Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: c15UMIQVX9soJ5UarwfkF3eHWJWTyjJ5+e9SBafnjqU=
Subject key identifier: 13:44:2B:A0:71:54:3A:4F:7D:BF:15:25:02:55:98:85:74:FD:FA:6E
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 019D3865DCB68C476EC4F8C6EFCE8BD1BCF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 1279
Signing time: Sun 29 Mar 2026 07:01:32 +0000
Manifest this update: Sun 29 Mar 2026 07:01:32 +0000
Manifest next update: Mon 30 Mar 2026 07:01:32 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: OZVKqwr1ds36taWr9mM9D4iJ8yKWEMtCADhndffYWyE=)
2: 8q9oSsZ4UYUMrh0rSwaxnqwZWJ4.roa (hash: UZuk/CP3WSM3LGuW3AkAPL5k1plOMJu2aZscVLHOeSY=)
3: B1oGCbp_lCKqrih8ynGfv6BUSjw.roa (hash: ZEKfqtdqNld+YDkZ9QlGUoE8oCQ7PZGkrXbAphwgc1E=)
4: WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa (hash: p/GOCcmj2ID1uwRfM042pGyDP5xNtN4A8xvh5ei0x1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:dc:b6:8c:47:6e:c4:f8:c6:ef:ce:8b:d1:bc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Mar 29 07:01:32 2026 GMT
Not After : Mar 30 07:01:32 2026 GMT
Subject: CN=13442ba071543a4f7dbf15250255988574fdfa6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:36:9e:f9:88:d5:0a:f4:83:1a:aa:cf:d7:
ad:53:39:1c:f0:d5:b8:a4:c3:16:4c:f7:5a:c9:6c:
53:35:ce:61:83:e2:2c:2c:f7:44:a0:11:7b:8d:91:
5c:bf:98:64:c2:96:5b:fc:70:22:8a:27:35:35:49:
4e:01:53:46:88:a5:76:4e:64:33:57:22:04:49:6c:
6c:7e:f9:8e:4d:68:5a:a3:77:9c:8b:27:90:ce:35:
d2:fb:88:07:f4:0b:df:1c:fb:c9:54:c0:57:86:1c:
a5:51:bf:11:e1:85:9d:3d:48:b3:a0:8d:10:35:eb:
8a:b8:28:23:41:a9:4a:81:c3:41:44:17:25:5f:45:
2f:95:20:27:e1:21:35:df:22:f1:19:65:db:cb:f7:
84:d5:a1:95:66:1a:13:0b:06:a0:e6:c5:03:e0:db:
d0:8f:02:8a:91:ce:1f:f4:5d:5f:b8:68:48:27:8f:
45:bc:b1:58:93:9a:f9:68:03:d7:7a:fc:e7:b3:0a:
6b:03:eb:84:13:d4:ff:49:c9:a9:82:1c:22:fb:4e:
4a:af:77:de:a7:b2:82:6a:5f:f9:5b:35:42:d4:ef:
f5:0f:4f:30:f6:55:a8:70:e3:81:13:a1:1b:95:7f:
f8:e0:06:c0:bf:35:95:ed:18:b1:15:5b:31:6e:ab:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:2B:A0:71:54:3A:4F:7D:BF:15:25:02:55:98:85:74:FD:FA:6E
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:48:a7:ef:59:d8:4c:46:42:fc:a3:9c:33:52:83:a9:47:bd:
7c:b5:d1:15:92:f3:26:7e:5b:cc:80:e1:63:ce:d6:a0:36:5c:
b7:b8:05:bb:fd:3a:56:c7:77:ab:a1:05:1f:d3:56:44:e5:2e:
3f:be:d8:1a:a2:4f:26:00:34:ff:f9:b3:aa:0b:56:5b:8c:16:
c8:99:75:a0:1d:a2:c5:92:d8:27:d6:37:b7:68:1e:2a:0f:ee:
22:11:96:11:38:a5:7a:a9:6a:9d:13:ca:84:c9:63:8a:f9:fd:
40:d0:16:76:55:97:f9:04:07:d9:f1:01:df:b3:3c:62:81:bf:
9e:e2:5a:bd:92:ab:10:ed:4d:56:4a:4f:07:2e:dc:eb:d2:95:
31:c5:fa:d9:00:fd:ad:40:ab:26:97:b2:ae:2b:d2:20:22:5a:
aa:6f:08:4f:4a:07:37:a3:d7:ba:76:32:66:f8:17:62:88:ae:
40:e4:5a:45:ae:bc:04:b4:7b:ff:64:c5:0f:ab:95:36:91:f9:
7f:f7:a3:75:f2:86:a4:99:06:85:b2:11:c3:dc:3a:a2:ad:a2:
dd:78:99:9c:a1:91:0c:42:69:17:f1:3d:aa:86:2a:37:0f:dd:
23:57:92:ee:a6:79:e7:b9:42:84:a8:70:a1:0b:ff:1d:33:ac:
ee:19:cc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:03 2026 by rpki-client