Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: iaD1NFdC9B5tWR7FEZfzOwKiV40J5U7Utp3mvfVBRZ0=
Subject key identifier: 15:0E:E7:BC:18:11:0A:23:8C:AF:3E:35:88:CD:32:C6:2B:44:35:F0
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 019FA44E7BB7EC20C6C3CE63766512704AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 13BA
Signing time: Mon 27 Jul 2026 16:00:34 +0000
Manifest this update: Mon 27 Jul 2026 16:00:34 +0000
Manifest next update: Tue 28 Jul 2026 16:00:34 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: GmlEjqzwLT+GTNgVNhlPjb3X/1eXA38bCEzx0XZjD0A=)
2: 8q9oSsZ4UYUMrh0rSwaxnqwZWJ4.roa (hash: UZuk/CP3WSM3LGuW3AkAPL5k1plOMJu2aZscVLHOeSY=)
3: B1oGCbp_lCKqrih8ynGfv6BUSjw.roa (hash: ZEKfqtdqNld+YDkZ9QlGUoE8oCQ7PZGkrXbAphwgc1E=)
4: WXj5VYe5fZV9KzEjCjPR1_zvgfY.roa (hash: p/GOCcmj2ID1uwRfM042pGyDP5xNtN4A8xvh5ei0x1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4e:7b:b7:ec:20:c6:c3:ce:63:76:65:12:70:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Jul 27 16:00:34 2026 GMT
Not After : Jul 28 16:00:34 2026 GMT
Subject: CN=150ee7bc18110a238caf3e3588cd32c62b4435f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:79:24:34:01:cf:b4:1e:c7:b5:20:04:49:
f7:d3:08:8f:9a:37:af:8c:bb:7d:29:a1:4f:66:ba:
eb:43:65:b9:91:3a:2f:cf:16:2c:6f:6c:8b:e3:2e:
e1:47:26:e4:bc:6d:12:12:7c:14:61:9b:2e:e5:09:
86:b2:2b:45:be:5c:cc:c5:d3:d1:8a:bf:29:90:64:
94:d5:18:22:37:de:15:54:0d:02:cd:0b:31:f8:1c:
c0:29:2f:27:a5:be:10:e3:98:5f:de:22:13:1e:20:
f2:8e:c1:a5:d6:43:d7:4e:51:aa:7c:fe:61:37:99:
e0:cf:82:45:f7:7e:fd:c2:e4:d0:10:87:e3:98:34:
5a:0f:a3:67:d8:c6:d4:d4:ff:08:e6:78:91:cd:e5:
6f:fe:07:44:43:c8:44:42:fe:55:22:c8:e0:16:fb:
30:92:55:4b:12:67:b7:85:b8:59:d5:55:3f:30:f5:
26:5a:7d:18:db:eb:99:35:61:b8:e7:10:1e:9d:d2:
bd:7d:5d:6b:79:f2:98:59:6b:2a:4a:cc:bc:49:c7:
d6:85:67:2c:4c:d9:9d:59:33:0f:f5:19:93:31:d8:
e2:d8:43:0f:ac:54:53:de:c5:cf:43:5e:f7:c0:0c:
f3:f8:7a:20:1d:22:85:f5:ef:de:49:9c:c8:e1:c1:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0E:E7:BC:18:11:0A:23:8C:AF:3E:35:88:CD:32:C6:2B:44:35:F0
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f4:b7:72:58:3b:97:a6:96:ec:9e:db:e3:a6:f3:97:ee:b6:
f3:4a:06:ac:1d:6c:79:0a:7a:60:a4:fa:b1:e5:53:8c:ae:61:
50:69:75:be:33:12:5e:c4:c8:8b:a6:e9:82:d2:c0:d5:1f:32:
15:6b:37:eb:d1:0a:77:9b:c4:74:4a:66:89:52:31:b5:6e:6c:
d0:8e:4e:38:c4:c9:e9:b8:63:d9:3a:eb:76:82:dd:38:da:6e:
80:f1:14:55:49:19:dd:dd:12:26:88:5c:19:d7:19:78:50:89:
fc:44:3c:a9:0b:d4:9e:7f:db:76:2a:b6:16:e4:1a:e5:b4:76:
76:f9:8e:54:e2:42:51:dd:57:be:88:f6:01:e4:69:bd:33:3c:
26:7f:b6:bd:c8:d2:8d:04:03:26:2c:01:b1:da:b1:7b:09:d0:
de:21:8e:2a:35:12:0a:6a:14:f6:50:45:1e:01:ca:47:0f:77:
51:cf:a0:56:00:7b:b5:84:24:d8:c7:a5:d0:b5:2f:51:50:57:
e3:e6:79:bf:19:f1:3d:b6:bd:26:2d:64:ab:55:80:d9:4a:b6:
08:5d:0b:52:ba:51:7b:8d:42:ce:32:54:b6:c6:3a:9d:f2:f0:
f2:84:dc:66:23:42:e5:39:0b:fa:52:9b:e1:bb:e9:df:0c:18:
14:3d:2b:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+kTnu37CDGw85jdmUScErxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj
NjZhZWIwHhcNMjYwNzI3MTYwMDM0WhcNMjYwNzI4MTYwMDM0WjAzMTEwLwYDVQQD
EygxNTBlZTdiYzE4MTEwYTIzOGNhZjNlMzU4OGNkMzJjNjJiNDQzNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXp5JDQBz7Qex7UgBEn30wiPmjev
jLt9KaFPZrrrQ2W5kTovzxYsb2yL4y7hRybkvG0SEnwUYZsu5QmGsitFvlzMxdPR
ir8pkGSU1RgiN94VVA0CzQsx+BzAKS8npb4Q45hf3iITHiDyjsGl1kPXTlGqfP5h
N5ngz4JF9379wuTQEIfjmDRaD6Nn2MbU1P8I5niRzeVv/gdEQ8hEQv5VIsjgFvsw
klVLEme3hbhZ1VU/MPUmWn0Y2+uZNWG45xAendK9fV1refKYWWsqSsy8ScfWhWcs
TNmdWTMP9RmTMdji2EMPrFRT3sXPQ173wAzz+HogHSKF9e/eSZzI4cHjuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUO57wYEQojjK8+NYjNMsYrRDXwMB8GA1UdIwQY
MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt
MjU0NTVhOGRkZDQ1LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1
LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPS3clg7
l6aW7J7b46bzl+6280oGrB1seQp6YKT6seVTjK5hUGl1vjMSXsTIi6bpgtLA1R8y
FWs369EKd5vEdEpmiVIxtW5s0I5OOMTJ6bhj2TrrdoLdONpugPEUVUkZ3d0SJohc
GdcZeFCJ/EQ8qQvUnn/bdiq2FuQa5bR2dvmOVOJCUd1Xvoj2AeRpvTM8Jn+2vcjS
jQQDJiwBsdqxewnQ3iGOKjUSCmoU9lBFHgHKRw93Uc+gVgB7tYQk2Mel0LUvUVBX
4+Z5vxnxPba9Ji1kq1WA2Uq2CF0LUrpRe41CzjJUtsY6nfLw8oTcZiNC5TkL+lKb
4bvp3wwYFD0rEw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 17:19:44 2026 by rpki-client