Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: GBsGDB9BWwpZG3reg0z4grkLgR/6hbYQnKMuCWWVwHU=
Subject key identifier: 63:4C:E7:38:E5:B8:10:2F:51:9E:9F:24:D7:C8:E6:3A:73:46:B7:D0
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 019CACB493F86DE96882E2B99731E507E1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 0FE2
Signing time: Mon 02 Mar 2026 04:00:41 +0000
Manifest this update: Mon 02 Mar 2026 04:00:41 +0000
Manifest next update: Tue 03 Mar 2026 04:00:41 +0000
Files and hashes: 1: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: 6phG4EM1Lwh1mJA30H3kLXmsEyYSv7/ka+8gccB+4o0=)
2: ipDvc3_uDEjFqfddza4tSfpFuZM.roa (hash: xLYuaCPRF/gJJCfwsd4caFL/Eo8m6t0vFmm3gowiEGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:93:f8:6d:e9:68:82:e2:b9:97:31:e5:07:e1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Mar 2 04:00:41 2026 GMT
Not After : Mar 3 04:00:41 2026 GMT
Subject: CN=634ce738e5b8102f519e9f24d7c8e63a7346b7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3f:47:53:76:b3:48:d6:43:86:1e:18:4c:39:
ab:b3:7e:27:c8:d6:30:4c:04:a1:f4:4b:00:87:5a:
ea:73:25:47:10:6c:ef:17:c1:1c:26:a8:4c:bb:cd:
22:59:77:9c:d5:0b:62:cf:15:6e:8b:41:9a:18:29:
a3:65:1c:ee:1d:86:82:df:cb:ef:b6:d9:9a:fc:48:
64:cb:c6:91:c8:55:19:80:49:0d:e6:51:0f:3a:28:
af:36:ed:76:8f:6f:00:7d:5f:07:0a:cd:4b:44:25:
99:93:80:a2:e9:3e:14:45:c0:22:07:69:0e:8a:b1:
a4:b8:b3:2d:bc:26:a9:4d:fb:6a:de:13:c9:54:9b:
a5:02:12:61:35:62:48:fc:d7:22:b2:c9:1e:f3:1a:
94:6b:ef:4c:87:c4:82:3e:37:a3:90:ce:cf:48:70:
11:c1:cd:a1:eb:31:dd:82:b5:0c:ff:84:9c:22:52:
a6:0e:b7:bb:98:63:06:e7:53:de:3b:78:cc:8d:e5:
d2:89:b3:aa:f2:0d:fd:20:2f:0d:ec:f8:dd:09:7c:
9a:7d:6c:4c:a1:a5:0c:6b:a7:d6:2d:d5:a5:fb:47:
f0:b3:4c:5a:2b:b3:32:4f:06:7c:4b:b1:c2:e7:42:
be:74:54:7e:8a:62:30:15:df:48:1d:95:4b:7f:57:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4C:E7:38:E5:B8:10:2F:51:9E:9F:24:D7:C8:E6:3A:73:46:B7:D0
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ab:22:81:7e:ab:87:7b:c2:ba:dd:aa:41:50:1d:c4:0e:c5:
49:de:32:60:fb:18:d9:52:ee:fe:54:52:87:2e:bb:41:23:8e:
3b:f6:c8:8b:a6:41:d6:e6:42:00:63:d8:75:3f:10:f6:ae:08:
51:4d:78:a0:ba:30:ca:2a:e0:bb:1c:ea:db:3d:0a:e2:58:d7:
d0:a8:36:0a:f1:b7:12:5b:35:e1:90:d8:39:da:ce:07:8f:57:
d9:16:e0:57:04:fe:ef:24:57:a3:d9:61:35:a8:35:39:a8:73:
bd:1c:cf:e1:d6:1f:e5:d8:57:cb:17:69:2c:2a:ed:ed:6a:40:
56:a8:d3:d7:38:47:95:50:8e:39:81:10:c0:32:85:d2:1c:91:
ac:73:c5:c9:5e:31:b4:5a:1c:85:96:dc:93:aa:9a:cb:f1:7b:
0d:64:d5:fd:68:d8:9e:9f:57:dd:94:5e:30:dd:56:b9:17:64:
e3:13:2f:78:c5:be:7b:5f:4e:85:50:a2:ff:ed:e0:a4:29:e5:
d9:f1:b2:a6:8d:51:c0:07:27:be:c7:72:66:71:95:49:95:83:
48:be:05:53:c1:76:bc:cb:bc:c3:eb:b8:63:ec:a8:a9:ec:b8:
c4:72:c4:11:b3:69:62:6e:ed:e9:08:36:3e:04:a3:95:d6:1c:
a7:5e:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:56 2026 by rpki-client