Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier: mHa5UWnqoSmR58nzCmtMAC7iXxyNdkM5VZHpzGfHgLE=
Subject key identifier: B4:0F:42:B1:30:EE:D4:8F:37:69:D3:69:B2:C1:99:F5:94:79:A9:C9
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial: 019CBF971FAE6978A3069BD9AD6D6C3B4763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number: 0745
Signing time: Thu 05 Mar 2026 20:01:18 +0000
Manifest this update: Thu 05 Mar 2026 20:01:18 +0000
Manifest next update: Fri 06 Mar 2026 20:01:18 +0000
Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: eXBkkctIXtnHDRNr3lYD0clvRgTb2r268UYqsCbkS4Q=)
2: euUp3-ezlCpILlf7qWV0a93H1yQ.roa (hash: kzeXchF7R0DCrCVUSaQcyQotUqQoTUlPfhRZvehXMko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:97:1f:ae:69:78:a3:06:9b:d9:ad:6d:6c:3b:47:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Validity
Not Before: Mar 5 20:01:18 2026 GMT
Not After : Mar 6 20:01:18 2026 GMT
Subject: CN=b40f42b130eed48f3769d369b2c199f59479a9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:e0:4c:5d:00:9f:13:2b:4f:74:ab:10:37:
24:f4:00:9c:a1:af:30:22:4d:77:e8:b9:6a:26:ad:
f2:9e:b0:5d:1d:24:77:db:24:6f:47:e2:2b:67:74:
5e:17:91:e5:61:1f:4e:d3:69:66:5d:0c:5e:c2:2d:
c6:4b:83:b3:c7:1e:5f:e1:2e:a7:5d:6f:8d:9e:8d:
c4:dc:67:cd:c0:13:ad:6a:30:c1:de:f7:4b:6e:3f:
1e:1e:44:b6:dc:9b:90:80:0f:a2:41:43:0e:a2:e8:
37:81:db:21:15:13:a7:b0:27:a2:d1:85:e2:68:59:
ea:86:e4:36:e5:7f:2e:3f:10:82:5f:fa:2a:81:b5:
5a:90:19:d4:97:3c:43:3d:54:35:a0:39:bf:a2:c3:
0c:64:e3:dd:5f:11:76:f8:26:3d:eb:7d:2d:ac:98:
60:a5:c2:96:a4:d5:88:64:60:ff:7c:ac:fc:cb:fb:
a8:63:f1:6a:95:d6:08:52:2c:eb:94:44:ff:c6:6d:
60:cb:0e:cd:63:e1:ab:2e:4e:e3:19:9f:0a:fa:88:
d6:37:de:95:81:fc:c7:e4:e3:fb:ec:30:aa:b8:f4:
a5:a0:25:f9:c8:18:7e:a2:3e:e9:de:73:5c:38:d6:
50:1c:a6:b6:ba:42:72:b7:eb:96:e8:52:12:30:56:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0F:42:B1:30:EE:D4:8F:37:69:D3:69:B2:C1:99:F5:94:79:A9:C9
X509v3 Authority Key Identifier:
keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0e:12:19:53:63:40:6e:05:98:09:c7:92:de:64:05:d2:4e:
51:34:97:e7:67:d3:7b:7f:ae:a1:70:74:1f:fe:e9:98:98:78:
41:c6:bb:2e:06:5a:fd:bf:9e:53:b2:48:ea:ab:60:16:0d:26:
16:1a:39:9e:8a:0e:77:fc:bb:93:71:0d:08:3a:f8:ee:ef:b3:
e5:43:12:6a:44:6e:e8:94:e4:3e:f0:f3:47:20:ad:73:3c:f9:
36:7c:ab:0a:99:89:14:ed:d1:39:2a:b3:b3:91:49:7b:ef:5e:
2a:eb:ac:07:5a:b9:c9:61:41:fd:cd:2f:04:0d:b0:87:73:80:
f6:c8:17:f9:86:63:a9:1f:07:95:f9:b1:f3:5a:97:62:24:cd:
30:25:49:c3:7e:1f:df:1d:ea:a9:d3:ab:8c:ed:fe:68:8e:42:
20:bd:51:fa:48:51:5c:82:65:82:1b:e9:0e:54:c9:9c:44:ce:
d4:a7:db:ee:81:59:12:4a:91:10:d2:f7:de:0f:01:9a:81:0b:
3f:1c:42:2c:54:10:8a:86:36:60:8d:47:66:18:4c:7d:3f:fe:
8c:4c:05:5a:7b:5d:93:ce:a7:8a:72:c0:15:63:8e:0d:ed:14:
a7:a1:c7:9c:14:e5:06:c4:c6:6a:9f:3f:92:60:ee:c3:30:06:
51:fb:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:23:31 2026 by rpki-client