Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
File: 70AaUuP95plIbplnjb9Ih1Mpwz0.mft (raw, json)
Hash identifier: vjW+OxbUSvTWXD/h1dIIqiQJ92zsNCGU6kOfAAxIjOE=
Subject key identifier: B4:5C:3B:67:6B:A9:9B:D0:76:B2:39:BA:B9:FE:0C:04:C0:D0:D9:CA
Authority key identifier: EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
Certificate issuer: /CN=ef401a52e3fde699486e99678dbf48875329c33d
Certificate serial: 019CABD9A59A024704D2C7E0823B9E39B00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
Manifest number: 0FB2
Signing time: Mon 02 Mar 2026 00:01:33 +0000
Manifest this update: Mon 02 Mar 2026 00:01:33 +0000
Manifest next update: Tue 03 Mar 2026 00:01:33 +0000
Files and hashes: 1: 1-SL9hlivQGt-mLTuChMVipJ552A.roa (hash: M4LxMEo5XBi46ojcg/gR85XlQ9Z1KIxYuUCF1vDeIuI=)
2: 70AaUuP95plIbplnjb9Ih1Mpwz0.crl (hash: Vk6hTxn3qdfvP8GIlp+mJ1arPokreBRE8EOtYMijKEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a5:9a:02:47:04:d2:c7:e0:82:3b:9e:39:b0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef401a52e3fde699486e99678dbf48875329c33d
Validity
Not Before: Mar 2 00:01:33 2026 GMT
Not After : Mar 3 00:01:33 2026 GMT
Subject: CN=b45c3b676ba99bd076b239bab9fe0c04c0d0d9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1a:4a:af:1b:fe:5a:b7:11:09:d6:f9:f8:c7:
a0:68:fd:e2:b8:77:4c:db:2b:3f:3d:40:4c:08:ec:
ff:49:2e:3d:e5:55:0d:54:db:58:ef:f3:c8:97:3f:
6e:ad:a3:67:7b:75:4c:cf:39:c9:8f:d5:02:e6:9c:
a2:69:11:5e:fc:7a:64:87:c2:cb:cb:9d:61:20:97:
ee:a1:42:8a:5a:19:2d:ac:1e:cf:48:a4:9d:ed:35:
03:1c:9c:d7:ed:9a:2a:54:60:52:f8:99:2e:57:36:
8e:e9:51:dc:c8:13:38:f5:bb:6a:0a:25:61:d4:79:
d0:ad:58:03:bc:93:2f:ef:cf:0f:2d:5a:de:05:15:
cd:2d:4f:3f:8a:b9:cb:4e:f1:05:b4:3a:1a:bd:c4:
e8:06:d4:72:00:ee:6d:87:bb:44:f4:55:c9:d6:1a:
33:b8:9f:b7:ac:41:9d:54:ec:9b:49:3e:13:79:f8:
bf:9f:f5:68:9a:d3:dd:50:13:d2:27:2a:5b:ce:6d:
ab:00:2c:a7:99:f9:8b:73:92:bf:80:43:32:f0:1c:
c5:18:aa:3d:2e:08:ab:0e:69:9b:f8:f0:a7:d1:f6:
0e:3d:e2:02:39:95:34:25:a7:0b:49:db:31:22:74:
0f:2d:70:5a:fd:c4:8d:39:5c:0c:cf:09:b6:7c:8e:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:3B:67:6B:A9:9B:D0:76:B2:39:BA:B9:FE:0C:04:C0:D0:D9:CA
X509v3 Authority Key Identifier:
keyid:EF:40:1A:52:E3:FD:E6:99:48:6E:99:67:8D:BF:48:87:53:29:C3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70AaUuP95plIbplnjb9Ih1Mpwz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/70AaUuP95plIbplnjb9Ih1Mpwz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4e:28:7c:2f:74:e1:4a:35:8b:5e:28:99:cf:66:c1:a0:92:
fb:eb:3c:1a:a9:5f:99:19:3c:97:c7:e2:84:12:24:0a:13:9e:
89:d6:fd:2f:01:5d:77:38:bd:b2:6d:f3:39:1c:41:e6:cb:03:
36:0d:36:87:f7:5c:d9:63:f3:06:a5:99:0f:c9:d2:ec:a3:ae:
b6:db:f0:16:b8:9b:43:fb:a5:09:73:44:fe:56:a4:37:18:a5:
72:47:4d:bc:16:80:10:80:ef:60:6d:01:8b:69:f9:05:fe:88:
6e:72:50:c8:36:9a:7a:39:4b:49:c0:5f:b6:a8:ea:06:a4:a1:
db:bf:0d:00:30:8f:81:62:33:1d:10:90:76:0c:34:3e:4f:e3:
4f:f3:c9:dc:2c:c0:d7:fd:35:2c:e2:6f:5d:60:97:b3:83:5a:
ec:24:3a:e1:2b:87:79:be:37:ea:50:cf:08:90:af:34:fa:46:
3d:7d:c8:21:41:8b:71:25:55:ae:ba:55:ef:97:b9:77:b1:a3:
49:26:5a:b3:f5:a8:05:a2:9d:0a:a8:a5:aa:d2:41:06:ec:fe:
b6:c1:18:4f:89:db:83:14:63:1a:cc:a8:96:d5:a9:4e:cd:e2:
fc:a7:a7:57:e3:bf:21:b5:bf:c6:bf:42:b3:99:40:d3:ba:04:
52:25:37:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:14 2026 by rpki-client