Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: ds5tgkXO8eUqcL9kzZebDzv/gu1dsjltjVzeEqu4HCE=
Subject key identifier: 9B:45:40:04:38:87:C8:7F:02:0F:C7:A7:1B:3E:84:4B:4C:79:EC:62
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 019E2F96BE5B0BF3F55EC2A6EC902F8B369D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 12F9
Signing time: Sat 16 May 2026 07:01:08 +0000
Manifest this update: Sat 16 May 2026 07:01:08 +0000
Manifest next update: Sun 17 May 2026 07:01:08 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: UQ0fUjhm/oZMp1kCL6e/s/WcWEqLk3JbqfDTuZR8QYw=)
2: 8q9oSsZ4UYUMrh0rSwaxnqwZWJ4.roa (hash: UZuk/CP3WSM3LGuW3AkAPL5k1plOMJu2aZscVLHOeSY=)
3: B1oGCbp_lCKqrih8ynGfv6BUSjw.roa (hash: ZEKfqtdqNld+YDkZ9QlGUoE8oCQ7PZGkrXbAphwgc1E=)
4: WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa (hash: p/GOCcmj2ID1uwRfM042pGyDP5xNtN4A8xvh5ei0x1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:be:5b:0b:f3:f5:5e:c2:a6:ec:90:2f:8b:36:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: May 16 07:01:08 2026 GMT
Not After : May 17 07:01:08 2026 GMT
Subject: CN=9b4540043887c87f020fc7a71b3e844b4c79ec62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:26:d4:f5:ce:bc:f9:c8:b1:2b:72:95:f1:
9f:c8:53:b0:69:ce:a4:36:d1:46:35:9a:03:c0:5e:
89:ce:5e:7d:8e:f7:5e:1a:be:50:46:01:01:da:04:
c0:91:f0:14:25:83:2d:3d:a1:c0:14:b8:3e:4a:2a:
18:91:24:ec:75:e3:38:6c:c6:cf:23:2c:51:15:b8:
e6:ca:de:46:27:db:52:64:88:c8:e7:3d:9d:61:1c:
86:da:ab:77:85:46:1c:7c:30:26:ba:e2:4a:51:aa:
3b:82:29:ac:f0:47:81:71:25:77:fb:5d:76:2a:d4:
42:05:fc:6e:2c:45:bc:1f:77:36:2d:12:33:2e:2a:
d1:21:64:e4:7c:0b:e1:11:6f:02:79:76:fe:37:55:
b9:4c:de:c3:20:df:c0:f4:18:f9:0c:6d:27:71:fe:
be:22:78:a6:1e:93:4a:b1:34:75:3b:48:c2:a9:8d:
a6:e3:b7:7f:6d:52:a7:6d:ff:c9:14:3b:f5:c7:5f:
80:2c:17:aa:06:a5:9e:e5:f7:1b:eb:96:47:58:41:
76:fb:17:72:f7:64:b8:64:f7:dc:0b:90:10:fc:fc:
85:93:2b:da:eb:1e:04:80:27:21:76:b3:66:85:7c:
9a:fe:8a:94:0d:b9:59:05:a2:93:8a:f3:32:2c:16:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:45:40:04:38:87:C8:7F:02:0F:C7:A7:1B:3E:84:4B:4C:79:EC:62
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c9:d8:fe:30:7c:77:01:2c:6d:32:b7:25:ce:40:74:d6:3a:
19:b9:69:57:05:e7:7c:44:13:92:9d:90:72:2a:33:64:5f:0b:
d1:d3:5a:b2:72:ac:ba:d7:cb:6e:12:e9:b1:17:e1:90:e3:69:
36:aa:03:70:23:11:e1:8a:c9:2a:3c:48:e7:37:13:8c:a7:db:
6c:0b:f1:a3:c2:3c:a0:d7:be:70:a3:d0:78:5b:df:c1:0c:8b:
b6:bd:7d:49:95:69:bf:b9:ff:ab:7f:93:85:73:18:7c:41:eb:
ba:1f:93:90:f1:52:58:00:cf:0f:72:69:10:73:8c:95:95:95:
f2:62:a8:e5:08:bb:bb:e5:00:c4:c3:98:d8:f7:2f:11:86:bd:
88:c1:01:84:2b:e3:7b:76:66:61:cf:8d:09:76:7e:bb:43:39:
45:31:9f:4e:68:ce:79:20:0a:19:01:9a:64:d3:46:1d:a4:3e:
8d:cd:2f:90:09:99:c7:88:6d:30:fa:8d:a8:a7:09:a5:53:a9:
b5:68:fa:99:25:88:bf:90:8e:7e:4d:21:98:30:61:c8:08:66:
ff:7c:a4:95:0d:e3:b6:45:ff:e4:4e:3d:f7:c6:46:05:fe:e4:
64:ee:1a:9c:39:10:2b:42:ab:a1:5e:5d:2c:8d:dc:6a:57:65:
62:50:24:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vlr5bC/P1XsKm7JAvizadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj
NjZhZWIwHhcNMjYwNTE2MDcwMTA4WhcNMjYwNTE3MDcwMTA4WjAzMTEwLwYDVQQD
Eyg5YjQ1NDAwNDM4ODdjODdmMDIwZmM3YTcxYjNlODQ0YjRjNzllYzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy4m1PXOvPnIsStylfGfyFOwac6k
NtFGNZoDwF6Jzl59jvdeGr5QRgEB2gTAkfAUJYMtPaHAFLg+SioYkSTsdeM4bMbP
IyxRFbjmyt5GJ9tSZIjI5z2dYRyG2qt3hUYcfDAmuuJKUao7gims8EeBcSV3+112
KtRCBfxuLEW8H3c2LRIzLirRIWTkfAvhEW8CeXb+N1W5TN7DIN/A9Bj5DG0ncf6+
InimHpNKsTR1O0jCqY2m47d/bVKnbf/JFDv1x1+ALBeqBqWe5fcb65ZHWEF2+xdy
92S4ZPfcC5AQ/PyFkyva6x4EgCchdrNmhXya/oqUDblZBaKTivMyLBZ64QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtFQAQ4h8h/Ag/Hpxs+hEtMeexiMB8GA1UdIwQY
MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt
MjU0NTVhOGRkZDQ1LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1
LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcnY/jB8
dwEsbTK3Jc5AdNY6GblpVwXnfEQTkp2QciozZF8L0dNasnKsutfLbhLpsRfhkONp
NqoDcCMR4YrJKjxI5zcTjKfbbAvxo8I8oNe+cKPQeFvfwQyLtr19SZVpv7n/q3+T
hXMYfEHruh+TkPFSWADPD3JpEHOMlZWV8mKo5Qi7u+UAxMOY2PcvEYa9iMEBhCvj
e3ZmYc+NCXZ+u0M5RTGfTmjOeSAKGQGaZNNGHaQ+jc0vkAmZx4htMPqNqKcJpVOp
tWj6mSWIv5COfk0hmDBhyAhm/3yklQ3jtkX/5E4998ZGBf7kZO4anDkQK0KroV5d
LI3caldlYlAkWA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:56:13 2026 by rpki-client