Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier: 19IrtOfLH69P9yEM0KKpUqfE07e9PIlfSlQagQJpwt8=
Subject key identifier: 1C:75:4B:B8:43:FC:19:86:65:06:D1:88:3E:92:55:7C:A0:10:A7:BF
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 019D37C10A6A4C72988F2B47181044F722F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number: 102A
Signing time: Sun 29 Mar 2026 04:01:31 +0000
Manifest this update: Sun 29 Mar 2026 04:01:31 +0000
Manifest next update: Mon 30 Mar 2026 04:01:31 +0000
Files and hashes: 1: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: xYDaudN57vQmvq8EE7IFUtlDSPQT7yvjsWzQInT4z6U=)
2: ipDvc3_uDEjFqfddza4tSfpFuZM.roa (hash: xLYuaCPRF/gJJCfwsd4caFL/Eo8m6t0vFmm3gowiEGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0a:6a:4c:72:98:8f:2b:47:18:10:44:f7:22:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Mar 29 04:01:31 2026 GMT
Not After : Mar 30 04:01:31 2026 GMT
Subject: CN=1c754bb843fc19866506d1883e92557ca010a7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5d:0f:f7:b2:44:f6:74:5e:b4:6b:25:db:74:
c2:b8:89:77:c7:5e:7d:b1:8c:28:f4:93:f6:5e:4f:
d9:fa:c1:eb:b8:54:11:21:f1:d6:d1:2a:83:c9:c7:
4b:23:7d:8e:96:f1:6c:61:23:9c:5d:45:3b:9c:14:
9a:24:eb:1c:f0:86:2c:2a:d3:94:01:9f:2f:ae:e9:
e5:3b:bc:f6:3c:7b:e2:d9:56:98:4d:26:53:0e:dc:
d4:8e:d3:cc:3b:32:b1:ea:75:f2:9c:e9:8f:ad:74:
6b:f4:02:ff:c4:3c:0c:b3:67:7d:67:c9:42:b9:ce:
7f:8d:79:57:ee:70:4f:50:12:46:72:a8:63:de:ab:
b2:61:d8:f7:cb:7e:1a:0d:02:b4:93:16:21:16:98:
4e:dd:5f:35:09:ab:a9:70:e8:c9:eb:4e:b5:75:89:
66:49:e9:85:f2:fb:57:64:86:14:52:9b:8b:fe:b5:
b9:8e:24:98:cb:c9:f5:a0:a9:75:d7:c0:b3:34:cf:
03:d1:d3:85:dd:37:19:4d:36:33:65:8b:d2:0d:11:
3f:ff:4f:7b:3f:b2:f6:bb:d6:3a:15:9a:ff:9b:34:
e0:9c:f5:81:80:63:35:53:d1:a3:c0:f2:40:a4:60:
0a:fd:9d:f6:09:df:ab:73:07:4d:d8:3f:14:72:3d:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:75:4B:B8:43:FC:19:86:65:06:D1:88:3E:92:55:7C:A0:10:A7:BF
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:42:31:54:1d:dd:4c:20:fa:a6:2f:cb:9a:e2:22:b6:08:6c:
ec:bf:93:6b:5c:9d:b3:61:cf:e0:21:b2:e2:8b:6a:cb:39:fe:
2d:ad:38:c3:f2:ec:fd:2c:54:3f:7c:38:55:c8:19:95:c3:21:
eb:bb:be:86:e6:0c:99:1c:cf:64:6f:d3:dc:38:06:e1:96:66:
bd:68:b2:a2:f2:47:36:50:96:2e:7e:45:0a:7c:b8:2d:44:81:
13:08:32:f5:cc:00:f0:d8:fb:2b:0f:04:e7:90:18:b3:90:91:
16:c3:4e:6c:34:08:aa:33:4a:92:8a:3a:89:17:d7:24:1b:b3:
65:8d:eb:b3:19:6a:18:f7:d5:7a:84:c4:df:32:61:80:f8:30:
b6:a0:25:45:c2:5a:03:0a:9e:8a:6c:7e:04:30:68:f7:94:41:
7a:d6:88:c5:68:00:26:6e:4a:b8:5d:de:28:1e:48:40:03:8c:
12:1d:3e:15:12:94:39:4f:64:c1:df:b4:8c:49:c7:a7:4c:3c:
b0:f3:50:8e:d7:e1:7a:ad:d7:1a:57:b8:e2:e3:f3:2f:43:71:
7a:33:65:63:0a:92:00:77:29:68:13:5c:8a:ce:ba:87:2e:21:
8c:c2:be:d8:77:35:a9:ed:fd:35:9e:76:a3:f8:ee:62:f1:db:
82:a9:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:27 2026 by rpki-client