Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
File: 70z25cdLCj5rtoX6mtM8oOYPLDo.mft (raw, json)
Hash identifier: I2r4GWVem56ioEz+05Yax14DXvMl7qk3U5U8WbR5ufA=
Subject key identifier: A1:FB:42:BF:72:CA:51:94:30:DA:27:04:96:06:DA:FD:D2:53:7F:E7
Authority key identifier: EF:4C:F6:E5:C7:4B:0A:3E:6B:B6:85:FA:9A:D3:3C:A0:E6:0F:2C:3A
Certificate issuer: /CN=ef4cf6e5c74b0a3e6bb685fa9ad33ca0e60f2c3a
Certificate serial: 01A17F2ABBE4AF4E8C970A15DFB23A5656D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
Manifest number: 0160
Signing time: Tue 27 Oct 2026 21:01:09 +0000
Manifest this update: Tue 27 Oct 2026 21:01:09 +0000
Manifest next update: Wed 28 Oct 2026 21:01:09 +0000
Files and hashes: 1: 70z25cdLCj5rtoX6mtM8oOYPLDo.crl (hash: V9erj/DTXnBaQM50Q9VjummMXjVxiGdNrgywPxgQwDU=)
2: kb3m0Yfbi-ZgB-6hn18ll05A-X4.roa (hash: fodgj8GUyM4we+LaVMAoPNWS1kAAEkhv8qbasN62+Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:bb:e4:af:4e:8c:97:0a:15:df:b2:3a:56:56:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4cf6e5c74b0a3e6bb685fa9ad33ca0e60f2c3a
Validity
Not Before: Oct 27 21:01:09 2026 GMT
Not After : Oct 28 21:01:09 2026 GMT
Subject: CN=a1fb42bf72ca519430da27049606dafdd2537fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:b7:ee:79:2b:62:17:de:ab:ca:de:2c:cb:
d7:8f:34:c2:40:a3:04:45:53:4a:fc:2c:67:41:7a:
d3:54:1b:ab:45:c7:d9:fc:0d:5d:b9:61:66:9c:3f:
96:c4:05:d4:36:f3:e6:6c:1f:89:92:c8:75:28:e0:
b7:de:d6:0d:6e:eb:b3:96:ff:f1:85:b4:c4:f4:8e:
45:8b:d7:d1:24:97:37:e5:97:74:42:16:b0:ab:79:
18:62:c0:33:8b:aa:33:e7:f3:ea:4a:94:ba:1c:2d:
d6:ed:dd:93:32:64:24:04:ca:95:38:f1:cc:c9:42:
32:62:b3:b1:56:df:0f:51:9b:d3:ac:79:52:cf:5c:
eb:23:3b:50:ec:10:74:b9:eb:99:9d:77:43:a0:a0:
46:be:f5:d2:bd:81:31:98:70:55:93:3e:75:52:11:
56:7b:18:78:87:fb:c5:89:d8:1a:e6:fa:f4:d6:5f:
e6:bb:9b:55:50:1c:9e:19:e9:a4:3d:1a:e2:fb:45:
94:87:ee:d1:00:fc:8f:ac:d7:04:9e:23:cb:85:60:
b3:21:37:c5:42:60:96:4e:df:aa:d4:2a:ca:51:43:
ff:8b:44:47:00:53:bd:1a:8d:be:90:42:e8:20:98:
1e:92:64:db:7c:fb:7c:e4:96:8f:97:2b:1c:6b:13:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FB:42:BF:72:CA:51:94:30:DA:27:04:96:06:DA:FD:D2:53:7F:E7
X509v3 Authority Key Identifier:
keyid:EF:4C:F6:E5:C7:4B:0A:3E:6B:B6:85:FA:9A:D3:3C:A0:E6:0F:2C:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ab:98:23:4d:46:90:ea:fc:92:2a:80:9b:9b:4d:99:84:d6:
f5:e7:07:55:f9:4b:1d:7c:12:70:67:53:90:f3:63:62:82:bb:
50:5a:72:0e:24:41:50:f2:f6:69:3a:78:61:5b:9b:b7:86:d6:
5f:fc:ac:ae:7b:e3:5d:ba:45:69:11:30:14:bd:38:79:ab:ca:
aa:a0:d5:15:97:71:af:86:12:6e:fe:e3:28:ba:73:fd:7f:dc:
24:ec:f3:c6:ba:77:0a:c8:dc:ab:30:87:e1:44:07:eb:3b:6d:
af:12:bc:0f:16:0d:a8:14:ff:0f:eb:1d:d3:ed:13:78:4f:50:
42:67:15:c3:e2:26:51:76:44:e5:16:a3:b4:35:1e:30:9f:d2:
58:16:5a:05:b3:1f:8b:a8:58:36:3a:ab:48:e9:72:15:53:15:
6d:45:45:78:8d:b2:6c:55:12:48:60:88:6c:34:a7:6d:0b:1e:
8d:7d:9b:51:86:aa:94:31:ce:39:00:d3:1a:ee:8f:dc:97:12:
76:0b:9c:6a:52:fb:ea:80:f9:02:7b:0b:84:e6:55:06:b2:44:
dc:75:ad:4c:45:ae:66:52:33:81:4b:2c:9c:d7:62:a6:e5:43:
4f:3c:9d:fe:2e:20:88:71:85:42:6e:f7:a1:0d:32:47:7c:68:
01:88:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:29:18 2026 by rpki-client