Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: oIqzKMX0NIwvSVJQRABoCtN1tIdaImsk+1gsWUa9xt4=
Subject key identifier: C5:DE:87:4C:CF:89:08:8A:26:48:6C:C7:CC:08:36:CF:48:24:A3:CF
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 019D27DFB1576454810582C1D6C337D39E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 02:01:04 +0000
Manifest this update: Thu 26 Mar 2026 02:01:04 +0000
Manifest next update: Fri 27 Mar 2026 02:01:04 +0000
Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: WAjXygWmS7FAbnoSetZeHZg1X581lCzv4eXDQNLb1Nk=)
2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b1:57:64:54:81:05:82:c1:d6:c3:37:d3:9e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Mar 26 02:01:04 2026 GMT
Not After : Mar 27 02:01:04 2026 GMT
Subject: CN=c5de874ccf89088a26486cc7cc0836cf4824a3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:9f:4b:1c:2f:0f:35:f6:65:0c:b8:b4:79:
26:51:49:f7:50:9a:85:69:3c:d9:6a:69:c5:50:7a:
7f:60:97:df:7c:8c:24:f7:a8:86:a3:3c:3a:87:f5:
32:55:71:38:8c:df:0b:13:f6:40:41:16:51:14:32:
3c:91:1b:ca:0c:81:d0:55:32:70:92:38:51:b7:f8:
aa:e7:1d:fa:64:57:ef:6d:84:b3:8c:7a:93:3c:70:
a7:43:20:c3:31:ab:3b:84:a2:3c:0d:fb:a9:de:48:
93:0a:ea:a9:b3:03:26:7a:12:8d:f0:6d:b2:5d:65:
bb:99:7f:83:38:c5:0b:0d:f2:92:5e:cf:ed:ee:83:
2e:38:93:35:9a:36:79:2c:97:ed:cb:d0:d4:ee:92:
f7:c2:d2:b5:26:01:1c:2b:ea:40:45:34:e4:d8:38:
67:84:20:0a:33:56:ad:61:3d:7b:97:41:73:cc:09:
d4:61:a5:a1:ee:ae:aa:8c:44:e7:ed:2a:0b:2b:72:
5f:ef:6a:2d:3d:be:e6:be:d9:56:81:af:54:fa:8e:
e6:44:f9:d8:5e:ff:95:21:30:7b:d5:4d:7d:a1:94:
61:2d:4f:0b:a9:dc:e8:1d:86:2f:43:1b:9c:ab:f0:
0e:58:31:36:10:14:02:26:cd:b5:85:bd:36:93:09:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DE:87:4C:CF:89:08:8A:26:48:6C:C7:CC:08:36:CF:48:24:A3:CF
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9f:c5:6b:6b:bf:f4:ae:37:89:20:60:15:b7:5c:58:41:6f:
79:00:eb:d0:c2:91:02:10:27:1f:46:43:f0:e0:15:a8:33:75:
15:59:f2:39:c9:d3:4a:f8:2d:ea:f0:c2:e2:9f:bd:83:f5:81:
0b:91:3d:31:43:93:9b:ac:cb:ca:0e:ae:9f:6b:22:fb:9f:63:
5d:ef:40:81:77:9b:87:ad:54:72:b6:e3:88:fb:7d:7d:a9:e9:
82:fc:41:df:aa:10:a6:50:a9:13:bd:b4:f8:b3:94:80:f3:13:
a1:09:0f:c9:f5:fe:3d:10:5b:1c:1a:06:db:3d:a3:97:80:f8:
44:56:21:7f:ab:dc:c9:0c:32:e6:3e:68:c7:e8:fd:9a:4b:7e:
18:2a:a3:89:ee:22:75:0d:22:69:65:d0:3e:5f:2d:02:73:ab:
89:f4:11:c6:5e:a3:23:0e:fd:7b:04:7e:0d:8c:91:a4:54:ab:
5b:79:b6:3f:ec:c5:0f:ac:f2:06:80:c0:6c:7a:74:8f:4a:27:
5b:d3:5e:10:3b:fb:29:28:95:56:50:63:b9:5e:f0:85:92:c1:
df:71:88:70:15:b8:bd:31:89:10:32:ec:ca:d4:20:4a:8a:6b:
27:de:84:13:f1:74:bd:f9:44:e0:4e:c1:11:c9:ab:63:6a:49:
5c:7c:e6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:33:10 2026 by rpki-client