Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier: lUbvBLZSaLhsXoLrc0e1WtyoPkK7ePqIlO6x+omQaaA=
Subject key identifier: DB:F2:D7:C6:35:A7:E4:72:C2:A6:F9:B2:7A:49:33:C3:48:50:F0:34
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 019CACEBC807742912B171F0AA68CC6B60B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number: 0DBD
Signing time: Mon 02 Mar 2026 05:00:59 +0000
Manifest this update: Mon 02 Mar 2026 05:00:59 +0000
Manifest next update: Tue 03 Mar 2026 05:00:59 +0000
Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: fV9VZwTthbiQ80VHYhH379kKePvuZdeh8RT/OYr0MJA=)
2: WKalSGnevGohhpgm-gEVPpoJ6r8.roa (hash: RtBxGLGQ1rKUm3Dw/j2SrY9FsdpNgrlCWPACnmZSvFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:c8:07:74:29:12:b1:71:f0:aa:68:cc:6b:60:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Mar 2 05:00:59 2026 GMT
Not After : Mar 3 05:00:59 2026 GMT
Subject: CN=dbf2d7c635a7e472c2a6f9b27a4933c34850f034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:11:45:d5:0a:9c:4c:9f:5a:43:52:5e:a9:c6:
f1:96:f6:a2:d3:2b:31:fd:8d:05:5d:dc:3f:df:dc:
f7:05:15:13:d0:0e:9e:ca:46:af:88:5c:4a:20:21:
51:2d:8c:bf:ef:8c:55:39:4c:ac:cf:44:92:ea:77:
40:83:eb:88:62:1d:70:e9:8f:0d:5a:e3:c0:b4:d3:
0e:33:df:ce:95:5c:59:da:30:b7:f2:54:75:98:41:
af:c4:25:96:3c:e6:ef:db:82:14:e0:77:88:b3:f5:
69:40:a0:66:8e:77:66:9f:0f:09:46:74:40:d7:57:
3a:19:6a:7f:81:5f:d2:24:d0:8f:3e:4d:1e:b5:fb:
fc:19:51:4b:bf:4c:47:ba:ed:c4:82:26:96:ef:ab:
e5:b3:cf:88:d6:72:82:a2:a5:5a:e7:e1:84:ff:e6:
60:81:17:e7:fe:cf:89:23:38:aa:82:56:1c:99:62:
40:a6:db:d5:a2:fd:2d:dd:6c:02:7b:bb:48:a9:a0:
3e:f1:9d:35:3d:e7:81:5e:4c:27:ed:4a:62:03:cb:
57:e7:11:d2:23:93:4a:36:92:72:67:5b:55:dc:1f:
33:d6:fe:fc:ad:a5:3e:d4:dd:81:11:24:17:36:5b:
69:8a:6f:93:49:4c:e9:61:16:b6:08:15:60:88:c7:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F2:D7:C6:35:A7:E4:72:C2:A6:F9:B2:7A:49:33:C3:48:50:F0:34
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f5:09:ff:96:79:02:ec:1c:ee:27:de:94:3d:5b:11:0b:0e:
8a:84:bb:c9:c6:ca:64:dd:c0:32:ec:9f:8d:f9:30:d0:52:ab:
99:07:89:9f:8f:ac:72:4e:ed:1f:b2:06:a4:af:c0:c9:d2:7f:
76:7c:5b:09:24:2f:ec:0f:9d:4c:64:c9:55:62:fa:a2:20:06:
a3:08:34:fa:f0:3d:3a:83:35:23:59:74:9c:64:73:9e:fa:32:
91:63:a4:53:07:9c:0a:59:a5:cd:7a:d6:43:4f:5d:e6:5d:32:
b0:93:b6:f1:87:3b:34:75:85:74:de:86:11:c5:b5:df:c3:91:
a2:71:75:bc:1e:14:64:a0:6a:68:79:c4:30:f7:45:b1:0a:c2:
86:bb:bc:a5:ce:c8:75:5d:e2:a4:5d:17:56:30:f7:6a:a1:61:
01:80:e4:85:05:6b:cc:61:8b:f3:45:9b:2b:3b:32:3b:ea:31:
36:ed:5c:aa:fd:42:17:f8:db:7a:6f:1d:aa:66:a1:18:43:52:
77:08:d2:bc:5f:87:17:35:29:0d:5e:99:f9:92:c1:91:d7:e6:
91:37:b3:f8:7a:12:c9:37:27:0a:1d:b8:1e:5d:e9:9e:97:e7:
9f:a2:df:a6:f2:b2:41:35:3f:2c:a0:74:2e:f0:88:0b:11:fd:
c5:c7:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:20 2026 by rpki-client