Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: PvZ3hfs2hSuya7QlAUuu+PzABO8sPAJYEjtKefD2mhk=
Subject key identifier: 91:83:1C:1C:D7:31:92:B8:CD:68:EB:41:14:93:15:24:50:BA:D0:CF
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 01A08DFC3F57DE3D35262E15730AE5A27AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 1433
Signing time: Fri 11 Sep 2026 01:01:53 +0000
Manifest this update: Fri 11 Sep 2026 01:01:53 +0000
Manifest next update: Sat 12 Sep 2026 01:01:53 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: bGv5xFWTn75Gl4YV5VFwDhgcrByjt/isZIY58XhLXeo=)
2: 8q9oSsZ4UYUMrh0rSwaxnqwZWJ4.roa (hash: UZuk/CP3WSM3LGuW3AkAPL5k1plOMJu2aZscVLHOeSY=)
3: B1oGCbp_lCKqrih8ynGfv6BUSjw.roa (hash: ZEKfqtdqNld+YDkZ9QlGUoE8oCQ7PZGkrXbAphwgc1E=)
4: WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa (hash: p/GOCcmj2ID1uwRfM042pGyDP5xNtN4A8xvh5ei0x1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fc:3f:57:de:3d:35:26:2e:15:73:0a:e5:a2:7a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Sep 11 01:01:53 2026 GMT
Not After : Sep 12 01:01:53 2026 GMT
Subject: CN=91831c1cd73192b8cd68eb411493152450bad0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:40:c1:d5:12:df:e1:37:a8:d3:8e:c4:51:d6:
a6:b4:ee:cb:0e:c5:ba:5a:ce:3f:65:37:29:c0:40:
7e:18:41:33:39:6e:58:e8:1d:b1:cb:bd:38:98:95:
54:02:85:d7:9b:9a:39:f6:be:01:f2:db:e0:ab:1f:
31:89:59:cc:10:a8:be:72:e9:ac:d9:c2:22:02:fe:
96:8e:90:27:a1:64:29:2b:82:f1:15:fe:53:0a:42:
e7:18:5b:2b:64:2c:51:46:7a:6d:15:64:ae:a7:3d:
53:7c:00:74:a9:3c:96:c0:e0:1c:04:26:e9:de:f4:
28:fb:55:45:ea:f3:85:04:06:59:ce:b1:25:f5:03:
64:20:ac:47:82:0b:4f:b8:8d:64:c6:9e:d8:55:76:
fc:a7:ab:0d:dd:43:c7:cf:f1:55:c6:11:54:12:2b:
4a:a0:7d:a9:50:ed:9f:cb:c6:1f:71:a0:b9:9d:3d:
14:67:de:f4:8e:a2:aa:b5:0a:48:87:95:10:58:60:
ae:48:81:05:5e:a0:89:59:79:92:68:e3:2e:76:29:
57:70:ee:cc:fb:96:5c:ac:45:7a:6e:d5:09:96:63:
b0:b5:30:ff:05:78:37:ed:e4:49:26:84:65:a1:20:
d5:81:8d:42:c0:0d:3f:82:73:6f:79:2b:f9:f7:91:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:83:1C:1C:D7:31:92:B8:CD:68:EB:41:14:93:15:24:50:BA:D0:CF
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1a:15:ac:e2:bf:31:a5:b5:ca:39:57:50:b4:b1:28:5a:2e:
40:19:af:df:14:4d:e8:6e:e3:ee:20:8a:a5:19:0b:73:28:96:
f2:08:7b:ca:7b:20:1e:8a:5b:a2:22:85:a0:bd:44:ee:ad:1a:
61:8f:02:70:8d:79:2c:65:1a:69:69:fa:90:70:1f:d7:32:63:
54:a3:a6:d8:94:f5:97:70:9f:e3:61:51:cb:00:dd:0c:53:36:
96:14:30:34:c7:78:f6:00:b9:16:ce:2d:52:70:21:7a:d5:2f:
64:b5:1a:e5:65:26:34:9a:d3:48:e6:33:82:87:10:42:23:29:
79:c6:10:e4:22:6b:ac:6d:07:8f:b8:8e:6c:32:b7:c3:3f:df:
fb:d4:e9:3d:f1:5f:21:20:39:d1:14:80:65:78:f4:36:20:7c:
53:85:4f:27:41:a3:a8:42:72:09:51:f3:e2:87:79:62:85:d3:
df:85:26:9c:40:4b:75:19:8b:93:f4:27:a3:7f:a9:0f:bb:30:
f6:ad:91:21:db:53:7e:29:fa:8a:ff:14:64:a1:54:d4:19:f7:
8b:d0:26:a9:84:e4:ff:fe:71:a3:ad:78:41:ad:83:3b:fd:a7:
5f:9e:f2:ce:e4:29:bb:e0:b8:ff:34:25:d7:7c:25:d3:43:53:
7f:0d:16:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCN/D9X3j01Ji4VcwrlonrsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj
NjZhZWIwHhcNMjYwOTExMDEwMTUzWhcNMjYwOTEyMDEwMTUzWjAzMTEwLwYDVQQD
Eyg5MTgzMWMxY2Q3MzE5MmI4Y2Q2OGViNDExNDkzMTUyNDUwYmFkMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EDB1RLf4Teo047EUdamtO7LDsW6
Ws4/ZTcpwEB+GEEzOW5Y6B2xy704mJVUAoXXm5o59r4B8tvgqx8xiVnMEKi+cums
2cIiAv6WjpAnoWQpK4LxFf5TCkLnGFsrZCxRRnptFWSupz1TfAB0qTyWwOAcBCbp
3vQo+1VF6vOFBAZZzrEl9QNkIKxHggtPuI1kxp7YVXb8p6sN3UPHz/FVxhFUEitK
oH2pUO2fy8YfcaC5nT0UZ970jqKqtQpIh5UQWGCuSIEFXqCJWXmSaOMudilXcO7M
+5ZcrEV6btUJlmOwtTD/BXg37eRJJoRloSDVgY1CwA0/gnNveSv595FfRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGDHBzXMZK4zWjrQRSTFSRQutDPMB8GA1UdIwQY
MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt
MjU0NTVhOGRkZDQ1LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1
LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBoVrOK/
MaW1yjlXULSxKFouQBmv3xRN6G7j7iCKpRkLcyiW8gh7ynsgHopboiKFoL1E7q0a
YY8CcI15LGUaaWn6kHAf1zJjVKOm2JT1l3Cf42FRywDdDFM2lhQwNMd49gC5Fs4t
UnAhetUvZLUa5WUmNJrTSOYzgocQQiMpecYQ5CJrrG0Hj7iObDK3wz/f+9TpPfFf
ISA50RSAZXj0NiB8U4VPJ0GjqEJyCVHz4od5YoXT34UmnEBLdRmLk/Qno3+pD7sw
9q2RIdtTfin6iv8UZKFU1Bn3i9AmqYTk//5xo614Qa2DO/2nX57yzuQpu+C4/zQl
13wl00NTfw0Weg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:00 2026 by rpki-client