Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: 3BoF0vPcgjNpju/OtLii4OTVzIVChxoSrfMhqkT0vuY=
Subject key identifier: B8:BF:D1:68:AD:3A:02:4F:70:62:F8:C6:3E:B9:F6:57:F0:9F:81:08
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 019FA33C6CCA6DA4DD375D9B6F0F8330E52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 1336
Signing time: Mon 27 Jul 2026 11:01:13 +0000
Manifest this update: Mon 27 Jul 2026 11:01:13 +0000
Manifest next update: Tue 28 Jul 2026 11:01:13 +0000
Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=)
2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: 4z2R/W/ceEVz2Cu1r0FHLQaSlWj9cCvuzbiBkM+RSOE=)
3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:6c:ca:6d:a4:dd:37:5d:9b:6f:0f:83:30:e5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Jul 27 11:01:13 2026 GMT
Not After : Jul 28 11:01:13 2026 GMT
Subject: CN=b8bfd168ad3a024f7062f8c63eb9f657f09f8108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:57:06:45:50:b8:95:f3:9e:d2:d9:0f:4c:fd:
3e:36:1f:09:eb:be:04:6e:ed:c4:dd:76:b5:ab:69:
76:e9:e6:9d:5f:39:ba:8d:6b:5f:7b:27:32:a7:ed:
82:7f:04:93:ae:25:52:7d:ab:3b:90:8d:44:e0:df:
06:de:27:cf:03:f6:87:cf:a6:0b:0d:1b:6e:89:c9:
14:61:b7:de:1d:7f:e2:20:56:9d:48:02:bc:75:f0:
70:06:c3:ac:e2:d6:c8:6e:36:b1:79:97:b0:69:2e:
0f:bd:8a:b5:5f:f4:eb:5b:55:a6:85:86:04:43:1d:
13:53:2d:a9:a8:1f:bd:44:88:de:ed:9e:30:19:b4:
96:e3:3a:ad:18:ff:03:e1:90:ed:71:08:df:dd:51:
ac:3f:72:0e:ec:11:e4:e8:85:6a:ba:db:0e:b7:f6:
6f:b5:2e:4a:c1:50:22:54:b3:ff:63:d1:cd:78:44:
b6:b4:15:52:07:af:bc:32:23:34:fc:fc:6c:dc:b3:
27:7e:0f:21:b6:a8:91:09:3e:5f:30:30:c9:69:2c:
25:20:6e:51:a0:c2:3b:ff:39:d2:28:b4:5b:29:71:
37:b9:0b:33:ae:ed:8c:b5:5e:8e:8e:2c:4d:5f:80:
3f:e7:e8:57:cf:d2:61:0d:b9:95:c4:7b:5f:fe:b5:
b2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:D1:68:AD:3A:02:4F:70:62:F8:C6:3E:B9:F6:57:F0:9F:81:08
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0c:aa:b1:37:56:c3:dd:39:4b:17:59:68:3c:f1:de:7b:f3:
1b:ec:9b:7a:0c:6b:30:4f:2c:75:49:f6:7a:b2:87:73:23:0c:
09:af:32:ae:e1:37:81:50:9d:83:e8:43:17:d1:8a:d9:8a:86:
a3:dc:2b:7a:ad:5b:4e:60:2b:ad:ff:e5:05:4d:6c:43:a1:19:
67:21:a5:80:72:d2:e6:57:34:55:07:57:f1:c7:f1:4a:94:b8:
3f:b7:1c:49:2e:db:9d:b6:c3:1a:f6:45:ef:fd:f5:a8:c5:e3:
7e:83:64:e0:0d:53:09:07:7d:b4:09:7c:d3:84:cf:cf:79:e1:
29:69:4b:67:f6:0a:0b:b7:30:5c:30:35:0b:3a:67:84:f2:d6:
ea:20:78:50:c4:c0:26:20:44:a7:76:65:15:e7:13:1f:a8:14:
b1:ed:d8:28:42:55:ac:ec:f4:c2:55:ee:13:89:7d:2d:b2:f4:
5c:96:14:24:38:d2:9d:92:d4:d4:15:39:e6:dd:06:89:9b:24:
77:b6:73:30:39:cd:24:cb:cc:bd:bb:72:17:b1:4c:be:ae:26:
bb:d5:79:b7:7a:d8:3d:d8:07:52:86:33:1b:a8:62:e7:32:ec:
bc:09:20:e6:68:54:e3:53:56:b7:c1:90:b6:c1:90:bd:6c:f7:
a4:bc:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:58:23 2026 by rpki-client