Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: Iep+15+lBBb5v/u0YVhCSvRp2U19qFUYG+bjtJoWxs0=
Subject key identifier: D2:50:2C:E0:7D:9F:B3:32:7D:89:EE:B9:18:54:88:8C:26:8A:9A:2D
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 019FA906C55A5EBDF89BFDE3C1C05DA81898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 14:00:20 +0000
Manifest this update: Tue 28 Jul 2026 14:00:20 +0000
Manifest next update: Wed 29 Jul 2026 14:00:20 +0000
Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: LbtNzUte7r++ldmGpe8bHYmuPcUGNPIZmHZYAAMzA5w=)
2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:c5:5a:5e:bd:f8:9b:fd:e3:c1:c0:5d:a8:18:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Jul 28 14:00:20 2026 GMT
Not After : Jul 29 14:00:20 2026 GMT
Subject: CN=d2502ce07d9fb3327d89eeb91854888c268a9a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:58:f8:e3:4d:71:ce:4b:9b:b2:f0:a7:f2:13:
65:4c:53:6a:d2:35:4a:b0:4a:0d:76:48:c4:da:a5:
f1:8e:57:be:95:08:48:cf:43:b1:2c:50:40:81:e7:
86:fb:23:6a:7d:a1:e0:7e:6d:97:11:3b:b3:04:d9:
0f:95:64:cb:ad:c9:5e:ed:6b:ca:a6:01:87:61:b4:
03:fc:18:04:eb:1a:65:c9:ab:a2:a1:38:ea:c1:36:
1e:a3:28:28:a1:bf:2a:e3:c9:a2:ce:83:b2:52:3d:
1a:cf:fa:58:ee:55:5e:72:16:c9:b3:b2:f0:e8:cc:
3a:a9:52:80:d7:20:e9:a8:7a:7a:a2:26:d5:eb:77:
7a:a5:81:f0:ec:93:64:01:ac:88:36:4a:63:ad:2e:
66:21:4a:31:bc:2f:8c:78:85:50:55:e4:82:1b:17:
15:37:e2:d4:64:10:b4:be:a4:7d:4c:18:19:62:3e:
a0:43:30:43:6e:f8:c0:05:25:3b:80:b7:d0:97:3a:
45:dc:36:e1:2f:f8:fd:65:2b:98:1f:f6:f6:3a:ff:
df:e6:95:72:f9:a2:fc:0a:cb:9a:34:53:a5:9c:3c:
87:5a:b5:10:8d:00:6d:3c:89:ef:7a:ba:e5:3f:1d:
65:60:8e:6f:b1:74:3d:9c:11:1e:f7:85:0f:81:fc:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:50:2C:E0:7D:9F:B3:32:7D:89:EE:B9:18:54:88:8C:26:8A:9A:2D
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:80:c7:b5:51:36:9f:26:ae:3f:b0:e3:50:4b:dd:54:6b:7e:
a5:1d:52:59:84:82:29:2f:a6:46:92:1e:00:b2:d7:78:60:b4:
8d:04:36:c1:8c:62:76:01:38:c0:39:13:18:7d:63:79:eb:19:
ff:5f:7d:5f:e3:fd:91:5f:21:60:c9:16:18:cd:19:96:70:80:
9f:85:41:b0:64:f2:72:9d:25:1c:c5:ef:e5:b1:dd:7b:86:99:
5b:70:81:f9:a6:3c:3a:a3:46:6d:70:c9:f7:d1:94:de:3f:ac:
9e:17:5a:d1:e1:5d:46:ad:a0:41:be:02:e5:a1:03:22:eb:58:
c8:04:06:cc:12:e6:7e:dd:97:a7:05:cb:a9:15:87:89:46:c6:
ac:35:36:c4:b1:0d:7b:db:eb:09:0d:69:61:b0:2e:18:6f:a5:
37:55:40:35:42:1a:c7:ca:87:8e:a2:1d:57:ad:b4:93:f8:08:
7a:af:57:3c:0a:73:a1:e3:d7:86:96:85:f4:1e:da:da:e7:2d:
85:10:56:65:bf:cf:9a:18:81:f9:da:d5:dc:9e:75:3a:6d:dd:
09:d0:ca:b7:25:ee:72:8a:e5:71:4c:22:b9:b4:03:7c:53:b1:
a7:08:9e:1c:64:4a:23:79:8f:0d:dd:44:4a:f9:c4:cb:03:51:
1b:07:ce:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:02:23 2026 by rpki-client