Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier: I7DC72WX2OF9Ma6zl7u13M6hUnInHPLG0Y6USNvAH0Q=
Subject key identifier: 58:46:14:9E:00:D3:79:E0:48:8B:75:9C:4A:3D:21:DE:26:DE:84:7B
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 019D2696406B218917F045BE6DCCBD0A250B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number: 0DFC
Signing time: Wed 25 Mar 2026 20:01:14 +0000
Manifest this update: Wed 25 Mar 2026 20:01:14 +0000
Manifest next update: Thu 26 Mar 2026 20:01:14 +0000
Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: R7iDMH2w2cXzVDjdOj4kXEzPD12YTaajIE0f0vb0OTs=)
2: WKalSGnevGohhpgm-gEVPpoJ6r8.roa (hash: RtBxGLGQ1rKUm3Dw/j2SrY9FsdpNgrlCWPACnmZSvFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:40:6b:21:89:17:f0:45:be:6d:cc:bd:0a:25:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Mar 25 20:01:14 2026 GMT
Not After : Mar 26 20:01:14 2026 GMT
Subject: CN=5846149e00d379e0488b759c4a3d21de26de847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:d1:61:5b:7c:16:19:99:66:0a:d4:07:f3:
de:3c:7e:91:9c:49:f2:70:7a:d9:e8:4e:bc:29:8e:
b6:6c:d6:ba:84:f2:6a:22:46:17:13:f4:12:21:af:
64:16:5b:5d:7f:78:43:76:75:5e:7b:d2:3c:20:3a:
8d:e0:52:42:a8:9b:18:88:92:d9:51:72:a4:10:db:
60:2a:79:47:2e:d7:e2:e9:52:1c:ba:38:5c:1d:65:
6c:0a:bf:6f:c1:42:96:c6:5d:db:d6:80:22:51:be:
c2:55:eb:64:4d:69:18:1f:f3:e7:73:4f:b0:aa:d2:
73:91:76:dd:a4:d7:9d:08:84:a2:ae:98:8c:16:c0:
63:d0:14:98:24:ec:85:dc:9a:5f:24:33:b7:50:6d:
52:25:ae:be:8e:19:fc:82:bf:34:d1:d5:ab:b6:c1:
29:23:d7:a8:46:56:7a:7f:cc:01:0d:02:b0:ad:e6:
6e:90:04:64:52:5d:07:6d:55:8e:e5:5d:be:3b:17:
00:ec:18:96:df:6c:38:84:af:3f:d4:95:18:5e:e6:
84:38:32:46:fc:12:f0:45:0f:c5:6b:56:78:5e:60:
1f:19:93:23:a6:4d:0a:9b:40:7a:23:bd:db:37:d8:
63:97:a9:c4:14:b0:43:60:db:a5:85:76:50:a3:8a:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:46:14:9E:00:D3:79:E0:48:8B:75:9C:4A:3D:21:DE:26:DE:84:7B
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:d3:65:80:09:62:57:aa:1a:bb:ef:b3:02:c0:21:4c:33:00:
0c:c6:bc:d1:ff:69:c4:b8:de:37:d9:18:03:39:a9:cf:75:61:
2f:82:d1:64:b0:b0:08:3c:e5:af:1c:6c:59:dc:02:3e:47:4f:
57:10:b9:4e:2a:e5:7d:03:7e:3e:2f:75:12:5d:cc:82:41:f4:
db:a7:c0:ec:26:4e:c0:85:12:49:40:6b:3b:02:ff:c0:5d:4b:
dd:af:58:92:46:a4:3c:0b:42:8b:96:6b:8a:8b:c9:af:b8:25:
98:00:47:80:06:ac:06:ce:09:10:0e:f5:1f:de:47:00:a3:40:
e9:f1:f6:f0:5a:a2:17:23:36:c4:2d:f8:a4:87:bc:da:ac:4d:
15:8a:6f:f5:35:4a:0a:83:dc:f8:d8:92:e9:5e:c7:41:43:46:
be:f4:fa:5b:5a:09:45:46:2a:4f:0c:85:e2:a9:4b:a5:26:6b:
0c:c4:16:59:8a:d7:38:cb:29:7c:a3:a6:c2:97:6e:71:ad:4f:
6c:db:69:05:94:3b:97:ad:ea:ab:28:02:e1:e6:e9:35:c8:b5:
d3:37:1f:37:78:ef:02:bf:4c:df:cb:9d:57:4e:6a:6e:6e:db:
74:78:8d:11:83:bb:f2:57:de:2a:08:5b:6b:3e:3a:c7:d9:0a:
3a:44:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:05:35 2026 by rpki-client