Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier: 93yB26Gs1cSJ3xueCw5Vyu/3JnPZjV6Cm6R1rpUc3zg=
Subject key identifier: 5D:E1:71:D5:67:52:DC:4D:B0:4D:21:0D:32:04:94:28:36:EA:3F:D9
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 01A1509A4C64586E2311CF5ECF96D74C5AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number: 1024
Signing time: Sun 18 Oct 2026 20:00:51 +0000
Manifest this update: Sun 18 Oct 2026 20:00:51 +0000
Manifest next update: Mon 19 Oct 2026 20:00:51 +0000
Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: RFtlF2l2gj7WF36DYKu1CgRf9EQNZypkH3nO2xho/jQ=)
2: WKalSGnevGohhpgm-gEVPpoJ6r8.roa (hash: RtBxGLGQ1rKUm3Dw/j2SrY9FsdpNgrlCWPACnmZSvFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:9a:4c:64:58:6e:23:11:cf:5e:cf:96:d7:4c:5a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Oct 18 20:00:51 2026 GMT
Not After : Oct 19 20:00:51 2026 GMT
Subject: CN=5de171d56752dc4db04d210d3204942836ea3fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:73:5c:fe:68:3a:75:c9:60:c9:79:9c:08:
e6:16:55:d4:8a:a4:1c:e7:68:60:f2:0c:72:e4:91:
78:1d:b7:09:dd:1d:cc:1f:97:4f:cf:88:f6:c8:33:
33:a9:1d:8a:08:3f:0c:e1:bc:51:e8:05:c8:73:10:
3d:ca:74:04:df:13:71:fc:a9:f2:04:a5:c0:36:a2:
b4:b9:36:30:dd:ab:7a:0c:8d:d4:95:f6:45:37:69:
2d:ab:a5:7f:d6:e8:fd:3f:a6:25:56:4f:dc:d0:d5:
da:8f:b2:ae:96:0c:4a:54:c7:0c:5d:72:a3:f3:82:
ba:db:b3:b7:a3:52:50:35:0e:3e:3f:b2:b1:02:f1:
da:92:68:31:b4:00:b3:8b:b9:33:7c:59:23:06:8d:
6e:55:60:0e:3b:39:cf:a9:5f:35:32:d1:98:73:77:
33:7a:da:ad:77:0c:83:a0:86:75:4f:e8:31:cb:4e:
97:e3:66:dd:c7:1f:1b:64:8b:d6:e9:34:71:85:78:
90:13:a6:05:91:da:a3:34:8b:2b:b2:88:8d:fc:7d:
1a:59:b4:2f:05:da:30:b2:14:82:dd:a3:5b:fc:c8:
c3:42:27:8a:d2:9b:36:59:cf:11:58:a6:dd:35:f0:
bc:89:7d:a4:af:7a:26:90:33:6b:94:96:f7:14:90:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E1:71:D5:67:52:DC:4D:B0:4D:21:0D:32:04:94:28:36:EA:3F:D9
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a7:03:9a:9d:97:b9:35:d3:c3:d2:0b:7b:f2:47:ba:8a:b9:
8d:f8:e3:ac:4a:5d:ca:38:27:6c:97:ee:8a:a3:24:df:5d:b9:
05:0e:f2:a5:f3:0e:73:66:e1:bf:c6:70:e1:03:c8:24:6d:f0:
19:69:fb:7e:50:e7:a2:dd:ec:f3:d2:62:b4:a5:2b:a4:81:b0:
b7:0b:fc:6f:15:e4:93:5d:ff:f7:d2:c5:b9:d6:8c:ad:8c:78:
51:79:d9:bf:b6:92:cb:19:d2:81:77:7a:62:3d:7b:0d:ac:88:
2e:15:31:eb:93:a9:ed:08:ed:fa:d3:43:6b:af:70:5b:d0:a8:
31:3d:af:0f:c6:93:6a:44:5d:94:93:9b:cc:8b:78:58:db:19:
78:5d:bc:1c:31:95:9e:98:c1:35:de:0c:df:cb:f4:6d:a0:78:
db:1e:1d:a9:cb:93:21:97:07:31:d8:67:77:0f:61:74:d0:c8:
f3:be:ce:5c:c2:a9:37:e0:ef:1a:23:4f:f7:0e:33:6f:3f:fd:
f2:5a:8f:e3:da:9b:9c:f2:ef:64:3f:50:60:3f:08:a4:fb:cc:
48:62:09:76:9e:44:b8:ff:b0:64:c1:b5:a8:4c:a5:3c:c8:b5:
2c:42:4c:8d:b7:a7:3a:2b:18:e2:04:e3:f4:71:60:82:60:86:
ea:02:3e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 00:31:04 2026 by rpki-client