Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
File: 34IML0VYrBCvX1xwucbsJ2OAhOw.mft (raw, json)
Hash identifier: ZlfwYtGmozjX+XVHttaI1aSqTEF8Xh0hMg/2z9k7qpY=
Subject key identifier: 16:84:87:50:21:3E:1A:8F:B4:60:97:AB:E1:B4:6C:0A:F9:96:FB:A0
Authority key identifier: DF:82:0C:2F:45:58:AC:10:AF:5F:5C:70:B9:C6:EC:27:63:80:84:EC
Certificate issuer: /CN=df820c2f4558ac10af5f5c70b9c6ec27638084ec
Certificate serial: 01A0404E68E198ABE1DF2B6B938C1590AFA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34IML0VYrBCvX1xwucbsJ2OAhOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:15 +0000
Manifest this update: Wed 26 Aug 2026 23:01:15 +0000
Manifest next update: Thu 27 Aug 2026 23:01:15 +0000
Files and hashes: 1: 34IML0VYrBCvX1xwucbsJ2OAhOw.crl (hash: QHKRnWL2BRu35Mjdugwlofl4yAl6JpAij7aeDcCJgBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/34IML0VYrBCvX1xwucbsJ2OAhOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:68:e1:98:ab:e1:df:2b:6b:93:8c:15:90:af:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df820c2f4558ac10af5f5c70b9c6ec27638084ec
Validity
Not Before: Aug 26 23:01:15 2026 GMT
Not After : Aug 27 23:01:15 2026 GMT
Subject: CN=16848750213e1a8fb46097abe1b46c0af996fba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:1c:8b:df:d4:83:4b:96:6e:a3:ff:78:85:
89:79:7b:8a:62:2c:47:a7:31:66:1a:e8:2c:ab:42:
c8:c4:0e:fe:4c:d6:31:51:6e:60:9f:cf:e2:7d:49:
21:36:f6:f3:fd:22:94:1d:5f:d8:ce:6e:55:89:f7:
06:f2:6c:27:df:98:c9:10:e1:ca:22:02:5b:79:5f:
27:64:55:90:bc:b8:3c:b8:7e:4c:0c:a3:5b:6d:c2:
db:2e:40:3f:63:ca:f1:75:f2:45:aa:7b:1a:a9:11:
ea:48:48:e8:a4:0b:82:a9:f0:f4:b2:6f:fe:8e:4b:
71:16:81:14:d9:4d:57:8b:7e:95:77:41:3f:bc:62:
ad:d0:2f:d6:36:a5:05:0f:75:3d:b1:ca:3c:ae:3d:
9c:9c:fa:af:44:c3:b1:33:ab:9b:de:18:f0:a0:9f:
38:5c:f1:ff:1c:36:be:2b:4d:53:ca:f5:39:1d:3c:
c5:0d:ec:9a:df:66:64:47:96:fa:ab:21:25:b0:32:
53:51:dc:ac:91:01:82:df:6b:06:24:4e:fc:e2:09:
40:c6:3a:cc:7d:3f:33:17:77:fa:2e:ff:f0:93:66:
33:0e:be:2c:10:94:fb:47:c8:c9:55:74:b3:55:ab:
27:5f:84:95:ed:41:16:e0:a0:d4:a0:e9:19:30:8f:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:84:87:50:21:3E:1A:8F:B4:60:97:AB:E1:B4:6C:0A:F9:96:FB:A0
X509v3 Authority Key Identifier:
keyid:DF:82:0C:2F:45:58:AC:10:AF:5F:5C:70:B9:C6:EC:27:63:80:84:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34IML0VYrBCvX1xwucbsJ2OAhOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e67b1b-4b6f-4535-9311-4b9187d91c66/1/34IML0VYrBCvX1xwucbsJ2OAhOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cd:ea:9c:e6:c0:e7:3c:58:23:67:7a:3f:9e:25:7e:b8:b3:
33:0d:cf:ab:b9:c0:32:ff:c7:d7:1d:97:60:6c:80:2f:31:21:
58:02:6d:ba:c2:b5:e8:2a:fb:9f:43:0d:0d:f9:51:7f:d5:21:
3b:f3:8b:a9:a9:da:86:02:47:b6:b7:4d:14:69:ff:62:90:35:
6f:79:66:ca:0c:0e:69:53:cc:40:da:4c:d9:e8:d9:62:18:78:
12:0c:87:20:5d:e8:11:16:9c:0f:9b:d1:e5:4d:ed:f1:14:7e:
02:56:6a:0e:25:53:95:d4:aa:ab:3b:81:1d:8f:44:32:da:37:
da:9b:b1:a4:f9:67:31:48:1b:35:4b:3e:40:c4:29:83:c8:88:
23:83:88:9a:8a:de:8b:f4:47:35:39:e9:44:2b:9b:33:8c:63:
14:72:27:f4:ac:01:00:b6:cb:ef:20:11:df:a4:0c:ef:f6:6e:
74:dc:a6:82:9b:88:7a:d1:54:c4:08:9e:c3:b0:b3:d6:a7:39:
24:0f:29:0a:4a:db:d2:34:26:2b:69:5f:8b:42:49:9e:b2:8d:
d5:1b:64:4f:b5:49:bb:64:16:ae:02:7c:01:9b:5f:66:f7:c5:
77:40:9f:8c:1c:14:81:d7:c3:39:55:24:cd:9f:5d:52:c8:8a:
c6:5a:19:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:30:37 2026 by rpki-client