Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: 1TBR+eJRb1JR49Glt7Jir3Y1G//99gW+DTKiUJMDM00=
Subject key identifier: AD:8C:00:D8:BC:74:76:60:E4:E6:B8:DD:22:E4:5F:3F:0A:EA:C6:B8
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 019CA869E89FB7AAABC8E269CB6458F2C875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 08:00:38 +0000
Manifest this update: Sun 01 Mar 2026 08:00:38 +0000
Manifest next update: Mon 02 Mar 2026 08:00:38 +0000
Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: cvc/zNxeDLWvKHiRyadWUyuZ1hhQd/PMlN6MRDNiqw4=)
2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:69:e8:9f:b7:aa:ab:c8:e2:69:cb:64:58:f2:c8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Mar 1 08:00:38 2026 GMT
Not After : Mar 2 08:00:38 2026 GMT
Subject: CN=ad8c00d8bc747660e4e6b8dd22e45f3f0aeac6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:2e:89:a6:cd:f4:7f:f7:08:bc:19:d9:b9:
18:e6:09:90:5e:9f:44:0b:a2:46:c7:ba:8e:b2:5b:
45:47:2d:9a:4b:c9:b3:34:0a:f1:c9:a8:eb:7a:4f:
2d:0c:4f:40:ab:7d:df:6f:c5:ff:45:72:e3:98:a5:
5b:9f:af:e8:d8:aa:78:a8:ed:1a:8e:69:3a:e9:c6:
4a:4d:d2:ec:7d:65:37:30:50:96:76:00:cc:bd:35:
46:2c:7d:67:51:35:39:9a:83:71:81:5f:2c:b4:ae:
49:57:60:d9:96:35:ab:d1:7e:8c:ee:a3:f4:2f:b2:
3e:82:0a:f7:24:01:e6:b9:98:2e:1d:c2:61:6f:5c:
18:9c:4c:9c:f2:b0:b9:82:b4:ca:05:f7:b3:a5:46:
f4:71:03:a0:dd:8f:04:9d:81:aa:96:4f:6c:e4:4c:
b3:0e:8a:f8:18:42:6a:bb:17:4b:d9:8a:31:dc:a9:
7b:48:66:82:d8:fb:64:f4:3b:e0:d8:61:49:52:76:
8a:74:a2:a9:11:e0:c2:ed:73:bb:3d:b0:c5:16:8d:
48:8c:96:a5:73:ef:58:60:1d:95:fd:ff:56:e9:c1:
88:0b:69:3d:94:60:d8:c3:10:3a:92:79:b0:e9:22:
d4:ca:61:81:6b:65:84:96:cd:e7:a3:5d:dd:85:30:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8C:00:D8:BC:74:76:60:E4:E6:B8:DD:22:E4:5F:3F:0A:EA:C6:B8
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f3:68:a6:34:3e:bd:ab:4e:f4:c0:af:2d:5e:e2:4e:72:82:
a0:32:df:26:a6:75:e6:ec:14:dc:50:4c:09:e3:95:3a:c0:b2:
60:fd:a6:89:3f:19:df:04:0e:12:41:16:c0:38:32:f4:4d:11:
ca:6d:05:bc:88:37:0c:27:50:ce:14:be:fd:3a:5b:76:c5:2e:
99:e3:b5:a5:bd:65:b8:bb:12:36:f6:1c:14:f2:87:b8:c7:d0:
b5:18:a8:f0:41:5e:6c:f5:26:eb:bf:e1:d2:29:25:8b:cd:0c:
a0:d8:c2:7d:8d:ec:d5:e8:d6:75:54:2a:2a:82:29:03:64:9c:
bb:2a:2b:43:59:86:c1:fd:0d:02:b1:cf:b4:05:1b:4e:08:3b:
c7:55:56:1d:8a:4b:80:01:b0:4a:20:c7:97:30:6d:95:0c:16:
3d:52:fa:e8:24:c6:49:41:a1:a5:f4:2a:01:07:cc:22:a0:21:
7a:8a:dc:50:b1:13:df:4b:83:18:43:5a:81:95:be:46:23:c8:
2f:bd:41:0a:96:66:78:23:16:f2:60:d0:2d:c3:d4:93:ee:49:
df:3f:2a:b0:92:7f:50:66:25:55:aa:26:89:44:9e:95:95:54:
f9:16:1e:8b:0b:1f:cf:61:b3:c8:0e:f7:ec:1c:de:51:24:c0:
ac:d2:03:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:20:50 2026 by rpki-client