Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: 2I3XlL8nnW2rh0y0DmGHvrO8zlD6K0tG7Tq48SOxLdY=
Subject key identifier: 00:06:14:D4:E7:7D:56:0E:01:E8:07:C1:95:A3:3A:3A:13:5A:46:4B
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 01A08CE87A28C7D087BC86453E4F83102616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 13AF
Signing time: Thu 10 Sep 2026 20:00:40 +0000
Manifest this update: Thu 10 Sep 2026 20:00:40 +0000
Manifest next update: Fri 11 Sep 2026 20:00:40 +0000
Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=)
2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: XeORDGEWbq8PWuqekBFFwDbiA/S1wOzKnI0SoSCpAZo=)
3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:7a:28:c7:d0:87:bc:86:45:3e:4f:83:10:26:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Sep 10 20:00:40 2026 GMT
Not After : Sep 11 20:00:40 2026 GMT
Subject: CN=000614d4e77d560e01e807c195a33a3a135a464b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:02:46:d8:78:78:4d:33:d0:c6:b8:ce:58:
b6:dc:7f:ab:7b:42:94:76:eb:92:d4:a6:44:92:d7:
00:2e:5d:55:95:6e:76:ee:e5:2b:a6:1b:f8:5d:6f:
b9:61:af:1f:6d:76:d1:18:c2:4c:de:29:9b:7c:01:
eb:a7:72:3c:8e:e5:81:88:37:94:8f:ad:f1:3f:61:
21:b3:1a:8c:7a:63:ff:81:29:1d:76:c2:a4:1d:23:
af:98:6b:b7:b3:83:84:36:ba:b9:07:81:05:ea:3e:
6e:38:19:3d:3b:cf:b5:5a:bb:a4:2b:a4:d3:ca:a3:
76:6d:7d:f3:de:ae:fa:7f:bc:11:83:a5:6a:db:21:
8f:ae:73:4a:eb:eb:f0:bf:15:9b:4d:70:46:5e:9d:
fa:2d:7e:21:77:88:11:03:58:46:cc:0d:29:01:7d:
ce:dc:f5:eb:b3:1f:da:b7:76:47:ef:80:8e:7a:d8:
e1:33:67:86:3a:cc:18:e6:04:54:e8:1b:29:4e:7b:
d2:3e:c9:05:10:a4:7a:2c:6f:49:62:c1:f8:fc:1f:
be:e4:5e:82:f4:54:59:b2:7d:3f:9f:b9:43:b9:01:
fc:c3:f9:f8:2b:bd:49:29:6f:60:cf:66:6b:3a:08:
52:fa:d3:51:c5:e8:66:e0:0f:87:8a:0b:21:29:79:
79:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:06:14:D4:E7:7D:56:0E:01:E8:07:C1:95:A3:3A:3A:13:5A:46:4B
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:5b:f4:be:71:2c:2d:68:d6:46:95:af:7a:26:b9:e6:63:ec:
f0:87:36:2c:6d:55:30:e2:da:aa:ad:a8:ec:42:ce:df:88:23:
44:2f:83:a9:d5:2d:49:c9:20:b5:e0:ee:29:1c:bb:09:dd:28:
55:84:f5:85:cb:b7:06:04:7c:d7:4a:96:1d:30:02:99:62:bf:
85:1b:65:ab:de:56:f5:da:dc:1e:44:36:dc:ea:94:11:02:c2:
2a:7c:15:5e:b2:21:67:bd:7d:ff:86:15:12:9c:ca:57:6b:5b:
3f:89:73:0a:08:92:0e:20:d2:f9:37:88:8a:85:a4:d3:b7:f9:
81:55:3e:d6:46:f5:b6:fe:c8:ac:6d:40:02:66:a7:5c:f0:ed:
7c:c2:a9:95:f8:b7:55:64:9e:f0:7d:1f:72:84:31:81:d3:d3:
c9:83:d9:77:12:18:53:bc:c3:16:ec:65:1b:ae:09:d7:41:49:
bd:51:e8:83:9d:6d:26:98:76:d2:1d:88:c8:e8:93:3b:1e:8c:
77:1c:a0:cf:92:9c:ef:97:32:0b:c5:91:43:e8:be:3d:7f:20:
09:db:06:9b:0a:28:32:69:19:7a:c6:9c:11:22:31:3b:e9:82:
fe:9a:d0:9a:ab:03:e7:68:82:cb:50:cb:5e:f3:ce:95:a4:92:
b6:18:f0:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCM6Hoox9CHvIZFPk+DECYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzN2UxNzdmNzY2NjMxNjZjNzUxOTBlMmQyMDkzMzVhNmFh
ZTVhY2UwHhcNMjYwOTEwMjAwMDQwWhcNMjYwOTExMjAwMDQwWjAzMTEwLwYDVQQD
EygwMDA2MTRkNGU3N2Q1NjBlMDFlODA3YzE5NWEzM2EzYTEzNWE0NjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn8CRth4eE0z0Ma4zli23H+re0KU
duuS1KZEktcALl1VlW527uUrphv4XW+5Ya8fbXbRGMJM3imbfAHrp3I8juWBiDeU
j63xP2EhsxqMemP/gSkddsKkHSOvmGu3s4OENrq5B4EF6j5uOBk9O8+1WrukK6TT
yqN2bX3z3q76f7wRg6Vq2yGPrnNK6+vwvxWbTXBGXp36LX4hd4gRA1hGzA0pAX3O
3PXrsx/at3ZH74COetjhM2eGOswY5gRU6BspTnvSPskFEKR6LG9JYsH4/B++5F6C
9FRZsn0/n7lDuQH8w/n4K71JKW9gz2ZrOghS+tNRxehm4A+HigshKXl5CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAGFNTnfVYOAegHwZWjOjoTWkZLMB8GA1UdIwQY
MBaAFIN+F392ZjFmx1GQ4tIJM1pqrlrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjIt
OGJhNzY4MDIyNzYzLzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83MGMxOWYtMjljYS00YjYyLWFjNjItOGJhNzY4MDIyNzYz
LzEvZzM0WGYzWm1NV2JIVVpEaTBna3pXbXF1V3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw1v0vnEs
LWjWRpWveia55mPs8Ic2LG1VMOLaqq2o7ELO34gjRC+DqdUtSckgteDuKRy7Cd0o
VYT1hcu3BgR810qWHTACmWK/hRtlq95W9drcHkQ23OqUEQLCKnwVXrIhZ719/4YV
EpzKV2tbP4lzCgiSDiDS+TeIioWk07f5gVU+1kb1tv7IrG1AAmanXPDtfMKplfi3
VWSe8H0fcoQxgdPTyYPZdxIYU7zDFuxlG64J10FJvVHog51tJph20h2IyOiTOx6M
dxygz5Kc75cyC8WRQ+i+PX8gCdsGmwooMmkZesacESIxO+mC/prQmqsD52iCy1DL
XvPOlaSSthjw4A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:24:20 2026 by rpki-client