Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
File: 712SU70NJYyVsrNG5IUzyULMI7Q.mft (raw, json)
Hash identifier: +T1TB/U2MGJuwYcwlI4qq/HCsyxF1dBOPLV4K5+Dw8Q=
Subject key identifier: 57:BA:57:E1:F3:9D:7B:F2:B6:0C:11:3D:7B:65:D3:31:B9:4C:32:98
Authority key identifier: EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
Certificate issuer: /CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Certificate serial: 01A04017BEDF1E1E3B48113A3DCA6E0B4316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
Manifest number: 013B
Signing time: Wed 26 Aug 2026 22:01:33 +0000
Manifest this update: Wed 26 Aug 2026 22:01:33 +0000
Manifest next update: Thu 27 Aug 2026 22:01:33 +0000
Files and hashes: 1: 712SU70NJYyVsrNG5IUzyULMI7Q.crl (hash: d29LDCogAw2W19YHIJ+Hb6Wgzzb/4a2lTGhwviCCySs=)
2: gcOeRtdhASpOXftyQUUQHnlSzHY.roa (hash: mRt09ink6QbROuNCA4WL011qJeqnMp6lFsCyZXUphZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:be:df:1e:1e:3b:48:11:3a:3d:ca:6e:0b:43:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Validity
Not Before: Aug 26 22:01:33 2026 GMT
Not After : Aug 27 22:01:33 2026 GMT
Subject: CN=57ba57e1f39d7bf2b60c113d7b65d331b94c3298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:40:3d:a2:7b:3c:06:4c:98:66:e8:fb:11:
a1:fb:86:b6:bc:c3:28:f6:7a:8c:58:0b:25:b0:a7:
fd:eb:b2:f0:c0:b1:d5:dc:79:24:75:5d:22:36:19:
d1:ce:d1:e6:90:50:4f:af:62:ee:64:1a:20:b1:5d:
10:f2:4a:5a:a5:c3:d1:e7:89:46:3c:90:b8:d5:05:
45:26:4c:e2:d7:99:26:51:cf:f6:47:92:85:18:1f:
47:75:90:2c:fd:3f:54:c2:cd:83:7a:6d:bf:a8:63:
7b:21:87:54:72:bd:87:5a:bd:77:0e:2d:5e:6f:e3:
9e:14:1e:e3:b3:85:3f:87:0e:54:34:9d:b1:ad:0a:
fb:ce:36:9d:d4:c3:f3:01:f9:59:fa:e8:24:88:76:
4d:13:62:e2:65:2e:53:7e:f6:84:f3:8a:62:c9:b1:
0f:1c:e4:52:47:23:8f:c4:07:a4:30:b4:a7:09:97:
1a:7b:e1:99:ed:61:3d:5e:22:13:59:ee:38:33:70:
27:7a:a9:ca:d7:b7:86:c0:7a:94:5a:8b:7c:a7:6d:
e9:56:b8:38:f5:3b:d9:d1:22:d8:be:95:ed:3e:15:
f3:a9:87:47:eb:b6:85:0e:7b:96:f6:0e:96:ab:da:
65:90:c2:ea:30:52:e5:25:3f:11:ec:da:49:e6:45:
30:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BA:57:E1:F3:9D:7B:F2:B6:0C:11:3D:7B:65:D3:31:B9:4C:32:98
X509v3 Authority Key Identifier:
keyid:EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:06:5a:2a:1a:52:27:d6:a9:2c:ce:8d:17:ed:47:6e:0b:73:
9d:6a:d4:54:72:af:3a:69:c0:fa:57:db:20:22:c2:e9:37:9f:
ce:e2:1e:b7:33:40:ce:a6:f5:3a:4c:5f:1c:25:da:ed:5e:7b:
5b:2e:7f:ca:68:95:43:c8:71:e0:c5:a6:bd:5a:b7:f9:f2:e6:
bc:8d:19:ef:7c:db:86:02:85:8e:27:56:67:ce:31:5c:8b:c8:
ef:33:1e:2b:70:06:f4:99:ac:be:c4:99:cc:71:40:34:4a:5b:
20:d3:3d:b1:e0:60:e4:af:62:8d:05:df:71:6c:d2:0e:1d:1d:
8b:99:67:aa:87:c2:9d:12:4c:17:22:70:d6:a6:6e:8e:c3:f1:
14:46:48:87:95:dd:4a:f0:0c:94:d5:72:5e:b9:4d:f7:40:48:
a6:4b:bb:13:34:ed:ed:b0:26:1c:e9:f0:8b:3c:25:fd:50:7d:
d6:23:26:d5:7e:b3:fe:49:39:37:a3:1f:4c:52:16:13:09:e3:
0c:15:42:87:b8:49:12:20:7a:62:88:c1:08:30:dd:65:c5:76:
a9:99:f4:d6:8d:bc:92:b7:b3:91:7d:e3:cd:49:41:d9:1f:f7:
ac:c9:44:b1:c6:0a:a5:9f:52:0b:27:60:03:a4:7c:6b:c0:27:
a5:5e:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:06 2026 by rpki-client