Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
File: 70z25cdLCj5rtoX6mtM8oOYPLDo.mft (raw, json)
Hash identifier: mAht3S4vGE73tWMkRYUiBF8n2kKFRbolZI6m0VqHglU=
Subject key identifier: 36:C8:87:FD:11:6C:F8:4D:4C:F5:05:FE:D2:9C:AE:B5:0E:F7:8C:E9
Authority key identifier: EF:4C:F6:E5:C7:4B:0A:3E:6B:B6:85:FA:9A:D3:3C:A0:E6:0F:2C:3A
Certificate issuer: /CN=ef4cf6e5c74b0a3e6bb685fa9ad33ca0e60f2c3a
Certificate serial: 01A06EDE1BBFD0837863A1C522EF24411470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
Manifest number: D3
Signing time: Sat 05 Sep 2026 00:00:44 +0000
Manifest this update: Sat 05 Sep 2026 00:00:44 +0000
Manifest next update: Sun 06 Sep 2026 00:00:44 +0000
Files and hashes: 1: 70z25cdLCj5rtoX6mtM8oOYPLDo.crl (hash: KDzQEm/RVGL6JtrwYqCqpqraLe6MkLXur/ewGVJGT8U=)
2: kb3m0Yfbi-ZgB-6hn18ll05A-X4.roa (hash: fodgj8GUyM4we+LaVMAoPNWS1kAAEkhv8qbasN62+Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:1b:bf:d0:83:78:63:a1:c5:22:ef:24:41:14:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4cf6e5c74b0a3e6bb685fa9ad33ca0e60f2c3a
Validity
Not Before: Sep 5 00:00:44 2026 GMT
Not After : Sep 6 00:00:44 2026 GMT
Subject: CN=36c887fd116cf84d4cf505fed29caeb50ef78ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:8b:de:ae:bd:66:9e:b0:d6:6c:e6:79:e4:
7c:1f:5f:9e:ae:7a:1a:63:a7:22:09:d1:d0:36:59:
dc:11:c5:c8:9b:bc:28:1f:1a:38:95:c2:21:11:46:
e0:3b:32:82:d0:a5:a3:34:69:c3:dd:3a:00:26:5f:
04:0e:22:f1:7e:7a:97:11:01:32:18:a5:c7:57:8f:
e3:9f:4c:68:a7:44:7a:8f:52:b7:7e:09:53:e6:84:
eb:5a:32:34:da:35:17:04:4a:e0:6a:16:dd:29:75:
53:2b:ea:bb:e2:80:0f:b1:36:da:1e:ae:27:da:14:
b9:c9:0f:35:39:c9:d1:6e:13:3b:46:ee:20:65:c2:
be:d1:a9:9b:39:c0:3c:4e:37:76:9f:eb:2d:81:4a:
0b:58:b4:e5:e1:bb:57:b2:82:56:5f:d1:9b:7b:f7:
d1:3e:5a:0c:19:c8:c0:92:a2:d4:16:83:a1:84:88:
08:1f:fa:92:41:5a:f6:56:84:c1:19:f2:5d:f3:f7:
31:7c:31:18:c7:d5:00:8c:9f:ad:d0:bf:9b:85:da:
d6:09:c4:ec:45:09:c4:11:78:43:b0:04:dc:34:95:
8c:d9:b0:75:1e:09:53:94:ae:92:bd:68:24:c0:05:
61:8f:57:bc:95:26:d0:7d:d6:e3:78:8b:b8:b8:7e:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C8:87:FD:11:6C:F8:4D:4C:F5:05:FE:D2:9C:AE:B5:0E:F7:8C:E9
X509v3 Authority Key Identifier:
keyid:EF:4C:F6:E5:C7:4B:0A:3E:6B:B6:85:FA:9A:D3:3C:A0:E6:0F:2C:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ce:2f:58:37:45:fa:36:61:8d:ce:1d:45:9b:30:86:28:8e:
35:7e:68:3f:a5:a5:7f:7e:1a:52:6f:80:af:5a:7d:92:86:80:
8a:57:a7:23:3a:ef:42:86:d8:7f:c4:0c:e4:03:04:68:d3:4c:
54:c8:1e:c9:d8:24:3c:27:a2:46:f8:7a:2e:a4:22:c4:86:4b:
37:ab:1c:cc:d4:23:35:77:ad:58:5f:e1:ce:be:30:a6:6f:e0:
0f:25:d0:20:fa:9f:23:10:cc:c6:1c:d0:62:c4:03:73:24:91:
a7:10:9c:b4:53:32:e2:3a:34:ce:5c:9a:2a:ec:09:68:9c:d4:
18:51:0c:7b:95:d5:10:c2:19:e0:87:22:72:de:a1:63:d4:19:
f8:94:31:b0:ea:28:9d:85:1c:ce:10:a2:fc:ef:ee:c4:97:a8:
8f:9f:c3:cd:72:f2:1b:b0:f3:51:89:d4:45:54:a0:ee:e0:41:
63:22:33:c4:76:60:2c:be:47:bf:7a:66:0e:1a:4c:4d:dd:fa:
17:ca:75:38:9b:2d:64:5f:fe:c9:04:30:10:0a:b5:f7:2d:f9:
48:2c:b4:fe:97:4f:43:59:61:ef:31:95:fc:5e:69:3d:c0:64:
de:93:e4:d9:55:33:39:18:82:b3:91:a1:b5:be:bc:74:23:f9:
0c:e6:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:27:59 2026 by rpki-client