Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier: xDiM1RCL+VyVl7fPV7oBycmht/DcuWmYZm2T4unzxqs=
Subject key identifier: 45:66:7C:65:93:3E:BA:96:94:32:12:D0:79:B3:B0:20:FF:AD:56:82
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 019FA9AC74D1D391CD45ED981089AED3AD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 17:01:19 +0000
Manifest this update: Tue 28 Jul 2026 17:01:19 +0000
Manifest next update: Wed 29 Jul 2026 17:01:19 +0000
Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: 5RqL7h5uOaXiPLwfHZjy5OK+DRB2228jp92PK36/W60=)
2: I9nUczY20Zb-qB4txSR8cQbIwOU.roa (hash: tVztN2aCOWmTRMBNdBunPfUafnJabZOVueK23yoz3NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:74:d1:d3:91:cd:45:ed:98:10:89:ae:d3:ad:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: Jul 28 17:01:19 2026 GMT
Not After : Jul 29 17:01:19 2026 GMT
Subject: CN=45667c65933eba96943212d079b3b020ffad5682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:f4:75:53:1e:35:41:fb:21:c9:1f:18:c6:
82:91:99:b2:58:2e:1a:32:98:35:9d:55:31:f8:23:
19:e8:67:3e:85:b1:89:93:13:34:d7:77:fb:d5:b5:
58:04:fd:76:31:5e:5c:cd:21:d9:1c:7d:a2:19:fe:
04:db:47:49:ae:15:b5:5e:4a:1d:a9:af:f5:ff:dc:
e1:a0:70:09:b7:52:a7:21:c7:66:02:c2:04:52:59:
ba:0c:39:f5:41:99:57:b7:de:d6:fb:85:9f:76:2e:
2b:17:ce:ed:ee:51:f9:b8:ad:9d:cb:04:41:df:c0:
d1:6c:59:54:d1:69:c2:f6:71:05:51:db:1c:64:e0:
03:bc:67:de:d4:35:6b:f4:aa:e8:9e:6b:d4:67:05:
ed:06:09:4a:ca:f9:3a:60:20:54:8a:e8:6a:51:1e:
98:f8:c0:36:66:4d:8a:7f:e1:6c:d4:f1:59:b2:8c:
97:d1:9b:4f:23:0f:72:4c:d6:86:a5:3f:13:54:ec:
57:a6:ab:85:17:ac:4e:09:8c:ca:f3:d7:5e:d1:77:
57:33:81:40:3d:00:73:3a:9d:c7:7b:e8:a4:f8:9f:
db:48:4e:fe:83:10:02:be:f9:30:a7:c0:52:04:03:
a5:86:77:ad:66:a4:d6:7f:d8:1d:ca:48:a9:36:02:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:66:7C:65:93:3E:BA:96:94:32:12:D0:79:B3:B0:20:FF:AD:56:82
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:27:a1:c8:30:5c:2f:4c:d8:53:40:80:37:7f:8a:29:16:0d:
41:38:7c:b8:f3:dd:66:b9:ad:a1:c0:29:9a:b3:bd:db:f5:4b:
e5:7e:d1:ae:b9:8a:6e:51:23:5b:d6:56:b0:01:c4:63:29:55:
b2:41:88:1f:0b:28:77:82:8a:39:5f:9c:da:3d:f2:80:27:b2:
06:ad:13:36:55:d2:c3:ce:d1:30:2a:9b:5c:72:e7:71:0c:d5:
b3:85:0f:8f:04:93:35:ac:76:46:a9:76:bb:ea:47:94:f8:b8:
7c:01:85:49:77:ce:2c:be:42:c4:56:97:40:8f:e4:b6:1d:75:
23:1e:bc:51:5c:5d:6d:10:ae:e2:7e:2f:04:79:17:8b:73:bc:
f5:4f:5b:91:95:37:2c:97:6c:85:e9:5f:d1:c4:f2:1b:ab:eb:
b6:82:69:d5:90:ae:fc:01:37:b8:fe:2a:ad:df:a6:e4:aa:3e:
ca:ad:60:e0:4b:ac:e3:e7:f5:df:42:ba:ff:84:09:ba:fe:51:
36:93:8e:cf:f0:a9:a4:d5:eb:63:56:8a:ca:db:d8:eb:64:b6:
ff:1a:75:c0:d4:29:07:a4:e1:af:59:e0:cd:cf:6c:d6:d4:b4:
03:f8:8a:64:7b:93:82:ac:3b:c6:b5:5b:89:e1:d4:12:38:bb:
71:c5:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:16:16 2026 by rpki-client