Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier: u9vaPvX2RNtASGDN3kpuYnei/nljXLzAXZkyvhyCTBA=
Subject key identifier: 7A:83:AC:1B:65:98:F6:06:EB:82:C2:0E:2E:FE:EC:53:B9:62:27:52
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 019F927EDC1D33E203088979B30C477C14DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number: 0F3D
Signing time: Fri 24 Jul 2026 05:00:15 +0000
Manifest this update: Fri 24 Jul 2026 05:00:15 +0000
Manifest next update: Sat 25 Jul 2026 05:00:15 +0000
Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: oI+sFHOZgOUmEL6i68frlc7N6pHaC6YmuN92kEqMjbo=)
2: WKalSGnevGohhpgm-gEVPpoJ6r8.roa (hash: RtBxGLGQ1rKUm3Dw/j2SrY9FsdpNgrlCWPACnmZSvFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:dc:1d:33:e2:03:08:89:79:b3:0c:47:7c:14:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Jul 24 05:00:15 2026 GMT
Not After : Jul 25 05:00:15 2026 GMT
Subject: CN=7a83ac1b6598f606eb82c20e2efeec53b9622752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:94:15:ab:17:66:2c:85:61:b5:95:95:6b:9f:
88:c1:93:7d:5e:48:29:82:66:e4:70:25:1f:74:d4:
ab:c7:6f:9b:36:a6:b7:fb:36:74:3e:6b:08:c8:32:
19:23:f1:67:cf:91:9d:1b:f2:60:13:e5:0e:19:aa:
dd:a7:2b:2c:5c:8a:4f:50:74:9f:c0:3e:e5:b4:1e:
e0:91:0c:6d:10:14:b9:7a:73:01:0c:3e:aa:1f:df:
b3:d2:8b:47:91:d0:07:9a:61:77:da:91:43:74:89:
7c:95:32:05:df:3d:b4:46:d4:64:1c:ae:cc:c2:7b:
14:48:29:66:46:71:0e:67:f5:ad:97:7c:90:0d:3a:
17:9a:20:5d:67:47:2c:a1:17:ca:ae:5c:87:fb:69:
5e:33:7f:9a:2e:fd:73:30:78:84:e9:65:ea:85:13:
24:d6:fe:1e:98:68:66:d0:56:05:65:82:8f:a7:ac:
7e:5b:aa:b0:6c:92:81:bd:64:e8:f0:a3:40:9c:57:
b7:06:64:85:45:af:56:c7:f7:4c:ba:a2:18:21:8a:
0d:1e:be:b6:10:5a:45:e4:36:85:8a:3d:de:ba:71:
c5:6b:50:e1:88:df:7b:f2:9a:b9:a0:99:f8:35:43:
08:db:34:05:50:fc:37:f0:41:3c:68:3f:6d:bf:6c:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:83:AC:1B:65:98:F6:06:EB:82:C2:0E:2E:FE:EC:53:B9:62:27:52
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:b8:cf:09:0a:77:22:9c:68:b7:85:aa:83:b4:9c:c5:1e:73:
eb:3a:ce:d3:47:22:7a:3c:df:07:5e:4e:3c:29:22:3e:7f:ee:
d9:0d:00:cb:c4:32:82:b0:cb:3a:da:7a:72:98:02:72:de:5a:
a2:0b:48:77:e1:22:fd:41:a0:93:30:a8:4a:a6:fa:73:87:5d:
34:77:45:d4:c6:ba:f5:2b:12:a9:6b:79:e1:d8:f3:da:f5:6f:
4f:82:a2:f3:d6:0c:79:4a:43:d9:62:b0:bd:fc:78:2f:96:94:
3c:f2:dd:9b:7e:88:2a:c1:55:e4:1d:26:12:bb:bf:2e:e8:3f:
b3:88:d5:2d:36:92:31:b5:af:28:46:5c:fe:2d:a3:f4:16:7a:
a5:6a:28:dd:27:95:17:0e:50:e6:33:3f:38:ac:09:89:c6:94:
35:1b:93:74:5e:58:10:2b:ab:5f:a1:7e:b5:6a:64:fe:17:5a:
2c:7b:46:4b:1c:0b:5e:a8:09:ac:b8:85:68:f0:df:87:43:98:
85:ed:d8:b9:15:d2:f2:d1:b2:f9:7a:d7:60:23:a5:b3:4f:fd:
fd:85:55:e2:70:5f:50:54:5e:86:37:62:89:91:f9:75:25:df:
ec:17:fa:f9:04:00:ce:8b:04:cb:08:78:92:c0:1e:43:75:a9:
65:99:3e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:06:14 2026 by rpki-client