
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: mSxSTcqt15OGtZ7niTyMY7BZk/sUtLVxQrBufgF++cg=
Subject key identifier: 10:CF:D4:EB:CA:3E:B1:A1:29:05:29:AB:8F:68:FA:F4:9C:24:51:E3
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 019E3117413B475C9FBDF0927E785B8D97E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 0D39
Signing time: Sat 16 May 2026 14:01:08 +0000
Manifest this update: Sat 16 May 2026 14:01:08 +0000
Manifest next update: Sun 17 May 2026 14:01:08 +0000
Files and hashes: 1: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: tdno6CC0TUG28WY4OF79+LJfoUeVtklMEj5Yuvkj66I=)
2: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (hash: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:41:3b:47:5c:9f:bd:f0:92:7e:78:5b:8d:97:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: May 16 14:01:08 2026 GMT
Not After : May 17 14:01:08 2026 GMT
Subject: CN=10cfd4ebca3eb1a1290529ab8f68faf49c2451e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:8a:27:a7:88:1d:ea:99:71:0f:5a:eb:b2:
c9:67:7c:3f:67:0a:eb:05:81:bc:1c:75:ba:48:12:
a9:26:46:a9:c1:9b:04:0e:97:3d:33:c0:d9:c1:46:
29:c4:f6:c1:d2:87:0f:5c:f5:29:76:99:73:fd:88:
e6:c5:22:6e:2b:6d:e2:0e:a9:d0:3d:50:95:21:b9:
39:96:d8:69:06:f6:f6:d3:36:78:23:df:04:20:89:
87:17:9c:d1:de:b5:32:70:20:3e:0f:06:b9:51:22:
bb:95:ae:85:a0:31:f1:a5:93:13:d2:23:64:9f:53:
67:41:65:48:a6:73:ac:d4:cb:27:a3:4b:9a:45:86:
ff:8d:31:b8:d8:5c:9b:25:85:91:86:4e:9c:10:f9:
34:96:5b:dc:ff:3b:7e:cb:9a:c5:ce:10:48:a3:0e:
7c:dd:23:e0:9a:18:3c:bd:1d:e1:09:2f:b4:3e:3e:
95:a0:27:24:4e:87:51:62:ed:c2:19:8c:ee:08:2e:
34:ce:d2:93:05:05:34:e9:c8:ec:6b:4c:c2:35:e9:
21:c8:00:06:12:c3:f5:3b:f1:69:9e:49:03:13:c1:
ef:d0:a0:d7:d3:5f:99:aa:2d:d2:b5:05:d8:42:81:
39:9a:9e:8b:6a:34:c2:6d:39:6c:52:ee:60:f4:1a:
28:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CF:D4:EB:CA:3E:B1:A1:29:05:29:AB:8F:68:FA:F4:9C:24:51:E3
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:87:b5:d9:d9:b5:ab:45:ef:d2:41:09:b2:e1:78:28:09:51:
61:c2:92:c0:7b:f4:9b:53:f9:76:5b:f4:4f:26:a7:49:fe:d0:
40:33:5f:9f:e2:92:fc:49:e3:08:d1:ac:96:37:a4:b7:b6:b6:
8f:7c:e1:d6:37:e7:3a:ab:e2:47:f3:b0:0d:5a:fa:45:03:bf:
79:0e:53:e9:d6:41:60:a0:73:33:e0:f2:b3:6b:d9:b0:3f:74:
87:19:42:6e:3b:3d:aa:49:65:73:ce:29:0e:af:a6:a3:fd:1b:
97:43:b3:ec:db:21:e7:25:e6:f0:bb:1d:55:15:0a:40:ef:a7:
0e:0d:78:0d:5d:cc:2f:43:c8:3a:9c:0b:47:18:a3:46:96:57:
a2:0e:6f:ed:95:0a:98:7d:40:8e:ca:fa:46:d2:8d:67:9f:d5:
98:81:2e:ee:81:48:78:3d:f3:42:93:a3:9e:15:ca:d4:36:38:
89:2b:80:6d:de:26:37:88:e6:52:28:2f:17:0f:26:79:24:d7:
96:81:72:0c:58:6d:d5:db:b8:46:b1:d5:1b:01:78:94:99:48:
ee:82:76:94:28:98:6c:1f:49:5c:f2:30:46:6c:dd:00:17:a7:
59:75:05:1b:5c:c3:48:da:85:50:06:6e:b9:6b:3e:28:cd:bd:
e2:8f:81:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:23 2026 by rpki-client