Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier: vMLMquLfOdJADgOMTrAUs1S9E6/e+yCtg3iqZ+9XIRQ=
Subject key identifier: C5:C8:C5:02:51:D3:E0:62:AF:42:B2:FD:B8:AF:A6:03:4D:21:96:CC
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 019D9A74B84A0B0E6A51514AA126D184E340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number: 0E38
Signing time: Fri 17 Apr 2026 08:00:33 +0000
Manifest this update: Fri 17 Apr 2026 08:00:33 +0000
Manifest next update: Sat 18 Apr 2026 08:00:33 +0000
Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: bh2e0V+hU1sRq9Csk/WZtv7TZfSkszEFz02l5JuwwZ4=)
2: WKalSGnevGohhpgm-gEVPpoJ6r8.roa (hash: RtBxGLGQ1rKUm3Dw/j2SrY9FsdpNgrlCWPACnmZSvFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b8:4a:0b:0e:6a:51:51:4a:a1:26:d1:84:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Apr 17 08:00:33 2026 GMT
Not After : Apr 18 08:00:33 2026 GMT
Subject: CN=c5c8c50251d3e062af42b2fdb8afa6034d2196cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6d:28:39:12:31:f5:ed:12:fb:d3:f2:7d:25:
cf:f4:ef:ab:ff:df:70:e6:22:48:24:9b:d0:b0:cc:
6a:07:72:7a:e5:cc:7d:b9:c6:42:8e:1b:7e:81:70:
2e:eb:52:53:0c:82:66:59:f4:aa:7a:48:89:21:f3:
b6:74:21:dc:e6:49:0d:ef:bc:f2:99:0d:7d:82:9e:
e1:4b:d8:06:c1:78:3c:6a:b0:a0:ab:49:52:b4:60:
b6:78:f3:4a:b1:05:59:0c:ef:be:c0:17:8b:8d:31:
d5:39:ae:7f:0f:ec:2a:22:ed:a9:d3:6b:34:62:44:
01:cb:a5:60:92:71:ca:c8:f5:4e:c9:d5:f8:af:16:
cd:9d:62:d4:9f:4c:ec:0f:64:74:19:fe:a2:af:bb:
84:63:e6:4d:6a:c3:aa:7e:8a:df:18:20:19:ec:41:
e8:c7:88:c4:46:38:c4:22:11:eb:1d:0b:1e:b6:6f:
2b:4e:ac:f5:c7:37:5d:31:7c:51:43:59:07:42:fe:
b3:c4:86:32:dc:5b:16:79:f6:95:6e:4b:d5:0b:c4:
7f:f1:7e:15:f4:f9:26:5a:0e:d9:5e:d6:20:e1:00:
3d:f5:7e:c2:f9:9d:67:fa:0a:00:65:3b:1b:00:01:
45:4a:ec:ff:ab:0f:4d:6f:92:0c:60:f1:4b:30:87:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C8:C5:02:51:D3:E0:62:AF:42:B2:FD:B8:AF:A6:03:4D:21:96:CC
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cf:70:19:61:af:55:36:c6:96:a0:d2:06:45:f9:e7:06:d4:
a6:82:33:1c:13:c0:c0:a9:12:90:79:9d:74:46:e4:c2:00:b1:
db:c8:d7:16:70:b5:ab:c7:25:c1:10:43:1e:9a:c1:42:44:80:
9e:57:42:ca:16:a5:43:c5:77:7d:c2:e7:16:b5:3b:1c:73:71:
ab:7c:de:c4:1a:50:0d:7b:db:ed:1f:df:7d:a6:58:6a:6a:7f:
62:3a:6f:05:f2:99:90:44:67:43:09:5a:a6:22:43:df:fc:6d:
a8:be:0b:a8:22:c2:5c:ad:43:ff:82:2b:5d:29:6d:c9:37:85:
60:af:0c:d8:c1:ca:d6:fc:4b:20:4b:ea:de:d4:4e:05:85:ac:
93:e2:f4:8c:03:f0:4b:0a:5b:37:1c:a4:b2:43:30:f2:36:38:
f2:9d:59:a7:09:23:b8:9b:18:2a:65:35:32:a8:bc:93:41:2d:
a0:48:4a:9f:9e:7a:33:f6:78:e0:2b:39:55:98:0c:fa:3b:09:
ee:18:6c:49:d5:ab:19:f5:c2:06:d4:c8:23:ef:c7:99:6d:0b:
d9:a3:50:99:ba:d7:43:f1:31:d0:4a:81:d6:ba:41:f1:a4:4e:
82:c5:83:21:83:47:c2:b0:c5:85:1e:a4:11:2c:81:f0:cf:8f:
59:ab:24:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:41 2026 by rpki-client