Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: OptULgjW96u6h/DBtiIAKzsB49voAAZapuFby2YkQvU=
Subject key identifier: B5:2D:08:16:3F:C1:D9:19:4E:83:62:58:27:A3:80:96:1E:39:5E:27
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 019D39E59119673959647B6724A7B4E3DAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 0CB9
Signing time: Sun 29 Mar 2026 14:00:39 +0000
Manifest this update: Sun 29 Mar 2026 14:00:39 +0000
Manifest next update: Mon 30 Mar 2026 14:00:39 +0000
Files and hashes: 1: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: Eoohnp4mR+tjvWkXWUG/V5GOqFGK8wrtHZlBrXhe5eM=)
2: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (hash: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:91:19:67:39:59:64:7b:67:24:a7:b4:e3:da:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Mar 29 14:00:39 2026 GMT
Not After : Mar 30 14:00:39 2026 GMT
Subject: CN=b52d08163fc1d9194e83625827a380961e395e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:f0:a1:3a:a2:69:cb:81:35:92:96:fd:90:
ad:74:ae:58:52:85:b7:50:cb:35:b5:21:89:09:b3:
58:f3:ff:e8:71:8f:b0:e1:ce:af:ed:a0:82:ae:6a:
c8:23:b7:b7:ca:42:f3:f0:1f:9f:f8:4a:1b:de:88:
5d:05:3e:9f:dc:10:4b:35:ab:ff:64:4c:e9:3c:56:
69:80:dc:13:b2:9a:b4:a0:40:1a:0d:b5:93:5f:33:
20:32:ea:55:80:9b:6c:43:fc:50:fc:ed:c6:1a:46:
86:7d:ff:c5:2b:92:44:9f:59:e3:bf:63:34:e6:04:
0b:d4:13:82:c2:88:62:d8:8a:e0:2a:ca:d8:22:fd:
16:3e:2d:5d:0c:d1:70:5c:07:56:4a:c8:81:61:b3:
fa:fb:af:cd:6c:e4:3c:84:dc:c3:df:b7:3d:52:f8:
28:cd:86:f0:1c:91:3e:54:05:3f:9d:2b:de:d1:80:
54:46:0a:b1:39:55:54:04:cf:db:94:8d:9c:0f:71:
4a:b7:33:c8:c0:17:39:0f:c3:fa:1b:d7:64:8f:eb:
11:c6:8d:01:b5:78:49:0e:e5:74:be:97:9e:4c:d6:
57:d3:c5:80:06:3f:14:9d:79:e2:60:fc:fe:94:6a:
64:d1:a6:b3:50:12:0b:b4:d0:50:c4:bd:e2:92:d0:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2D:08:16:3F:C1:D9:19:4E:83:62:58:27:A3:80:96:1E:39:5E:27
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:85:2c:ba:aa:f2:78:f6:59:5a:3d:59:b6:f8:77:55:59:eb:
f3:a1:ca:28:cc:e5:f0:ae:cd:33:5b:9f:48:c5:c5:b2:96:8a:
96:c0:17:35:05:d0:9d:a9:b6:a7:98:7e:92:a8:11:43:3a:50:
ff:b3:2e:bf:28:80:0a:6f:48:46:b7:56:61:70:fa:72:05:9e:
d3:46:f6:93:45:d2:8e:3e:54:e6:ad:49:7f:df:3f:5d:4f:9d:
34:9d:b1:86:c9:bb:05:49:3a:5d:ad:02:54:2d:40:0d:40:fc:
51:33:b7:94:eb:2a:6f:04:1e:2d:eb:85:91:e1:39:2c:28:d9:
ae:9c:56:a8:17:ce:1a:32:73:15:88:0a:e0:fa:4e:54:77:28:
a7:d2:76:ed:47:aa:ae:20:dc:e6:99:cd:aa:30:38:3e:71:5d:
bb:29:39:b9:fb:50:39:ed:3f:61:af:7c:3f:67:72:f7:28:35:
8d:ea:f7:50:7f:de:bb:f4:79:8f:0b:f6:15:a7:83:e9:83:1f:
ea:a3:5b:27:b8:03:17:52:43:2b:60:5f:24:70:12:d1:72:88:
4c:11:6b:bc:32:cd:b6:90:b6:c9:c7:bc:dc:ee:91:20:fe:c6:
5c:f7:c9:a6:8d:f3:74:d5:8c:ac:94:a8:39:6d:f1:0d:12:8c:
c0:0e:ea:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:30 2026 by rpki-client