Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: oS25b9UIE1jb87HeF7/QAM99LooAQ9YlfEE7gMMS7GQ=
Subject key identifier: 57:AC:0B:1A:61:74:0C:EF:AE:42:C9:F1:77:28:79:ED:A5:DE:07:DF
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 019D284D3C0B1770C1E4D1205D4ACC91057D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 1022
Signing time: Thu 26 Mar 2026 04:00:43 +0000
Manifest this update: Thu 26 Mar 2026 04:00:43 +0000
Manifest next update: Fri 27 Mar 2026 04:00:43 +0000
Files and hashes: 1: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: 8z757TdrenHefVMbG3hI6RC0CpJ5qMw5HNAUZGvAoRM=)
2: ipDvc3_uDEjFqfddza4tSfpFuZM.roa (hash: xLYuaCPRF/gJJCfwsd4caFL/Eo8m6t0vFmm3gowiEGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:3c:0b:17:70:c1:e4:d1:20:5d:4a:cc:91:05:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Mar 26 04:00:43 2026 GMT
Not After : Mar 27 04:00:43 2026 GMT
Subject: CN=57ac0b1a61740cefae42c9f1772879eda5de07df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:04:ab:63:27:a2:e3:a2:16:8f:23:73:7b:
36:c6:cc:ad:d4:c8:e0:12:e4:12:40:7b:46:8f:15:
1a:5a:08:95:48:da:d1:e5:20:8d:95:6d:ae:d0:68:
87:bf:35:9f:78:88:9d:f0:7e:79:d2:3b:82:97:72:
b5:bc:a1:1f:6f:8b:4f:89:b0:68:5b:ed:f7:c6:fe:
33:3a:91:ef:f1:aa:9d:89:93:df:34:4d:36:8e:f1:
99:1d:65:eb:4f:4b:0d:34:e4:23:6a:d3:8d:fd:d3:
83:d3:6d:68:94:3d:cf:40:c2:e1:9f:dd:b2:bf:0d:
04:e3:94:5f:d1:75:f8:87:37:a2:a1:73:00:00:10:
20:5e:f9:d4:c9:c4:e3:a8:0e:7c:a0:67:c8:36:b1:
b1:44:00:a9:8f:33:5f:a5:8e:3d:0a:ea:4a:42:bc:
19:6f:52:a9:a8:a2:b1:a8:d7:40:dd:42:32:2e:27:
98:a2:87:58:02:6f:e3:96:6f:f7:74:b4:f3:91:f0:
4d:9f:fb:be:b9:b1:65:ff:01:6d:d2:09:1f:fd:fe:
25:a8:8a:4e:f9:b4:c6:3b:4a:ab:6f:5e:81:a0:07:
74:77:a1:de:77:15:a2:c4:3e:27:5b:d6:a0:92:3e:
f1:08:e3:c3:da:0f:f9:f5:1d:e7:78:fe:0f:75:bc:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AC:0B:1A:61:74:0C:EF:AE:42:C9:F1:77:28:79:ED:A5:DE:07:DF
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f3:a3:78:5f:22:ac:95:70:b2:6a:5e:7a:0e:98:dc:64:72:
a8:07:5d:66:5e:f8:47:12:b4:11:41:e5:aa:54:16:45:8d:95:
66:4a:10:fc:1b:45:d5:8e:10:16:46:11:04:b0:d7:79:df:66:
cc:f6:e5:55:61:7f:9e:f9:f7:14:67:55:6e:35:48:b2:cc:e5:
6b:85:5a:18:8a:98:22:55:63:fc:1b:2a:53:fc:44:fb:46:b5:
26:95:b6:df:2f:88:6c:a1:a0:fa:70:d3:10:82:da:13:9c:40:
11:34:6a:a6:d1:cd:64:6d:f9:38:38:91:cd:42:43:b3:ec:ca:
e3:46:6f:b4:7f:6f:96:fd:2b:8f:ea:d6:da:cd:c1:55:87:f6:
70:02:3e:e7:f9:d1:04:d3:b7:27:77:95:0f:c4:0d:d8:55:a1:
3c:af:ab:49:c7:51:6e:e5:ad:b1:25:f4:90:27:76:cb:78:4e:
8b:29:53:7b:ca:fb:08:09:9c:6a:8d:89:c9:e3:f8:bb:13:59:
d2:fb:ad:18:e3:11:af:ad:7e:c4:58:f5:70:c1:ac:14:ed:7b:
8e:17:a9:50:73:71:d0:bb:6a:39:03:e6:cd:a8:0f:1e:b3:48:
08:32:ce:f7:ea:a0:db:0c:ee:3d:f8:9f:af:42:e8:05:2d:c9:
56:9d:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:37 2026 by rpki-client