
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
File: 70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json)
Hash identifier: 8ZtA9LFIbU86fF0e/ntLuDp2gt+adIFXate8da3Kdf8=
Subject key identifier: 30:CD:91:68:DB:C0:86:F4:16:E2:74:B4:97:94:F1:F1:F2:3A:FE:A2
Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Certificate serial: 01A0C2C46B29473315EFB0884CB600EDCCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 07:00:47 +0000
Manifest this update: Mon 21 Sep 2026 07:00:47 +0000
Manifest next update: Tue 22 Sep 2026 07:00:47 +0000
Files and hashes: 1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: cAFoPzAVoSP5qKjjutrHx5flMlz4FXXjXAMHuFuFYV0=)
2: iihdxArhWBfRd2TbdfbS7PBd2-A.roa (hash: YhBcDUdnzWiPDeX7N0lIwAMHxmHjRf7w0DKaQDLlNXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:6b:29:47:33:15:ef:b0:88:4c:b6:00:ed:cc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Validity
Not Before: Sep 21 07:00:47 2026 GMT
Not After : Sep 22 07:00:47 2026 GMT
Subject: CN=30cd9168dbc086f416e274b49794f1f1f23afea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:18:60:25:01:ea:b0:6b:3f:c8:b0:aa:c2:
0e:04:09:22:37:47:4c:97:9f:a1:ef:ba:23:0d:12:
70:37:a4:19:78:f7:f8:e3:57:aa:b1:81:3c:52:be:
5a:09:d2:12:b9:80:06:93:d0:75:46:c4:80:68:f6:
3a:48:73:6f:82:8e:d8:4e:aa:8f:bb:1d:c9:e3:96:
07:cf:4b:89:7d:fe:1a:2b:60:be:d9:0a:8c:38:1c:
04:54:83:e0:21:85:3c:39:6c:c6:80:41:7c:96:a5:
c0:6f:55:64:ad:47:db:f1:dd:0c:55:83:e9:1b:71:
e4:04:87:2f:92:91:11:f0:41:7f:75:f5:68:e5:5e:
df:fd:b4:18:b5:d7:80:7e:28:f2:b9:4a:7c:de:e2:
c9:54:3f:5a:61:c1:a6:25:0c:93:59:0e:be:3f:24:
5c:d2:9b:cc:8d:64:3d:8f:e0:0a:16:81:4b:0b:1f:
b5:ea:ce:dc:61:ae:46:55:57:1b:d5:a2:32:c7:7c:
a9:b8:39:2e:ff:5d:c1:ba:be:5c:d5:e1:96:ed:32:
f2:a9:d7:b5:fa:09:52:6c:06:90:dc:1d:af:00:09:
86:72:3b:36:06:3c:7e:f5:34:23:57:97:b0:a0:51:
51:39:96:80:c6:9c:27:45:75:61:37:e1:e2:74:77:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CD:91:68:DB:C0:86:F4:16:E2:74:B4:97:94:F1:F1:F2:3A:FE:A2
X509v3 Authority Key Identifier:
keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a7:4b:df:7a:df:7a:41:d2:9e:2e:e1:d3:78:b5:7a:4a:9c:
d2:e7:30:5d:25:ee:21:5f:e9:e7:d4:8a:4e:f8:34:b7:5d:f3:
6c:29:35:d6:0d:f1:a8:42:66:68:8d:26:1e:b6:b7:9a:8f:25:
36:6b:74:52:9e:81:29:38:57:1b:c6:24:03:a5:e5:24:f9:7b:
18:0c:5f:2c:99:44:fd:4a:bb:f4:6b:f7:12:b7:91:95:b1:c7:
41:78:01:e1:10:54:b4:86:a3:d8:79:d1:a8:45:76:17:4e:bf:
68:b9:3f:9c:c7:ad:53:10:b4:b5:bb:83:f5:e8:27:87:aa:c3:
8e:ad:85:57:30:88:c4:39:f2:8e:9f:b6:da:05:68:88:ea:82:
e8:ae:13:e0:28:4e:15:9d:a2:09:b7:43:bb:61:65:56:22:7b:
aa:a7:47:81:42:ad:c0:1f:53:f3:de:f3:a9:3f:f6:dd:c2:a5:
e6:a5:44:2d:2c:64:7b:31:f9:80:3c:ea:43:ac:f5:99:51:66:
6b:f2:94:29:69:2d:b4:80:a5:dd:b9:79:8f:47:90:d2:df:b2:
0b:ff:8b:94:74:25:7a:f4:3f:67:8b:af:5a:43:c9:c3:f2:dc:
a0:58:e2:80:c7:6d:d5:dc:fd:30:99:b9:67:08:1d:ed:de:d7:
6e:e9:b7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:36:16 2026 by rpki-client