Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier: oKxrcD7k1wFPQHJzTRRisV0NmOR7NXxnps72hqpw1cs=
Subject key identifier: FD:72:B7:51:C2:AD:16:5F:98:22:86:43:46:28:27:4D:5B:63:8C:A2
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 019E1FB56D883D446704FF56B8CCCE65AA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number: 0E7D
Signing time: Wed 13 May 2026 05:00:44 +0000
Manifest this update: Wed 13 May 2026 05:00:44 +0000
Manifest next update: Thu 14 May 2026 05:00:44 +0000
Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: S1vL1W3itrWcru1dAOFHkJ0hGesj33FXQn2nAMDAdUs=)
2: WKalSGnevGohhpgm-gEVPpoJ6r8.roa (hash: RtBxGLGQ1rKUm3Dw/j2SrY9FsdpNgrlCWPACnmZSvFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:6d:88:3d:44:67:04:ff:56:b8:cc:ce:65:aa:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: May 13 05:00:44 2026 GMT
Not After : May 14 05:00:44 2026 GMT
Subject: CN=fd72b751c2ad165f982286434628274d5b638ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:9f:1d:b5:25:75:e5:86:05:44:f5:db:a7:
5d:8e:22:70:f3:c4:e2:4f:b6:fc:85:d3:ee:d5:80:
6f:81:a9:be:aa:43:54:24:80:17:0f:ae:61:40:71:
4e:bb:ba:08:91:5a:46:2c:f6:de:78:cd:78:30:08:
73:bf:25:0c:a9:4c:6b:b0:b4:31:5e:39:80:ee:14:
8d:3a:6d:77:ad:a8:15:00:83:6a:ab:17:4c:dc:d4:
32:58:79:06:b3:cc:6b:77:14:28:ff:43:d1:2b:42:
ca:79:d9:6f:1f:24:98:54:98:66:6d:11:ab:85:34:
58:72:90:08:9d:01:6f:35:31:15:4d:44:20:1d:e5:
8f:38:39:81:b1:23:83:26:f6:92:1c:ae:4d:64:7e:
23:58:60:4b:cb:ec:aa:ed:9d:57:93:10:07:df:0a:
12:7c:4c:9a:69:bd:1a:1d:06:37:33:c0:6e:61:56:
4f:13:68:09:a4:cf:30:0e:b7:a7:87:39:38:14:2b:
e3:ca:7d:a1:57:81:71:6f:81:c8:20:d0:bc:2b:07:
ff:e2:47:f2:dc:82:96:d7:07:93:ab:33:81:34:50:
25:c3:24:0e:06:74:9c:0a:09:9b:55:98:64:31:47:
49:0c:41:4a:77:45:12:35:3d:63:16:e5:68:17:07:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:72:B7:51:C2:AD:16:5F:98:22:86:43:46:28:27:4D:5B:63:8C:A2
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:49:82:dd:43:b7:63:a9:3a:ba:23:d1:53:2f:db:e3:a4:0b:
ca:30:2d:c4:5e:b3:6e:c7:be:64:15:44:77:d8:1b:56:46:4b:
3f:0c:c3:d2:c3:6a:e7:e7:a2:bd:ea:54:60:7d:0a:8a:6f:6a:
b0:9b:ca:ff:49:1b:e2:5a:a7:25:b5:5c:c2:79:96:61:84:38:
cd:ef:ef:c3:b6:eb:1b:84:1c:98:a0:bc:ef:60:ca:f2:1e:35:
65:16:ed:0c:0b:39:7f:4c:c5:3f:6b:ee:9a:d2:75:d4:ba:f0:
8d:95:52:f5:50:af:9a:d3:bc:0f:4c:10:f6:23:71:62:f0:a3:
78:88:6e:23:58:fa:bc:e3:d9:ac:7d:56:31:47:1d:50:98:c1:
50:40:e0:11:14:00:bc:7f:28:db:a5:47:dd:63:f1:06:4f:b7:
26:de:3a:7d:72:5e:57:a0:22:5a:5a:02:09:a3:62:aa:8a:51:
03:f4:c8:81:0d:61:d7:7f:fb:9c:6d:91:f7:84:d2:6b:7e:79:
3e:31:e6:7e:75:48:c7:b3:68:4a:b1:b1:a8:c1:33:15:fb:09:
05:9c:af:fd:9d:8f:fc:73:d0:b4:c4:b4:01:87:7b:e2:e5:95:
72:fa:03:78:28:11:2c:07:eb:e1:68:e9:53:3e:9c:32:77:2b:
f0:af:60:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:40:48 2026 by rpki-client