Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier: v9jTmAKiwPz3jKv98GdN32hK6d22H1OS3Gdayzi2Gok=
Subject key identifier: D7:12:62:6D:EB:75:33:80:72:C0:97:77:B3:CC:5B:70:16:52:98:F8
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 01A0C77CCDF731185CD531064C00D551A33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number: 1A65
Signing time: Tue 22 Sep 2026 05:00:40 +0000
Manifest this update: Tue 22 Sep 2026 05:00:40 +0000
Manifest next update: Wed 23 Sep 2026 05:00:40 +0000
Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: jyRccQ2L4ZYFxThKVC2LNq+zVz9jSGcKl6VAGKE0jpU=)
2: I9nUczY20Zb-qB4txSR8cQbIwOU.roa (hash: tVztN2aCOWmTRMBNdBunPfUafnJabZOVueK23yoz3NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:cd:f7:31:18:5c:d5:31:06:4c:00:d5:51:a3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: Sep 22 05:00:40 2026 GMT
Not After : Sep 23 05:00:40 2026 GMT
Subject: CN=d712626deb75338072c09777b3cc5b70165298f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:8e:0d:ed:03:11:c7:35:a8:30:db:a6:fe:
1d:07:27:0c:7a:9c:fa:db:94:2f:c5:d7:f2:68:a4:
96:f4:81:f2:b7:34:8a:76:02:14:1f:20:7e:a2:1b:
39:d4:0b:b1:33:0d:c6:95:1f:a4:fc:94:a9:ea:c7:
5a:b0:4a:9a:78:57:ba:64:73:84:c7:4e:23:29:fb:
f3:75:9c:14:82:9b:26:81:7a:11:47:c4:03:90:4e:
e7:20:41:3d:79:1e:3f:54:eb:bf:84:0a:54:33:fe:
3e:ba:15:ea:f1:ad:fd:58:ae:8b:d0:87:94:3f:d9:
21:1a:02:69:ca:a4:f2:5f:32:c5:ef:44:74:91:97:
b6:ec:ef:d1:3e:f6:e8:09:46:50:78:34:f7:b6:fe:
a9:4e:ba:9b:ee:5e:15:7c:55:75:81:0f:6e:6b:4c:
ba:38:d2:3d:56:71:72:70:18:bd:9b:55:df:2a:d8:
1f:c8:cb:74:1f:da:83:29:ae:d3:5c:f0:97:b3:3c:
61:c1:a3:5b:c7:5c:62:14:ce:b5:77:f6:7f:16:8e:
63:82:91:62:d4:bd:a6:a1:93:1d:a7:26:bc:93:fe:
08:28:b8:74:ea:c6:7a:21:ec:20:d2:78:29:54:eb:
43:fd:e7:51:46:85:3f:f9:68:29:d5:78:5a:9f:b8:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:12:62:6D:EB:75:33:80:72:C0:97:77:B3:CC:5B:70:16:52:98:F8
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:84:65:1a:46:8c:03:ce:0f:a1:e0:da:00:98:f4:c7:e4:a8:
97:25:09:15:cf:25:ad:24:d9:46:d4:29:a0:b3:d3:d1:08:f1:
78:84:ad:24:9d:1b:26:39:fa:a8:86:ab:93:44:ce:5a:1f:3c:
3d:ea:ef:5b:cf:00:34:a3:2f:93:e2:79:a4:01:78:02:62:19:
1a:9c:d8:97:57:67:22:9d:18:83:c5:37:5e:63:fd:98:06:37:
db:f7:31:eb:50:0e:f8:5c:07:d3:0c:ca:99:b3:c6:07:42:d5:
58:af:92:35:af:5e:d3:e0:fc:24:d3:39:ac:79:22:20:05:f0:
4f:88:1a:87:3a:c8:3c:fd:23:0f:ef:66:68:2a:27:a8:67:d2:
d5:6a:2c:35:32:6a:c4:45:1f:5c:84:b8:0e:de:82:3f:cb:d5:
ee:19:b2:29:86:87:a7:92:2a:de:49:5c:a4:95:dc:6d:a6:e9:
ed:37:25:5c:b9:fb:4f:15:49:3f:f0:b6:45:8a:fb:78:95:9a:
25:a3:52:38:a8:34:07:9a:75:a0:82:a3:f5:fc:3f:b4:be:bc:
5c:81:a8:13:75:f7:76:0b:20:20:3b:46:2c:55:1d:0f:2c:8c:
7a:65:11:eb:4e:4c:48:21:86:bb:19:18:f6:fa:15:04:e7:b5:
e0:9e:2d:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHfM33MRhc1TEGTADVUaM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDc4MDIxZjcyYTIxYjc3MTQyYTQ0ZDgxNWRkZTllZjI2
ODRjYmMwHhcNMjYwOTIyMDUwMDQwWhcNMjYwOTIzMDUwMDQwWjAzMTEwLwYDVQQD
EyhkNzEyNjI2ZGViNzUzMzgwNzJjMDk3NzdiM2NjNWI3MDE2NTI5OGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApluODe0DEcc1qDDbpv4dBycMepz6
25QvxdfyaKSW9IHytzSKdgIUHyB+ohs51AuxMw3GlR+k/JSp6sdasEqaeFe6ZHOE
x04jKfvzdZwUgpsmgXoRR8QDkE7nIEE9eR4/VOu/hApUM/4+uhXq8a39WK6L0IeU
P9khGgJpyqTyXzLF70R0kZe27O/RPvboCUZQeDT3tv6pTrqb7l4VfFV1gQ9ua0y6
ONI9VnFycBi9m1XfKtgfyMt0H9qDKa7TXPCXszxhwaNbx1xiFM61d/Z/Fo5jgpFi
1L2moZMdpya8k/4IKLh06sZ6Iewg0ngpVOtD/edRRoU/+Wgp1Xhan7hzMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcSYm3rdTOAcsCXd7PMW3AWUpj4MB8GA1UdIwQY
MBaAFO9HgCH3KiG3cUKkTYFd3p7yaEy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEt
MzQ0MzQ2NGI5MjA5LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEtMzQ0MzQ2NGI5MjA5
LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4RlGkaM
A84PoeDaAJj0x+SolyUJFc8lrSTZRtQpoLPT0QjxeIStJJ0bJjn6qIark0TOWh88
PervW88ANKMvk+J5pAF4AmIZGpzYl1dnIp0Yg8U3XmP9mAY32/cx61AO+FwH0wzK
mbPGB0LVWK+SNa9e0+D8JNM5rHkiIAXwT4gahzrIPP0jD+9maConqGfS1WosNTJq
xEUfXIS4Dt6CP8vV7hmyKYaHp5Iq3klcpJXcbabp7TclXLn7TxVJP/C2RYr7eJWa
JaNSOKg0B5p1oIKj9fw/tL68XIGoE3X3dgsgIDtGLFUdDyyMemUR605MSCGGuxkY
9voVBOe14J4tfw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:56:12 2026 by rpki-client