Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier: 0qd1fWhHbiMgyihHle4G7yOjyO0ePRBckDMBlrLSSiE=
Subject key identifier: 45:7F:72:4B:BB:51:1F:08:C9:BC:FB:A7:FF:DB:49:6A:17:90:F0:12
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 01A13F3963D7A39747DDC61C266B3926F69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number: 101B
Signing time: Thu 15 Oct 2026 11:01:27 +0000
Manifest this update: Thu 15 Oct 2026 11:01:27 +0000
Manifest next update: Fri 16 Oct 2026 11:01:27 +0000
Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: Y9IPP0jPlxCk2mV9Tcr2UfqgMcG32b26yURQwnPrCJg=)
2: WKalSGnevGohhpgm-gEVPpoJ6r8.roa (hash: RtBxGLGQ1rKUm3Dw/j2SrY9FsdpNgrlCWPACnmZSvFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:63:d7:a3:97:47:dd:c6:1c:26:6b:39:26:f6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Oct 15 11:01:27 2026 GMT
Not After : Oct 16 11:01:27 2026 GMT
Subject: CN=457f724bbb511f08c9bcfba7ffdb496a1790f012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6d:6e:10:ba:0a:ae:f5:bb:8c:a0:15:fe:94:
e2:8f:6e:f7:66:42:ce:9f:e0:fe:0c:68:8c:09:13:
c3:9a:8a:8d:8d:f4:63:5c:24:93:59:69:20:fa:27:
4e:5c:87:1f:3c:05:0c:0f:14:fb:06:ff:43:89:8e:
55:68:ea:f1:db:7b:9e:8d:39:64:e0:6e:a9:71:ee:
c9:b9:67:58:8f:4d:cf:f8:78:2f:ad:12:9c:96:f6:
3d:1a:c5:5b:25:34:60:93:12:43:f0:a1:b2:1e:a6:
3f:36:bd:cf:05:83:08:cd:10:47:e6:18:16:4f:ee:
da:e6:6e:78:34:ac:54:a5:da:c8:d7:db:db:2a:99:
11:c7:d7:39:65:6a:d8:ba:c4:13:99:df:a8:69:02:
29:04:0b:52:4d:7e:ea:c7:19:07:5a:63:43:a9:c6:
34:56:31:0e:e5:8c:a9:8c:3b:b3:70:33:27:08:f5:
98:d0:f2:52:86:10:59:52:fb:8e:e1:f8:06:50:0d:
a4:ee:5c:95:03:4b:3a:4d:eb:17:c4:eb:3b:76:f1:
df:06:45:8e:3b:59:76:83:18:5d:13:91:c4:51:e5:
97:9d:9e:42:c6:da:d9:00:d5:42:fb:99:d7:fd:2e:
64:d6:76:16:41:13:0d:df:58:0e:0b:20:f6:3f:20:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7F:72:4B:BB:51:1F:08:C9:BC:FB:A7:FF:DB:49:6A:17:90:F0:12
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:56:eb:ee:82:50:d9:1e:6f:0e:d3:4e:a9:68:bf:a3:68:46:
87:35:67:f9:17:83:c3:45:83:27:3c:95:1d:9e:bb:ee:a9:07:
8f:c4:06:30:69:09:57:e5:f8:11:e4:0f:7e:b5:8c:15:ce:fd:
6b:ed:74:35:6f:31:f4:22:f9:43:86:5f:70:c3:c7:7a:95:e6:
67:b5:ce:67:52:5e:30:0f:ec:63:bb:e4:e8:d8:df:da:a2:8b:
8f:5c:15:c9:11:29:bc:d5:e4:8a:68:7a:ac:e9:8b:e6:0b:89:
3c:9f:06:fb:c9:15:7a:6f:9d:c2:13:32:d7:7c:39:61:72:8d:
9c:90:28:93:2d:97:3b:a3:08:4b:e3:1c:37:ca:82:d1:f4:0a:
14:71:2c:1d:ad:d2:7d:bd:44:ff:27:7d:56:15:f8:d9:ec:8e:
26:e1:2b:60:ba:3d:7b:c7:35:9a:20:0b:21:b9:de:9d:cb:dc:
5a:15:cf:7f:9f:40:8e:01:f1:59:b3:7a:b2:6e:55:b9:ba:3a:
b9:21:f9:35:8a:d2:55:b4:52:65:41:06:c0:01:0f:9d:75:c9:
d0:00:97:e9:73:24:fd:f0:8e:0f:ea:0d:f0:35:d1:3d:1e:8d:
b5:ab:a0:97:9e:f2:b9:a5:fc:ca:50:f8:0b:00:5f:cf:8f:1e:
b5:49:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:54 2026 by rpki-client