:fe:cc:6e:d1:78:e4:35:fb:c0:14:4c:b4:fa:41:
6d:0d:25:a7:fd:e7:ef:89:81:e0:d7:a6:94:81:f4:
b7:ea:b1:2f:9f:4a:f9:75:1a:6a:f3:b5:69:61:6b:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D9:F5:9E:2B:23:40:EE:94:BE:C8:2A:6F:36:29:83:2D:09:6F:35
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:00:27:09:98:c8:d7:8e:8d:26:1e:4c:3a:3c:1a:00:40:4f:
c3:af:21:88:e4:4d:5d:4e:71:df:13:bf:9e:20:1b:4e:fb:8c:
e2:f4:a0:3b:c2:10:e2:fb:79:6a:78:f7:d1:48:62:c4:47:47:
3d:fc:bc:f5:d5:7d:76:37:aa:9e:0b:5b:91:b7:18:c2:37:d2:
e5:cb:4b:72:b9:2d:66:f6:2f:83:24:bf:a7:52:17:04:06:2a:
c0:ec:01:9b:2f:91:10:9a:79:0f:8c:e9:a1:71:0b:54:48:3e:
ed:04:fc:2c:d7:1a:a7:b2:dd:f6:52:f4:ee:c0:b7:b2:2d:42:
0a:4a:8e:44:49:90:c8:33:59:21:a1:21:54:a1:6f:1a:09:97:
85:e9:3b:00:45:65:64:41:80:cc:76:61:1d:9c:86:08:cd:c1:
a8:d2:ad:b2:8d:ef:ea:9b:ac:c1:5c:45:f7:41:6d:b8:bd:8d:
80:4e:91:d1:e0:0c:ea:e5:25:fc:11:60:f1:ab:41:51:51:35:
1b:ed:76:cf:1d:95:2e:94:c6:69:6b:7b:2c:08:11:33:d8:5c:
04:7a:38:d5:92:e2:0d:ec:6e:79:98:b0:e8:d2:54:29:9c:6f:
d6:f4:45:89:57:26:21:d6:28:fe:b6:5f:23:69:65:57:cf:63:
64:ef:a4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:56 2026 by rpki-client