Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: z3h+6ceQ/MQbWhOsbZADKrE5IuXylawppB5zroiQCqs=
Subject key identifier: C4:4D:F8:F7:70:E5:8C:60:3C:86:65:09:82:AA:3D:E5:17:76:33:74
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 019DA3E6AD208593C10F52693EBFF284CEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 1062
Signing time: Sun 19 Apr 2026 04:01:36 +0000
Manifest this update: Sun 19 Apr 2026 04:01:36 +0000
Manifest next update: Mon 20 Apr 2026 04:01:36 +0000
Files and hashes: 1: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: rw6owCdDHvHP7hLZmKtfrZdQotirZ66wybbiXqY5+oo=)
2: ipDvc3_uDEjFqfddza4tSfpFuZM.roa (hash: xLYuaCPRF/gJJCfwsd4caFL/Eo8m6t0vFmm3gowiEGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:ad:20:85:93:c1:0f:52:69:3e:bf:f2:84:ce:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Apr 19 04:01:36 2026 GMT
Not After : Apr 20 04:01:36 2026 GMT
Subject: CN=c44df8f770e58c603c86650982aa3de517763374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:e4:b1:5b:09:00:c1:97:48:7c:bb:18:58:
65:b7:52:14:f9:ac:a9:b8:0c:a6:18:d3:ac:fd:46:
15:1d:e6:99:02:00:49:6f:64:d0:c2:d0:18:44:b2:
c7:d3:ff:0f:28:ed:53:50:4b:ac:22:05:51:0f:ed:
e7:84:f8:1c:65:91:ec:f0:7c:7e:3f:d5:e0:b3:10:
0a:a6:7a:cb:6b:e4:cf:c9:fa:72:73:ad:ea:cf:16:
31:28:86:6e:fb:f6:da:09:e0:cd:81:de:a0:f5:71:
c2:e3:95:99:7f:f6:b9:c1:6b:ad:19:53:33:5e:ea:
fb:24:c1:8a:34:13:f1:1e:02:52:26:a6:93:3e:2e:
ab:af:b8:fb:3f:8c:f5:95:ac:3d:e4:c5:b8:7f:11:
93:f5:e7:2c:e0:29:c0:08:86:ca:48:46:47:bc:27:
9a:0f:c7:88:7b:4f:84:d8:d9:ae:fe:58:6a:d9:90:
a8:ae:86:0c:ad:7b:a0:b8:cf:bf:14:26:78:5b:d3:
44:b3:d4:39:3c:53:a5:70:c2:57:b2:a6:50:6f:36:
67:9d:6c:f5:9d:2f:58:34:e7:eb:e1:03:da:16:3f:
c6:f3:b3:ce:28:4e:4e:28:1b:9e:a0:00:69:07:2e:
f6:66:0a:c4:bb:28:53:c9:0c:45:66:26:b6:f9:b9:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4D:F8:F7:70:E5:8C:60:3C:86:65:09:82:AA:3D:E5:17:76:33:74
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:00:b9:ed:44:81:5b:18:35:d4:7f:85:4d:7c:7f:f6:d6:72:
ab:a3:1f:7a:0e:bb:03:b3:4c:5a:af:b2:f4:25:d1:7f:42:d1:
c4:a4:e4:1c:bb:01:c2:91:22:bd:ee:7d:93:c9:53:c0:d9:01:
21:7d:3b:d3:54:7a:df:0a:ec:84:92:1c:24:f8:f0:1a:c5:c8:
19:19:1d:fc:60:5d:46:1b:9c:5c:0b:87:86:d5:ba:ad:92:2d:
31:59:39:07:e4:fe:6c:33:40:fa:48:29:79:b2:2f:03:0b:33:
f5:50:c4:5a:ca:e1:3c:55:ce:39:ee:1d:eb:67:c7:3d:f8:f5:
19:fb:6d:38:93:6c:fa:19:72:d0:41:d3:0b:99:37:5c:e5:5e:
4a:c9:a2:ac:70:fa:72:85:68:f4:6f:72:cc:3a:04:4f:f6:70:
05:e5:a8:91:c8:43:6f:5a:f7:66:42:f9:5b:6d:64:6a:7d:37:
d1:a2:e4:4d:19:03:72:d5:29:72:14:a5:63:48:98:d4:da:1f:
b4:2d:d9:3d:f3:1a:42:b7:02:50:a3:88:26:47:8b:62:73:b8:
49:a4:03:7b:cc:d2:4f:c0:c3:2c:c8:3d:3e:d5:27:b9:47:fc:
45:84:0c:e8:f6:ee:5e:3e:a1:d7:d8:e3:db:c8:42:52:d7:39:
50:e9:60:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:30 2026 by rpki-client