Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: SJjI6+C8drXYZ6W7gZIsFT6rAtF9/flHQgaP65agvMs=
Subject key identifier: A1:93:11:BA:4A:6B:11:61:64:10:8F:62:C8:35:1B:3C:08:98:66:59
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 01A1987C72FB1272EEE20302046004EEBDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 14C0
Signing time: Sun 01 Nov 2026 19:00:55 +0000
Manifest this update: Sun 01 Nov 2026 19:00:55 +0000
Manifest next update: Mon 02 Nov 2026 19:00:55 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: elRNV7H+OjwreppY3AdSL1jmZfMkCmI9hR7KfRjPSII=)
2: G0Ups39E4GFR56ol0su_IFACNi8.roa (hash: gCerBkKlsxwbO7J0Er3ShvR4lHnv061n+i6flOqdmI8=)
3: Pg60ALp6BCafnXsx9z-yoclw0bI.roa (hash: iALv/oo25fuxLU1XNf/xhypcKk44pYVDeW/xO+4voRI=)
4: hj2ntpQ3M5_b-EiuEZYYDO5P9Xg.roa (hash: T5T3quxL/Q1U36wMiLm8IHXOnXCpntNi0uP3lMyfVhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:7c:72:fb:12:72:ee:e2:03:02:04:60:04:ee:bd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Nov 1 19:00:55 2026 GMT
Not After : Nov 2 19:00:55 2026 GMT
Subject: CN=a19311ba4a6b116164108f62c8351b3c08986659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a8:a2:35:aa:5c:6e:ea:07:60:5d:c0:03:73:
52:61:57:62:87:f8:69:7b:78:75:e5:86:97:46:e3:
38:f6:eb:05:dd:2b:d3:b4:6b:88:80:10:00:dc:1c:
96:56:79:93:85:96:60:fe:53:8c:90:8d:43:fa:cb:
e3:02:9c:58:06:7c:68:2b:63:17:0c:06:be:31:5d:
b0:08:56:c0:7f:a1:de:b7:25:15:fb:84:03:be:86:
fe:a6:0e:85:c8:ae:b0:91:c1:c6:16:47:fa:c7:c1:
a6:41:4f:12:6e:15:f9:74:c5:ae:63:e8:55:61:49:
b6:13:a9:84:ff:19:18:85:3d:2b:52:54:8d:7d:92:
b1:7a:4c:93:97:ec:e4:66:76:74:ec:69:70:d2:84:
0d:e7:f5:67:fa:ea:ac:de:9c:20:4f:3c:80:82:7a:
f6:ff:03:f2:77:4a:4a:8f:03:ab:66:d9:02:0a:5d:
a0:eb:ff:43:28:90:88:3a:4a:6e:61:b1:cc:06:b9:
5e:c7:9c:b3:23:1d:fc:cc:02:09:44:12:77:89:ea:
08:17:92:f3:f2:05:06:47:ff:ec:32:65:3a:69:6e:
ed:67:c3:c3:75:1b:71:ad:04:57:15:09:f3:d6:34:
b5:52:60:6e:8f:2c:4e:2a:4f:46:97:f8:a4:c6:51:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:93:11:BA:4A:6B:11:61:64:10:8F:62:C8:35:1B:3C:08:98:66:59
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f5:67:1c:14:b6:b9:07:70:8c:04:74:26:20:59:a3:fe:75:
08:52:24:4c:b6:6b:3a:3b:96:10:7d:78:76:28:68:c9:a9:86:
a5:2b:03:12:b8:dd:95:b0:a3:bd:a2:5d:8c:37:93:d6:e5:1c:
c8:e0:e2:7b:97:89:89:1f:a3:48:83:35:1a:1c:c6:d7:ed:b6:
27:32:97:bd:14:cf:6f:91:19:cf:76:d5:b3:0f:b5:ef:64:46:
d5:58:21:b3:87:12:fa:e0:2a:f3:ba:6e:ab:b1:21:ec:c1:5b:
a7:66:5e:04:d0:6b:26:d5:25:bf:89:ef:73:79:86:8f:78:d0:
0c:c5:04:10:dd:c5:d4:a5:e3:2a:fd:36:06:8c:99:5f:f3:42:
f5:8b:93:86:86:98:3c:57:64:94:7f:d6:2c:c1:a9:8d:1a:19:
16:50:b9:29:e2:4e:6c:7f:63:b9:34:e9:f1:1b:72:12:0f:5a:
1e:03:21:c6:ac:8f:95:d9:25:7e:80:63:10:e9:0d:79:73:25:
3e:1b:42:25:ff:35:60:ba:a6:07:9f:88:7a:0f:17:5e:10:49:
97:66:dc:eb:2e:71:79:37:14:47:57:bd:66:1b:14:2d:f2:3a:
2c:35:80:07:35:0a:8e:ba:9e:a7:1b:af:df:73:05:fa:f1:35:
03:1f:06:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGYfHL7EnLu4gMCBGAE7r2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj
NjZhZWIwHhcNMjYxMTAxMTkwMDU1WhcNMjYxMTAyMTkwMDU1WjAzMTEwLwYDVQQD
EyhhMTkzMTFiYTRhNmIxMTYxNjQxMDhmNjJjODM1MWIzYzA4OTg2NjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6iiNapcbuoHYF3AA3NSYVdih/hp
e3h15YaXRuM49usF3SvTtGuIgBAA3ByWVnmThZZg/lOMkI1D+svjApxYBnxoK2MX
DAa+MV2wCFbAf6HetyUV+4QDvob+pg6FyK6wkcHGFkf6x8GmQU8SbhX5dMWuY+hV
YUm2E6mE/xkYhT0rUlSNfZKxekyTl+zkZnZ07Glw0oQN5/Vn+uqs3pwgTzyAgnr2
/wPyd0pKjwOrZtkCCl2g6/9DKJCIOkpuYbHMBrlex5yzIx38zAIJRBJ3ieoIF5Lz
8gUGR//sMmU6aW7tZ8PDdRtxrQRXFQnz1jS1UmBujyxOKk9Gl/ikxlH2KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGTEbpKaxFhZBCPYsg1GzwImGZZMB8GA1UdIwQY
MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt
MjU0NTVhOGRkZDQ1LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1
LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPVnHBS2
uQdwjAR0JiBZo/51CFIkTLZrOjuWEH14dihoyamGpSsDErjdlbCjvaJdjDeT1uUc
yODie5eJiR+jSIM1GhzG1+22JzKXvRTPb5EZz3bVsw+172RG1Vghs4cS+uAq87pu
q7Eh7MFbp2ZeBNBrJtUlv4nvc3mGj3jQDMUEEN3F1KXjKv02BoyZX/NC9YuThoaY
PFdklH/WLMGpjRoZFlC5KeJObH9juTTp8RtyEg9aHgMhxqyPldklfoBjEOkNeXMl
PhtCJf81YLqmB5+Ieg8XXhBJl2bc6y5xeTcUR1e9ZhsULfI6LDWABzUKjrqepxuv
33MF+vE1Ax8GXg==
-----END CERTIFICATE-----
Generated at Mon Nov 2 06:51:51 2026 by rpki-client