Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
File: 712SU70NJYyVsrNG5IUzyULMI7Q.mft (raw, json)
Hash identifier: 1iK5R7EKZZOhwzruASOZVoaB5uBcozwBjUhoy7wCWNc=
Subject key identifier: 99:D2:4A:05:45:B0:2C:69:04:FA:51:8A:06:3C:E2:06:20:2F:1A:5C
Authority key identifier: EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
Certificate issuer: /CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Certificate serial: 019E49FB91A214125D236C71299A81F91E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
Manifest number: 37
Signing time: Thu 21 May 2026 10:01:24 +0000
Manifest this update: Thu 21 May 2026 10:01:24 +0000
Manifest next update: Fri 22 May 2026 10:01:24 +0000
Files and hashes: 1: 712SU70NJYyVsrNG5IUzyULMI7Q.crl (hash: 2meIMYtoOGyWr5OZPuGN/yguMtpTPzguFdw6TIlPjsM=)
2: gcOeRtdhASpOXftyQUUQHnlSzHY.roa (hash: mRt09ink6QbROuNCA4WL011qJeqnMp6lFsCyZXUphZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:fb:91:a2:14:12:5d:23:6c:71:29:9a:81:f9:1e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5d9253bd0d258c95b2b346e48533c942cc23b4
Validity
Not Before: May 21 10:01:24 2026 GMT
Not After : May 22 10:01:24 2026 GMT
Subject: CN=99d24a0545b02c6904fa518a063ce206202f1a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:d4:d6:34:24:04:d9:15:04:a2:ef:b9:3f:
b8:df:ab:b3:69:d9:af:e0:70:44:1b:86:90:85:ad:
08:53:b1:f7:c2:7f:6b:96:ae:22:4a:09:d4:92:69:
37:f4:ee:de:ac:ac:2b:06:77:84:ae:47:a3:81:e5:
7a:e5:96:40:6c:5e:15:79:55:18:ca:07:c9:d6:1b:
5e:37:bb:e1:e2:13:e1:bf:c6:de:29:7b:67:94:5d:
1b:5c:55:6b:c6:34:e3:5e:b9:bf:c6:69:a7:03:f8:
6d:4d:7d:25:80:5f:23:79:30:a4:30:16:78:17:96:
56:f3:82:eb:a0:4a:ad:26:6f:2a:df:4d:9e:2e:a9:
05:81:82:2c:8e:79:52:8a:86:23:5b:7b:9b:ae:e2:
6b:a2:08:da:de:e8:d8:f1:15:ba:0b:a6:53:20:40:
b9:1c:c3:09:1d:86:9a:69:2d:a6:af:00:43:db:69:
7b:3e:d9:5a:c3:4a:43:5b:59:91:e6:0c:23:3f:14:
28:40:a4:2a:1c:a5:f0:47:7f:db:a0:9b:2e:dd:7e:
61:78:21:56:f3:b2:22:2a:92:02:40:3d:9d:74:2e:
6b:10:0f:d1:10:f3:8e:53:83:99:c1:d5:45:55:9f:
d6:3d:df:eb:b2:9f:36:a6:73:07:f8:1d:39:df:00:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D2:4A:05:45:B0:2C:69:04:FA:51:8A:06:3C:E2:06:20:2F:1A:5C
X509v3 Authority Key Identifier:
keyid:EF:5D:92:53:BD:0D:25:8C:95:B2:B3:46:E4:85:33:C9:42:CC:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/712SU70NJYyVsrNG5IUzyULMI7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/161601-9f49-4c7c-99e3-832fa4779e30/1/712SU70NJYyVsrNG5IUzyULMI7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3b:53:7a:6d:15:6c:b1:39:92:3b:ca:96:fd:30:00:27:76:
c0:e8:c9:f4:19:f1:0c:61:f5:f4:43:21:90:09:b3:b7:06:b4:
52:6f:8a:55:ba:8d:62:36:28:1c:cf:78:20:d5:30:d5:9d:4f:
a9:70:96:c5:13:35:d4:a1:0a:1e:41:25:12:f2:0d:08:3a:37:
fb:7c:dd:61:64:ac:fb:39:92:b8:ad:31:9f:ef:d1:1b:e2:70:
d5:4d:ed:31:10:6f:a6:3c:3c:da:dd:13:01:c6:95:be:4b:95:
ec:af:e9:8f:73:46:c3:29:89:77:43:67:b1:bb:46:e9:07:61:
01:b5:90:47:fd:e1:c1:ae:9c:92:17:42:ec:0e:2d:ed:3f:95:
83:36:3e:fa:59:8e:8a:df:e5:f9:2f:4b:0f:f8:04:72:e5:2f:
e9:51:7b:0e:9f:f4:ba:b0:e7:a9:f4:b5:49:c1:ab:5a:d6:c7:
a2:4d:7b:f2:9c:4b:fc:7f:93:b9:fa:8f:dc:b2:96:cf:2d:74:
c2:bb:ae:bc:fe:1e:16:8f:2c:72:34:89:08:42:32:5f:64:0b:
2c:10:78:e3:8a:43:4a:bc:dd:32:91:ea:3d:ac:db:2f:ba:44:
09:c9:ec:a6:35:d4:0d:bd:a1:3b:09:a2:28:e9:72:e3:e9:b2:
ee:4c:e0:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5J+5GiFBJdI2xxKZqB+R4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNWQ5MjUzYmQwZDI1OGM5NWIyYjM0NmU0ODUzM2M5NDJj
YzIzYjQwHhcNMjYwNTIxMTAwMTI0WhcNMjYwNTIyMTAwMTI0WjAzMTEwLwYDVQQD
Eyg5OWQyNGEwNTQ1YjAyYzY5MDRmYTUxOGEwNjNjZTIwNjIwMmYxYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum/U1jQkBNkVBKLvuT+436uzadmv
4HBEG4aQha0IU7H3wn9rlq4iSgnUkmk39O7erKwrBneErkejgeV65ZZAbF4VeVUY
ygfJ1hteN7vh4hPhv8beKXtnlF0bXFVrxjTjXrm/xmmnA/htTX0lgF8jeTCkMBZ4
F5ZW84LroEqtJm8q302eLqkFgYIsjnlSioYjW3ubruJrogja3ujY8RW6C6ZTIEC5
HMMJHYaaaS2mrwBD22l7Ptlaw0pDW1mR5gwjPxQoQKQqHKXwR3/boJsu3X5heCFW
87IiKpICQD2ddC5rEA/REPOOU4OZwdVFVZ/WPd/rsp82pnMH+B053wCFCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnSSgVFsCxpBPpRigY84gYgLxpcMB8GA1UdIwQY
MBaAFO9dklO9DSWMlbKzRuSFM8lCzCO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzEyU1U3ME5KWXlWc3JORzVJVXp5VUxNSTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xNjE2MDEtOWY0OS00YzdjLTk5ZTMt
ODMyZmE0Nzc5ZTMwLzEvNzEyU1U3ME5KWXlWc3JORzVJVXp5VUxNSTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xNjE2MDEtOWY0OS00YzdjLTk5ZTMtODMyZmE0Nzc5ZTMw
LzEvNzEyU1U3ME5KWXlWc3JORzVJVXp5VUxNSTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDtTem0V
bLE5kjvKlv0wACd2wOjJ9BnxDGH19EMhkAmztwa0Um+KVbqNYjYoHM94INUw1Z1P
qXCWxRM11KEKHkElEvINCDo3+3zdYWSs+zmSuK0xn+/RG+Jw1U3tMRBvpjw82t0T
AcaVvkuV7K/pj3NGwymJd0NnsbtG6QdhAbWQR/3hwa6ckhdC7A4t7T+VgzY++lmO
it/l+S9LD/gEcuUv6VF7Dp/0urDnqfS1ScGrWtbHok178pxL/H+TufqP3LKWzy10
wruuvP4eFo8scjSJCEIyX2QLLBB444pDSrzdMpHqPazbL7pECcnspjXUDb2hOwmi
KOly4+my7kzgiw==
-----END CERTIFICATE-----
Generated at Thu May 21 17:43:09 2026 by rpki-client