Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: ED8LjiRH9d3Fv7Cck9laG782S7myUl7LwUBHQTgothc=
Subject key identifier: 74:5A:FF:E4:D7:99:1F:F9:CE:69:D4:CB:F4:6E:33:79:7E:CC:79:00
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 019CAA585120FB302EB4C2A6AD786E28A0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 17DA
Signing time: Sun 01 Mar 2026 17:00:40 +0000
Manifest this update: Sun 01 Mar 2026 17:00:40 +0000
Manifest next update: Mon 02 Mar 2026 17:00:40 +0000
Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: KrvhKKLmI+y0sqjk9/tOGNlmPOxNw3OK4FV/9JW2arw=)
2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:51:20:fb:30:2e:b4:c2:a6:ad:78:6e:28:a0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Mar 1 17:00:40 2026 GMT
Not After : Mar 2 17:00:40 2026 GMT
Subject: CN=745affe4d7991ff9ce69d4cbf46e33797ecc7900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:59:a5:67:a8:c9:04:ce:5e:06:32:b0:96:
ed:61:5c:0c:04:e3:bc:14:ef:1b:64:86:ea:0c:f9:
75:59:97:06:e0:b5:fb:47:95:22:a8:b7:9f:99:78:
03:44:6a:3d:dd:2c:ed:22:02:0a:b0:9c:3d:95:a8:
3c:cd:23:c6:dc:90:ad:f0:ce:92:b8:34:66:96:00:
25:2d:49:e4:d6:b9:32:eb:06:7c:d4:e6:03:94:97:
fa:0c:2f:92:d6:a5:26:55:7b:61:9b:08:ad:fb:2c:
f3:f4:a0:36:ca:93:c9:87:23:76:8e:7f:40:0e:9f:
a4:17:e9:a6:87:47:70:df:f2:cc:d1:c7:71:90:75:
a2:12:ce:10:2c:dd:b6:1d:f8:8c:cd:93:19:f8:c1:
09:3d:de:bd:bd:23:ea:db:35:e9:74:35:08:7a:06:
4b:50:e6:33:33:8e:70:42:d1:e6:06:1d:90:a3:3e:
f4:63:39:54:76:02:eb:fc:d0:2e:60:e0:3e:01:77:
be:57:13:fa:57:2d:c5:4f:29:45:fe:bb:d3:d7:c7:
65:01:02:47:77:c8:26:7c:7b:c5:1a:2b:f9:95:8d:
77:49:13:3e:aa:35:7e:65:83:9b:a0:ed:fa:ff:82:
fc:96:82:dd:4b:d7:78:0d:f1:57:a8:ef:62:c8:e8:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5A:FF:E4:D7:99:1F:F9:CE:69:D4:CB:F4:6E:33:79:7E:CC:79:00
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6a:03:a9:57:21:88:b7:3e:90:3f:5c:ae:50:b4:d2:54:7d:
65:8d:d1:54:ca:66:45:6f:78:5f:1e:a8:8e:bd:d6:00:20:a0:
24:06:7a:15:45:4d:59:15:46:2b:16:75:76:d5:b8:62:e5:9a:
81:57:30:43:5f:08:fc:d2:6b:05:6a:15:94:2a:83:75:6b:c0:
3f:eb:75:3e:aa:86:70:bf:b3:f2:39:43:64:39:65:67:9b:fb:
45:a7:b5:dc:93:3a:8b:af:99:98:2b:bc:eb:f6:aa:3c:7a:7c:
d5:08:19:4c:66:f2:b5:e8:85:c8:79:61:bd:39:45:f7:61:c4:
69:a8:32:6e:99:51:e5:eb:ef:95:e8:6d:f6:22:21:5d:cb:92:
e0:6b:f9:8e:5d:c3:7f:d2:13:89:5e:ef:bb:7d:b3:0c:a3:cc:
39:3b:a1:b3:bc:40:cf:a6:b8:c8:4a:81:36:12:bf:9e:df:7e:
d7:e9:cc:84:3c:9c:80:0e:7f:97:18:33:f3:9e:0c:c8:4c:14:
0e:cb:f1:9a:ea:63:87:31:63:8c:84:a5:e3:c0:f6:c5:46:26:
69:a2:54:7f:78:90:4c:5d:df:6c:52:b3:bb:14:0e:be:3e:e2:
51:67:17:a0:22:f3:3c:fa:59:52:08:9b:bf:b7:e9:17:33:88:
bf:ae:33:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:13 2026 by rpki-client