Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
File: 70AaUuP95plIbplnjb9Ih1Mpwz0.mft (raw, json)
Hash identifier: a5xPBGAdeO4r0ADrUkUsVPkJ8LrWpIjicCIwWT5KOOk=
Subject key identifier: 1D:6E:40:BA:61:9C:B4:AC:46:8E:41:72:04:45:42:87:B0:7B:8F:FA
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Certificate issuer: /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial: 019D9D3ECF8855B32C126FCACDB513B0AB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
Manifest number: 102F
Signing time: Fri 17 Apr 2026 21:00:32 +0000
Manifest this update: Fri 17 Apr 2026 21:00:32 +0000
Manifest next update: Sat 18 Apr 2026 21:00:32 +0000
Files and hashes: 1: 1-SL9hlivQGt-mLTuChMVipJ552A.roa (hash: M4LxMEo5XBi46ojcg/gR85XlQ9Z1KIxYuUCF1vDeIuI=)
2: 70AaUuP95plIbplnjb9Ih1Mpwz0.crl (hash: 4U58e1HR8lfLUoshZ5ri4HgRd6J7tgIqLTRYRbML6SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:cf:88:55:b3:2c:12:6f:ca:cd:b5:13:b0:ab:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
Validity
Not Before: Apr 17 21:00:32 2026 GMT
Not After : Apr 18 21:00:32 2026 GMT
Subject: CN=1d6e40ba619cb4ac468e417204454287b07b8ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:98:0a:64:34:71:da:db:9d:ce:ec:57:46:
9b:05:67:e0:59:0d:58:01:a5:b2:0b:8f:87:a5:17:
5a:48:7a:94:8d:be:80:2a:9b:70:86:45:65:af:05:
58:d2:13:3b:93:09:ef:c5:ca:36:65:50:88:dd:d0:
8b:60:28:fd:77:86:87:b5:41:6c:b2:44:1c:ee:09:
4b:53:e0:9a:ed:dc:fd:44:62:2e:96:87:7a:b1:0f:
98:04:81:0d:aa:47:41:db:2d:86:2b:9b:a1:9e:f3:
a9:f5:de:04:a4:3e:e8:ca:4b:5e:36:cf:89:f4:42:
22:4e:dd:68:fc:f7:3d:84:6c:25:45:36:a7:c6:2d:
ca:22:35:d1:6b:86:cb:3f:1a:4e:9b:db:8e:61:a5:
d5:5d:06:3c:8c:b3:d7:e3:1d:d3:a8:4d:7b:f6:3e:
ff:48:6a:b9:4d:3b:78:67:f2:f4:4f:40:cf:fa:8a:
5c:54:98:5c:69:aa:5f:06:b8:ea:21:88:12:9e:48:
cb:63:a8:bd:71:6d:88:f8:d9:bf:2b:df:e5:3f:09:
57:4c:3e:8d:9e:56:18:26:8d:71:09:73:fd:b9:52:
db:84:90:f6:bb:09:32:88:a6:f3:13:a2:96:12:8a:
9d:0c:1f:49:f5:6f:f3:46:99:af:18:89:5d:d1:e8:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6E:40:BA:61:9C:B4:AC:46:8E:41:72:04:45:42:87:B0:7B:8F:FA
X509v3 Authority Key Identifier:
keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e1:a4:e7:b6:25:99:6d:24:ed:71:e1:ee:ff:97:8b:d5:74:
be:81:dd:f7:d9:38:34:93:23:ee:c0:22:f4:6c:1e:ef:a4:ad:
02:1a:70:fd:db:16:5b:bb:38:0f:ae:93:d8:d7:f3:a4:55:d2:
cc:c0:69:74:0b:1e:06:84:ba:b5:b2:d0:e0:1d:9c:cd:99:10:
fb:6c:d5:66:0b:d4:f5:49:03:2e:70:73:51:45:57:80:44:34:
ab:31:c9:e0:44:83:d8:e4:b5:74:9b:49:67:9d:e2:7b:61:2a:
a6:a1:f9:f8:ba:ef:b6:c2:38:00:68:f5:de:4b:b2:f7:6a:2d:
6c:70:59:29:93:31:d7:e6:67:2d:be:b0:f8:53:da:8f:b6:95:
7f:88:98:19:35:b4:0b:e7:8a:f3:cb:93:8c:fd:b6:37:84:c5:
09:b1:db:6c:80:5a:00:fe:bf:b5:d3:91:24:20:0c:af:eb:f5:
04:e5:75:43:94:f4:47:e4:a0:54:65:99:f1:59:f4:3f:12:21:
80:bf:04:fb:bd:86:ea:ae:23:c3:b0:31:f9:b6:24:9f:36:0f:
0d:e3:07:f2:4d:f3:db:08:01:5b:a6:86:27:6b:cf:6c:8b:4e:
53:25:f1:7a:7e:41:4a:ae:4f:e0:75:c0:c1:30:41:65:39:f7:
11:e9:72:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:15 2026 by rpki-client