Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: HA3ApBrWQCcO8N+OmjPFfY/1zTWDKvliXTkBAEIsAXg=
Subject key identifier: 70:3A:8C:B1:06:EA:B0:40:BB:2B:C9:10:D6:BE:88:9D:B2:76:32:0E
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 019EB98F3F3C4C48F505D5EC5FC5FF0FEF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 12BD
Signing time: Fri 12 Jun 2026 02:00:33 +0000
Manifest this update: Fri 12 Jun 2026 02:00:33 +0000
Manifest next update: Sat 13 Jun 2026 02:00:33 +0000
Files and hashes: 1: RM9PZmEOVXyQOpcKkgGG800BmXs.roa (hash: nkRH5Uf4DOoOcPLvN/gO5xsmS2c1PFe5kD90XYTo/88=)
2: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: JHPExxm3qRWgg7yrM6f5jMzrvEy0Tkm4TozP43h1u1I=)
3: mbdcwHlSOdMYUPvA5MeJ7d266D4.roa (hash: Pwk94nVN9WQFskxqF8Df/JcvOSkAkt2dNKq7yQ0vd80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:3f:3c:4c:48:f5:05:d5:ec:5f:c5:ff:0f:ef:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Jun 12 02:00:33 2026 GMT
Not After : Jun 13 02:00:33 2026 GMT
Subject: CN=703a8cb106eab040bb2bc910d6be889db276320e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:bd:2b:b3:53:77:62:c4:58:8b:57:50:ac:
2c:7c:7a:ed:58:6f:97:82:e2:56:16:fa:ab:2c:66:
d4:ee:02:32:1b:6e:87:c8:3f:0f:a6:69:1c:eb:ef:
f5:4f:05:05:5f:75:78:d9:07:83:4a:26:58:b9:1c:
fb:f1:f4:85:af:64:2d:60:e1:ba:71:be:bb:5d:99:
72:ee:24:35:57:2c:11:f7:0f:91:e4:da:3a:04:99:
b0:e8:aa:aa:40:d7:a1:43:39:3e:5f:98:c4:d8:a6:
87:89:0c:79:56:9a:1b:99:26:f5:07:b4:98:ed:ae:
06:73:4d:b9:a7:37:0c:30:ef:05:a3:fb:7d:cc:28:
28:9c:c7:ca:4d:bd:4d:93:6a:cf:8f:91:89:b5:16:
d7:8e:fc:ec:e6:dc:5b:f8:20:46:77:c4:c0:2b:9c:
97:bb:ff:12:b1:5f:1a:c6:81:75:dd:f1:f9:6f:2f:
33:86:96:52:14:20:37:0c:29:08:f7:34:9c:2c:e9:
86:de:28:51:78:fc:c8:f9:9b:c4:7a:91:cd:46:71:
89:d0:93:d1:8d:fc:03:76:5d:80:6d:0f:9f:a9:27:
29:f0:0b:a7:89:cc:7d:33:86:02:72:35:76:4d:7d:
e5:ed:76:8c:7d:10:74:de:80:be:ea:68:ba:7d:43:
60:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3A:8C:B1:06:EA:B0:40:BB:2B:C9:10:D6:BE:88:9D:B2:76:32:0E
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:11:52:96:19:0c:11:02:c2:f7:d8:ab:a7:fd:37:46:f8:cc:
5e:e0:e1:18:39:80:5b:fe:06:5b:35:78:cb:91:41:93:b6:a4:
53:0d:bf:11:af:5f:49:5a:b9:06:2e:76:f8:48:fc:71:a5:8e:
b9:d7:b7:54:f6:b3:c4:1b:67:fb:f8:f0:07:47:5a:11:f5:4f:
df:11:42:c7:65:e3:f1:0c:71:5f:a7:c8:c5:49:a8:18:90:c4:
af:22:2d:d7:0b:32:dd:7a:fc:92:62:e7:7f:4d:8b:64:0f:ad:
ed:62:90:b5:b5:e4:01:ec:28:46:07:97:84:41:d3:f5:f0:34:
37:90:7f:a3:7e:f3:61:20:be:90:ba:57:48:0a:56:3e:dd:1e:
5d:23:84:63:dc:1e:58:69:31:30:a4:c3:b6:f5:95:e7:cb:4c:
dc:16:c8:73:9a:b6:77:0f:fc:07:16:4c:a1:ef:78:5c:37:39:
1b:d7:f6:ed:4b:4e:9c:d9:f4:cf:63:fb:f4:62:9e:b2:02:76:
9b:e0:0a:d4:c8:6b:61:f9:79:c3:97:5f:6b:33:00:f2:83:cf:
41:fb:df:3e:f6:f5:f6:5d:5b:db:f4:8b:dd:35:c3:f0:8e:69:
b9:ae:07:cf:e0:b1:45:87:a4:e9:42:44:78:b2:12:92:00:28:
1a:11:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:54:25 2026 by rpki-client