Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: alkjl5R1mbRTlsscqRnuj5f0PavChX3O/r5wCmj9QCo=
Subject key identifier: F3:7E:D7:09:C4:A9:E8:5B:70:93:DD:FE:76:C0:1E:9D:28:13:BC:D2
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 019FA9AC0623BF376634E0C138B84CFADE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 0DFC
Signing time: Tue 28 Jul 2026 17:00:50 +0000
Manifest this update: Tue 28 Jul 2026 17:00:50 +0000
Manifest next update: Wed 29 Jul 2026 17:00:50 +0000
Files and hashes: 1: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: M2vRStrexwecG5LqNlSH6UZgY5BJIjqZZRzwfpB1OZE=)
2: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (hash: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:06:23:bf:37:66:34:e0:c1:38:b8:4c:fa:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Jul 28 17:00:50 2026 GMT
Not After : Jul 29 17:00:50 2026 GMT
Subject: CN=f37ed709c4a9e85b7093ddfe76c01e9d2813bcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:73:c0:75:17:64:33:41:5d:3c:7a:b2:d1:
44:98:fa:05:82:e8:54:98:5a:ea:11:fe:03:07:15:
24:32:c4:41:43:78:04:45:d4:17:b8:0b:81:31:99:
0a:ae:5f:1a:0a:f6:52:d4:38:9e:c3:10:08:50:5e:
d8:38:df:5c:47:92:5c:88:33:e1:06:de:b8:68:9b:
bd:70:29:3f:c0:12:b3:77:b5:5f:41:f7:85:f2:78:
8d:62:88:bf:f8:d2:63:e4:91:44:2c:c0:89:d7:4c:
eb:6f:eb:48:41:bc:45:4f:cb:7c:1b:6a:78:77:34:
04:56:7b:4a:db:cd:5f:d4:78:ff:43:4f:37:63:f3:
e3:e5:07:fb:19:c8:a3:34:72:ac:a1:95:49:57:49:
29:7a:e7:06:eb:5d:b7:f6:a0:c1:2a:ec:4d:78:15:
61:3e:ac:88:8d:be:ac:ab:82:ec:62:27:90:36:1f:
7d:9c:0a:09:4f:3d:c3:2a:1a:a5:20:8b:fd:b4:97:
14:57:0b:0a:31:ec:65:f7:93:4e:25:a9:73:93:8a:
ee:5a:d2:dd:8e:78:67:df:36:e6:ba:01:b5:92:6a:
ec:3a:d7:9a:d7:b7:af:d0:7e:90:94:6e:30:f8:09:
fc:04:7a:36:0a:c6:e8:9d:55:aa:b1:60:d6:a6:a6:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7E:D7:09:C4:A9:E8:5B:70:93:DD:FE:76:C0:1E:9D:28:13:BC:D2
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fb:aa:09:a6:31:bb:a5:d3:9c:9a:63:1f:98:65:2f:3f:29:
6d:7f:f0:db:fe:71:33:fe:e2:9b:15:5d:f3:e3:b7:de:b3:70:
73:b0:31:bd:61:85:68:4c:31:79:41:cc:3a:0f:7f:66:98:fd:
5c:d8:99:47:2a:9f:f9:75:af:1a:53:3c:fc:27:98:17:60:80:
05:23:0b:7c:49:19:bd:52:ce:5a:79:cf:dc:36:72:a8:69:cd:
df:14:c7:c6:dd:e1:19:04:82:a6:8d:56:9f:43:a9:3f:95:b3:
a9:ba:09:54:32:b3:c6:66:37:20:1a:62:6a:79:e3:69:27:48:
e8:58:93:10:97:77:b3:47:fb:26:54:d6:87:90:4a:7e:b1:78:
f6:27:2f:cd:d7:90:2e:37:4a:c6:f2:6b:37:4c:c2:9a:91:08:
01:c6:77:ba:d9:95:a0:1b:ef:70:1e:92:45:7f:60:6c:e0:b5:
01:8f:22:60:4b:14:0d:d9:83:d0:9a:86:90:b1:06:24:ff:2e:
d3:44:20:3d:8b:aa:1c:7e:65:d2:c6:7c:ae:e2:6c:67:ba:09:
1b:8b:b9:c7:9f:43:69:a4:1e:d8:22:6e:2a:7c:b0:79:5e:fa:
f0:52:0d:30:10:6f:80:c6:e4:ae:2f:85:f9:49:91:55:c4:8f:
dd:b5:ad:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:27:31 2026 by rpki-client