Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: xb9E4xcc0JlA8ANEwKv1bs3E1YvZmoYGg6t38UTiHKY=
Subject key identifier: C6:8A:1A:F2:D0:E5:D5:00:8B:21:63:69:26:31:22:B1:F7:75:A4:75
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 019D97E1686D1ACD204EC403F8DC9FA08C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 1855
Signing time: Thu 16 Apr 2026 20:00:25 +0000
Manifest this update: Thu 16 Apr 2026 20:00:25 +0000
Manifest next update: Fri 17 Apr 2026 20:00:25 +0000
Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: hdFV2rrZKf6rSPG9/9vCvV8bqoJbfmdWmG8QyV7+IIM=)
2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:68:6d:1a:cd:20:4e:c4:03:f8:dc:9f:a0:8c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Apr 16 20:00:25 2026 GMT
Not After : Apr 17 20:00:25 2026 GMT
Subject: CN=c68a1af2d0e5d5008b216369263122b1f775a475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:98:4f:1e:ea:c7:cc:db:51:87:88:f6:28:
89:a6:3b:3c:7a:ce:76:af:ca:cd:92:5a:52:5f:9a:
2b:8d:2c:ef:d3:63:ff:a5:ac:72:e9:9c:cf:7f:69:
db:ae:a2:35:46:61:67:81:56:e8:e6:0f:b4:27:25:
c3:8e:b3:da:69:47:dd:3e:9d:d5:f6:96:9e:79:30:
d9:66:e4:07:f4:7d:52:c0:a2:93:66:aa:56:13:d0:
47:ea:14:ef:42:b5:ce:e0:73:dd:21:0e:ed:a7:88:
7d:cc:67:f0:9d:35:b5:10:0b:83:02:80:ae:d0:a3:
39:08:da:0c:3a:3e:30:52:d9:3d:f2:36:8b:80:2e:
95:37:e0:82:0a:7b:c6:0a:75:36:af:09:f2:a2:f3:
5c:96:e1:80:e2:bd:2b:6a:64:34:10:09:92:06:17:
7b:f4:33:98:ea:5a:49:4d:4f:72:e9:0f:68:d1:b8:
20:82:47:4d:7d:ad:01:03:58:e9:3a:94:f7:01:3d:
4e:59:c6:c7:11:5f:83:7b:b4:4f:1e:51:1a:d1:12:
be:4c:95:b7:97:65:f7:25:dc:b0:a9:ce:ff:eb:e4:
dc:35:5b:25:5d:cc:0f:ea:7d:4c:61:c9:ad:a1:66:
38:19:35:46:df:d9:cb:40:f1:4c:67:9d:c6:81:df:
d7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8A:1A:F2:D0:E5:D5:00:8B:21:63:69:26:31:22:B1:F7:75:A4:75
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c5:f9:cc:e5:78:e0:5f:fd:3a:3b:64:56:ad:2e:36:49:d5:
ce:f5:1d:73:9f:6c:c3:96:97:0b:03:71:1e:25:11:8e:cb:de:
d2:60:3a:c3:3a:57:1c:12:56:1a:ed:19:05:d2:be:69:f3:ed:
62:b7:d1:02:11:48:b3:6e:24:c9:75:60:4e:86:b9:2d:a0:e7:
7e:2c:1a:30:bd:8a:5d:7d:fd:32:a8:de:e3:82:a6:57:e6:08:
6d:c6:c7:a9:e4:6b:4f:9a:af:e6:2a:19:a7:8b:33:f1:7d:a5:
4d:77:09:ea:b8:1f:22:30:b7:c1:63:92:2f:d9:19:18:85:b7:
d6:e5:17:cc:80:9c:1e:92:06:59:d5:0b:45:93:70:2c:ff:83:
77:d3:a1:a9:29:40:97:dd:68:35:d7:d9:eb:1d:f7:a6:e1:8b:
03:92:2c:79:b0:cf:80:e3:c4:8a:c5:5e:19:c1:6c:6d:81:81:
23:f1:8f:53:34:29:e2:9e:7f:9b:90:9b:2a:92:88:b2:4b:f8:
3a:fd:15:6b:47:a5:9e:97:28:aa:38:93:2b:dd:0b:8c:af:76:
bc:04:b1:0f:06:f3:e3:3a:e3:4f:32:ab:ae:aa:5e:10:57:b9:
5d:f4:0b:91:2f:78:d8:08:40:62:14:d1:b3:c7:f3:5f:4c:a0:
2a:08:b3:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4WhtGs0gTsQD+NyfoIyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDc3Y2EzYjQ0OWJiYzQxMjQ3ZThjOTIxZTRjOGRhYmZj
MWFmYWUwHhcNMjYwNDE2MjAwMDI1WhcNMjYwNDE3MjAwMDI1WjAzMTEwLwYDVQQD
EyhjNjhhMWFmMmQwZTVkNTAwOGIyMTYzNjkyNjMxMjJiMWY3NzVhNDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaaYTx7qx8zbUYeI9iiJpjs8es52
r8rNklpSX5orjSzv02P/paxy6ZzPf2nbrqI1RmFngVbo5g+0JyXDjrPaaUfdPp3V
9paeeTDZZuQH9H1SwKKTZqpWE9BH6hTvQrXO4HPdIQ7tp4h9zGfwnTW1EAuDAoCu
0KM5CNoMOj4wUtk98jaLgC6VN+CCCnvGCnU2rwnyovNcluGA4r0ramQ0EAmSBhd7
9DOY6lpJTU9y6Q9o0bgggkdNfa0BA1jpOpT3AT1OWcbHEV+De7RPHlEa0RK+TJW3
l2X3Jdywqc7/6+TcNVslXcwP6n1MYcmtoWY4GTVG39nLQPFMZ53Ggd/XVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaKGvLQ5dUAiyFjaSYxIrH3daR1MB8GA1UdIwQY
MBaAFO9HfKO0SbvEEkfoySHkyNq/wa+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUt
NjAzYWExZjIwOWQ4LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUtNjAzYWExZjIwOWQ4
LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8X5zOV4
4F/9OjtkVq0uNknVzvUdc59sw5aXCwNxHiURjsve0mA6wzpXHBJWGu0ZBdK+afPt
YrfRAhFIs24kyXVgToa5LaDnfiwaML2KXX39Mqje44KmV+YIbcbHqeRrT5qv5ioZ
p4sz8X2lTXcJ6rgfIjC3wWOSL9kZGIW31uUXzICcHpIGWdULRZNwLP+Dd9OhqSlA
l91oNdfZ6x33puGLA5IsebDPgOPEisVeGcFsbYGBI/GPUzQp4p5/m5CbKpKIskv4
Ov0Va0elnpcoqjiTK90LjK92vASxDwbz4zrjTzKrrqpeEFe5XfQLkS942AhAYhTR
s8fzX0ygKgizvA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:49 2026 by rpki-client