Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: wPGv7348rIdnspnK9T8QOCuwKI/urRH9z+sQqaSRjpk=
Subject key identifier: C0:EB:B3:23:1D:AE:E2:D5:BF:E0:66:CC:CB:6B:CB:10:19:05:5C:97
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 019D9A74BD6FB2293D022E254510E050891E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 0CEB
Signing time: Fri 17 Apr 2026 08:00:35 +0000
Manifest this update: Fri 17 Apr 2026 08:00:35 +0000
Manifest next update: Sat 18 Apr 2026 08:00:35 +0000
Files and hashes: 1: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: Vp4ksucHugn0WqRgA7L43iXnzlTzAHBEZcmCou9vPq8=)
2: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (hash: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:bd:6f:b2:29:3d:02:2e:25:45:10:e0:50:89:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Apr 17 08:00:35 2026 GMT
Not After : Apr 18 08:00:35 2026 GMT
Subject: CN=c0ebb3231daee2d5bfe066cccb6bcb1019055c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:75:68:36:d6:2a:9b:1e:8a:98:52:6a:0d:
10:10:0b:6b:a1:9c:0d:c0:4c:cb:44:61:b1:98:59:
81:86:48:78:a5:5d:62:6e:cf:60:8f:37:5b:cc:5d:
bc:90:91:32:56:32:cc:5f:d8:94:5b:d1:66:a2:95:
87:8e:56:89:51:89:14:7a:fd:59:84:88:35:4d:f3:
74:ad:b5:b6:10:f7:0d:a5:c7:78:5d:6c:eb:f9:42:
9f:9e:30:88:09:be:81:70:cb:c9:d7:ce:e3:23:e7:
5a:48:8e:f1:71:77:93:50:6f:ad:30:42:9d:74:59:
d5:dc:1b:d9:19:c4:fc:15:66:88:e3:23:aa:55:5e:
55:d2:c2:fd:18:07:48:03:b6:b9:83:4e:1a:ab:b7:
6d:99:a2:31:ba:15:91:9f:6f:da:a7:9c:e5:30:45:
7e:38:d2:f0:21:c7:a0:46:cf:91:cc:cb:87:7f:19:
79:32:37:1a:12:5c:5d:10:25:26:3b:dc:8d:24:bd:
ef:a8:f6:e0:9b:cc:a4:1b:b7:15:6f:de:ea:3d:c4:
b1:c5:35:39:be:a2:37:8a:78:a2:f2:3a:8c:06:5c:
26:eb:53:3e:76:e6:05:8e:59:f7:e7:74:37:f4:18:
b3:cc:3b:e9:36:cb:65:b8:25:e1:32:41:7e:f7:4e:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:B3:23:1D:AE:E2:D5:BF:E0:66:CC:CB:6B:CB:10:19:05:5C:97
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:12:9e:92:70:a9:9a:b9:40:31:61:b4:09:c2:c4:79:c5:4b:
c6:b2:22:a0:82:64:a7:8e:2a:19:7e:76:45:a0:d1:91:00:97:
66:e1:fa:23:9c:b4:9a:5f:c4:f8:31:8f:88:fc:75:e8:a3:e1:
2c:e6:6b:f5:ad:e9:49:97:a3:50:de:9a:2a:35:ad:7b:23:01:
55:46:7a:9a:22:49:e1:22:7f:1d:43:3e:7e:d2:a6:0e:fa:f2:
88:52:9a:9b:d3:6a:8e:74:6c:41:37:fd:df:90:48:b2:d8:c3:
4d:58:64:f1:c8:20:a9:a6:8d:ba:4d:cc:20:2d:ee:cd:60:1d:
37:36:63:cb:28:b6:07:2a:bf:d7:4c:4d:f9:7d:76:70:68:a9:
d0:07:b4:97:54:7e:1e:da:0f:36:94:88:42:b6:b0:70:3b:ea:
62:dd:21:6e:4e:23:ec:76:cf:ff:ed:d4:47:26:56:89:ee:54:
03:f0:bf:2f:d3:79:61:d1:49:9b:27:71:c9:ae:70:3d:02:b8:
64:58:7e:35:67:7f:07:f7:2b:45:41:c7:4d:ae:9d:12:97:7b:
56:5e:41:5b:d7:6f:85:69:6e:cd:74:30:0a:60:e6:79:39:7f:
a0:26:89:54:6a:74:df:db:de:d9:d6:2e:69:f9:b7:45:ca:12:
9e:eb:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:03 2026 by rpki-client