Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
File: 712SU70NJYyVsrNG5IUzyULMI7Q.mft (raw, json)
Hash identifier: oh88E8p1h7MLzZr/pe9IiYolbOfGDBrtlxNdPM8KG5M=
Subject key identifier: DA:0C:A4:CE:EE:58:64:C2:B3:FF:7A:69:38:57:08:3F:CB:FB:BB:0A
Authority key identifier: EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
Certificate issuer: /CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Certificate serial: 019E1D90420C803A3CEEC68C51EF22F91DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
Manifest number: 20
Signing time: Tue 12 May 2026 19:00:53 +0000
Manifest this update: Tue 12 May 2026 19:00:53 +0000
Manifest next update: Wed 13 May 2026 19:00:53 +0000
Files and hashes: 1: 712SU70NJYyVsrNG5IUzyULMI7Q.crl (hash: LPYotvydzXV9N6d87yw4HYfSU9nJ6MYecNOuFVRricc=)
2: gcOeRtdhASpOXftyQUUQHnlSzHY.roa (hash: mRt09ink6QbROuNCA4WL011qJeqnMp6lFsCyZXUphZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:42:0c:80:3a:3c:ee:c6:8c:51:ef:22:f9:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Validity
Not Before: May 12 19:00:53 2026 GMT
Not After : May 13 19:00:53 2026 GMT
Subject: CN=da0ca4ceee5864c2b3ff7a693857083fcbfbbb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:ba:1d:e3:67:1f:ae:df:4c:a7:47:b8:0d:
57:12:36:f8:42:ee:47:d9:ca:a5:76:28:a3:04:68:
ed:c6:1d:3a:23:2f:70:09:ae:0c:fc:6f:c4:a9:e4:
8f:14:ab:99:11:ab:a9:20:02:37:84:3e:54:0a:48:
1d:0d:68:2d:35:55:1d:d0:2e:9e:20:9b:c3:9a:e7:
87:6c:a5:82:b8:bf:89:3d:fc:15:4e:c2:2c:fc:01:
b7:3f:3e:b6:a4:ec:f1:15:5c:ce:c1:ac:80:50:99:
45:e8:07:ae:27:0b:bf:b7:38:1b:59:92:bc:5d:7c:
30:57:4a:c8:20:e9:c0:9e:cf:cd:5d:cf:a8:46:bc:
3c:f4:48:c0:de:ae:93:3c:52:6e:5e:5d:4b:ac:cf:
8d:96:af:f8:08:a5:6e:e7:e8:88:2d:32:e0:d8:16:
4c:48:66:f4:b7:8a:15:6a:3e:ce:83:5c:a6:17:69:
76:2d:4a:2f:7e:b7:ec:d2:17:1d:a1:c2:2c:f4:11:
f2:1c:0a:b6:4c:6e:40:f5:ec:c9:49:2f:22:89:bf:
54:9f:22:e2:ab:0a:e7:b5:85:23:50:63:52:be:fa:
0b:fc:29:4b:d1:58:5d:ae:4b:ba:91:2e:46:db:b6:
d3:79:af:8a:84:d8:7d:51:19:90:7e:49:96:9b:8e:
66:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0C:A4:CE:EE:58:64:C2:B3:FF:7A:69:38:57:08:3F:CB:FB:BB:0A
X509v3 Authority Key Identifier:
keyid:EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:01:05:01:de:99:d2:37:20:85:e8:34:3c:cd:46:d8:01:d8:
7f:dc:92:51:34:46:b1:29:1b:fd:64:3d:e4:2b:33:b3:ed:5b:
e3:e2:ca:bd:39:59:4c:80:27:97:ac:75:5f:8b:e9:bc:ca:a4:
74:3d:c6:5c:68:a8:f2:76:47:09:cd:8e:44:b8:ad:03:0b:c2:
22:b1:cb:c1:73:10:11:3d:6d:55:a0:32:1f:ba:12:64:41:35:
df:75:b5:a1:d4:2e:e8:9b:bc:da:57:2f:17:9d:9a:00:ab:97:
2d:a3:13:ac:8a:9d:f1:57:2a:d2:69:75:86:54:94:88:f7:38:
95:df:b5:1e:8c:a5:60:f5:b6:9f:ba:56:af:ca:b0:ff:71:30:
7b:6b:ef:da:74:60:11:28:0e:43:02:53:d4:87:08:b4:ac:8e:
eb:49:6f:20:3a:5e:da:5b:1c:b8:72:95:51:0e:eb:da:4d:50:
1e:ff:f1:91:b8:e6:af:21:e9:1a:65:21:85:94:6a:f6:cd:bb:
7b:49:4e:f5:f6:26:4a:9d:62:bd:ac:ae:33:47:1a:f6:2e:0f:
3e:c7:6d:f2:4c:1a:98:12:19:f4:f1:96:a5:37:5a:c0:e8:1f:
ba:f9:06:e2:f2:8e:7f:89:d4:6e:b3:7b:aa:ed:76:b3:fd:b1:
db:cf:98:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:18 2026 by rpki-client