Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
File: 70AaUuP95plIbplnjb9Ih1Mpwz0.mft (raw, json)
Hash identifier: vAbMjOAiMzUFXgPODFgv1vwdVSKPqx7QJhEeK7wKjhY=
Subject key identifier: E7:D4:B3:E4:AD:2F:FC:A8:50:0A:8B:C4:13:3F:BB:10:9A:7E:FE:9C
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Certificate issuer: /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial: 019E209209551B5EC4FCEFD537111571E858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
Manifest number: 1073
Signing time: Wed 13 May 2026 09:01:41 +0000
Manifest this update: Wed 13 May 2026 09:01:41 +0000
Manifest next update: Thu 14 May 2026 09:01:41 +0000
Files and hashes: 1: 1-SL9hlivQGt-mLTuChMVipJ552A.roa (hash: M4LxMEo5XBi46ojcg/gR85XlQ9Z1KIxYuUCF1vDeIuI=)
2: 70AaUuP95plIbplnjb9Ih1Mpwz0.crl (hash: UPFrnjS+aDaXry9EhSygep+Fh/LQMNvRlntcQLSsJxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:09:55:1b:5e:c4:fc:ef:d5:37:11:15:71:e8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
Validity
Not Before: May 13 09:01:41 2026 GMT
Not After : May 14 09:01:41 2026 GMT
Subject: CN=e7d4b3e4ad2ffca8500a8bc4133fbb109a7efe9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:a4:20:5a:94:68:c5:09:60:72:11:78:65:
c2:dc:a1:02:8c:69:db:5b:65:f6:a8:28:e8:47:4a:
1b:85:41:f5:35:45:86:14:1e:e1:73:0d:65:f1:fc:
fc:e1:21:1f:95:46:45:25:c3:e0:2b:05:b2:62:a0:
bb:2a:24:74:1c:23:34:41:1c:e0:52:cd:51:8a:4e:
b9:cb:f5:1b:be:f8:1e:fe:7f:e1:ac:48:44:b6:ee:
c7:9b:e6:ab:5f:15:36:1c:6d:65:40:a8:e2:0d:1a:
d6:d7:40:45:f2:47:8c:46:96:5b:95:4f:0f:fa:c4:
a0:04:e3:20:4a:4d:89:92:f6:89:28:0f:55:d0:dc:
aa:40:01:fa:18:f9:54:c2:5b:5d:ce:d0:96:cf:e2:
30:1f:09:4d:ce:8e:c2:31:fa:de:c2:09:7e:a0:fb:
bd:76:19:d5:a1:b3:d4:a9:f1:22:30:86:f4:e8:0c:
75:c5:08:ec:02:22:99:18:3e:15:32:bb:8d:50:ff:
5b:0b:24:25:86:d8:bb:99:eb:36:40:ff:08:30:90:
63:70:5f:f0:92:23:4a:30:1c:01:e3:03:9e:0f:ed:
32:21:58:0e:73:6e:44:bd:78:14:bf:3f:94:bc:b3:
70:63:26:12:59:2b:76:14:ec:fa:94:1c:47:99:4d:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D4:B3:E4:AD:2F:FC:A8:50:0A:8B:C4:13:3F:BB:10:9A:7E:FE:9C
X509v3 Authority Key Identifier:
keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:de:a7:d1:41:a3:d8:31:ed:d0:5f:34:76:66:b6:dd:45:df:
c2:01:8e:d5:ca:8d:5c:43:18:bd:05:69:81:07:32:f5:84:c3:
bb:29:7c:64:ce:5d:9b:c2:37:ba:56:fd:b3:b6:56:86:6b:ca:
13:00:63:5c:49:c4:14:66:bf:05:c0:ee:00:71:3f:3d:fb:88:
dd:2a:c6:20:e2:7b:90:61:a8:20:88:3a:7e:7a:e3:79:10:a5:
af:62:47:17:40:7e:8d:f5:e5:7c:ac:e2:f8:10:54:8b:d1:3d:
99:3a:15:9e:9c:ae:71:b5:46:ad:60:fd:7e:1d:7e:89:79:37:
24:38:e3:9a:29:5b:81:4e:91:86:7a:e1:fb:b4:7e:ea:6d:7f:
d8:c9:97:15:6c:51:93:b8:0e:c7:b7:5e:3d:8e:ec:84:e2:e9:
fe:5c:cc:e0:43:28:e2:d8:ee:ac:db:30:aa:6f:d3:6d:79:3d:
94:31:fe:ee:98:7d:08:f5:75:81:31:5b:9e:51:69:a1:e5:18:
69:65:50:5e:e4:63:ea:20:27:f5:15:62:b0:37:81:de:59:09:
54:e3:af:9b:72:db:dc:ee:13:b6:03:ac:75:1c:a9:4b:aa:7f:
2e:af:67:6b:fe:b5:c8:50:ad:b2:6e:9e:4d:c8:e0:90:65:ff:
e6:ad:09:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:28:26 2026 by rpki-client