Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
File: cIEc4M5zU_A-3py3ylEWJV-_t70.mft (raw, json)
Hash identifier: Gavk+K38qSwayMPnfZI1LFYqs1mTZT85LGAxPxmQeRY=
Subject key identifier: 56:EC:30:8B:9E:3D:AC:D9:7F:B1:7C:7D:DA:5A:28:6D:B2:67:B7:7F
Authority key identifier: 70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD
Certificate issuer: /CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd
Certificate serial: 019D284D50E372C39177BA81D1A0F5E5FD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
Manifest number: 0D40
Signing time: Thu 26 Mar 2026 04:00:48 +0000
Manifest this update: Thu 26 Mar 2026 04:00:48 +0000
Manifest next update: Fri 27 Mar 2026 04:00:48 +0000
Files and hashes: 1: cIEc4M5zU_A-3py3ylEWJV-_t70.crl (hash: xv/6MmMy/jFm7q/KGdii8r9LLxgEsn3JQ7uWiOs6NTQ=)
2: wTEh6ej3g3Q7GGlsQ4YIzozQtnc.roa (hash: qEk4UNZu9aTZfRIMREb/ibtS04CGWHXkv598NCFoY14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:50:e3:72:c3:91:77:ba:81:d1:a0:f5:e5:fd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd
Validity
Not Before: Mar 26 04:00:48 2026 GMT
Not After : Mar 27 04:00:48 2026 GMT
Subject: CN=56ec308b9e3dacd97fb17c7dda5a286db267b77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:ef:f3:a1:35:44:81:31:12:6f:e0:d1:df:
19:d6:0a:27:ed:15:6c:db:ac:8d:f6:8d:52:5d:97:
4c:29:0a:1d:57:4c:cc:8b:39:0a:ce:93:cd:87:8d:
46:51:c3:3c:ee:df:ab:7f:2b:9d:5f:92:dd:56:c2:
33:86:73:86:00:54:1e:85:ab:b8:3c:55:8d:79:eb:
36:ec:df:9b:35:50:14:5c:f8:4a:37:f0:d6:14:08:
95:73:8f:17:0c:53:0b:0a:db:b1:3f:29:92:3d:69:
35:ca:fa:70:63:80:c8:10:28:d1:34:b2:06:4a:8f:
c0:6b:45:97:e1:96:c0:58:56:97:8c:4a:fa:0e:db:
85:65:45:be:d5:d1:a7:66:e1:df:29:e0:67:ca:ad:
4c:96:78:34:95:d0:6b:97:71:8b:e6:e6:c2:f1:3c:
d9:2e:63:64:9f:b2:2b:a8:22:2d:78:f5:0c:25:ee:
7e:8f:47:ea:25:ac:fb:7a:c6:bb:49:be:7e:1d:0a:
11:41:e9:57:4a:ca:94:e6:f3:8e:7d:79:9e:12:44:
f6:1e:0a:ef:00:22:e3:e3:a7:80:ac:19:28:c9:7b:
a7:63:55:3b:5f:ed:39:0c:25:9e:da:89:29:73:a0:
a3:31:73:7f:24:bc:ef:dd:4b:f4:62:22:82:b4:e4:
dd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:30:8B:9E:3D:AC:D9:7F:B1:7C:7D:DA:5A:28:6D:B2:67:B7:7F
X509v3 Authority Key Identifier:
keyid:70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b0:dd:0b:b3:c8:2e:10:f2:c0:4b:09:af:d0:d6:fd:bd:49:
34:97:28:1b:19:7c:88:96:18:c3:9e:1a:e4:4c:dc:bd:87:86:
17:ad:1d:d8:d0:a9:c1:66:64:ac:59:15:ae:a3:e8:e3:57:3b:
ff:75:08:10:af:b6:fb:19:7c:30:57:20:bb:89:65:e8:1e:04:
fc:5e:3a:b9:4d:77:4d:21:be:c5:08:bf:dc:2d:74:99:c3:1d:
73:13:6a:cd:42:91:99:b4:a9:c9:1e:ec:d8:7e:d9:92:92:e1:
b4:cc:26:c8:16:99:42:a6:87:b9:b0:f0:4e:34:68:87:81:53:
bd:7e:a2:1e:d5:53:b0:bf:7d:9b:fa:6b:cd:12:ce:dd:85:26:
ed:d8:92:a9:e5:4b:ef:ef:f2:06:5c:69:6d:c9:c5:e1:3e:a1:
2f:0b:29:2e:ad:5b:06:8f:8f:62:73:32:52:42:f9:40:b3:83:
a6:b6:b0:11:2c:4d:a1:55:a8:15:9f:3b:12:70:72:73:bd:43:
50:94:17:84:a9:20:0c:54:3f:c4:fb:22:2a:35:6f:c2:49:5f:
22:f0:7b:5f:fa:e4:c7:6f:4c:5d:f2:01:1a:9f:00:c6:83:01:
20:96:da:d7:c0:fe:47:63:32:46:dd:e5:c1:53:54:06:71:94:
89:d5:63:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:25 2026 by rpki-client