Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: LlPUrbKLwuGAvXHTfJNGpCg8sqKg3JiE0FkLxx0mPy0=
Subject key identifier: 05:F9:EA:DF:88:FB:E1:52:E7:18:2F:CB:95:D3:73:34:3D:BA:B8:B7
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 01A0C6D81BD0F20714D40A34BF73A0E93595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 19FB
Signing time: Tue 22 Sep 2026 02:00:46 +0000
Manifest this update: Tue 22 Sep 2026 02:00:46 +0000
Manifest next update: Wed 23 Sep 2026 02:00:46 +0000
Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: ICpgPH0YBNZqFl+IbBXxSlX9BEff8Nn9LDNoYvKkHSM=)
2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:1b:d0:f2:07:14:d4:0a:34:bf:73:a0:e9:35:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Sep 22 02:00:46 2026 GMT
Not After : Sep 23 02:00:46 2026 GMT
Subject: CN=05f9eadf88fbe152e7182fcb95d373343dbab8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:d2:e1:e3:03:84:67:e9:83:6e:06:79:d5:
17:d8:d5:e3:46:37:c6:4f:20:2b:dd:55:a9:15:5f:
d5:f5:55:5f:5a:ec:90:e1:5b:6c:6f:25:b7:96:8c:
89:f8:d5:db:4c:d3:66:c8:30:8f:3f:f4:21:98:49:
d9:46:16:74:41:7a:1b:84:09:05:51:9b:ea:59:aa:
b3:b6:24:f5:0f:8f:32:58:53:33:c7:61:cf:d7:df:
bd:05:25:1d:3e:2d:20:ed:ca:52:d5:99:10:f3:d4:
6b:4e:6c:5d:28:3d:9e:56:6e:63:50:45:a4:42:c0:
d4:1c:f3:0b:f5:3a:3c:1a:f0:f9:84:55:39:bd:07:
67:d2:13:1e:6a:63:ab:e5:2c:b5:93:1c:fe:d3:2c:
66:f5:17:65:60:bd:b1:cb:a3:13:e8:5e:8b:d3:e0:
0c:17:91:35:60:34:e5:85:f3:53:d0:b2:5e:ed:1d:
65:3d:5d:24:8d:d9:4f:ff:f5:d5:91:77:b4:fa:a8:
b6:48:73:97:bd:e3:d6:30:24:3d:85:0c:b1:ee:d3:
78:78:a2:46:60:17:21:52:54:46:1c:f1:44:11:ab:
40:df:ac:2a:9f:cc:27:e3:14:b0:94:2c:9c:22:1e:
8d:9c:44:93:4d:3d:ab:14:30:24:09:e6:31:64:ab:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F9:EA:DF:88:FB:E1:52:E7:18:2F:CB:95:D3:73:34:3D:BA:B8:B7
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:66:97:42:0d:71:59:68:5e:e6:ab:40:f4:29:de:cd:30:52:
45:bb:15:10:90:81:90:4b:79:68:2c:7c:a7:7d:ca:d2:c5:20:
aa:5b:20:99:83:11:d8:70:c6:98:63:15:18:64:3f:f1:d8:70:
24:a1:0f:9a:e3:9b:3d:c5:a9:f6:c1:06:46:ce:6e:48:c0:c6:
36:f3:d0:32:34:d5:34:e1:81:dc:62:da:64:75:87:2d:71:16:
32:8d:29:23:ee:24:0c:1f:2d:c7:bd:9d:b8:38:c1:14:68:54:
38:1e:31:b6:dc:d3:ff:a1:42:37:17:c9:96:84:21:07:d4:00:
d2:2f:43:89:8d:45:b3:dc:a1:e4:00:cf:99:d2:f9:51:55:00:
d5:93:e4:15:1b:0f:81:1e:47:e8:24:3e:16:a7:12:93:4a:a1:
1e:22:9d:d4:e4:8b:5f:8a:ca:3d:dc:f4:54:79:ac:a2:42:3c:
ca:ae:d9:92:a2:57:cf:cd:49:d5:2b:70:15:84:0d:b1:10:25:
50:83:10:a4:e1:68:62:7d:e4:8f:de:ce:e7:a9:e4:e3:18:3a:
e1:2c:ad:6a:73:a2:5a:90:00:f1:f9:df:53:90:bb:53:31:af:
25:78:9d:06:3b:ab:6f:65:9b:d5:1b:1d:0d:4d:41:0a:b9:ae:
0b:ec:97:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:49:06 2026 by rpki-client