Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: aopA9eQgfY2rvFLidl8zGDwyyd0cwmAltqhfaEwMAUY=
Subject key identifier: 80:95:DA:BE:5B:38:10:9D:C8:5C:2B:14:C7:1A:1E:CD:9D:1B:28:51
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 01A0C3A02E5C83DBCF6C24E873E4479395E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 0E8E
Signing time: Mon 21 Sep 2026 11:00:49 +0000
Manifest this update: Mon 21 Sep 2026 11:00:49 +0000
Manifest next update: Tue 22 Sep 2026 11:00:49 +0000
Files and hashes: 1: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: Dqs+j1PMkyTfVvGDuQWia3crK7UXKgDp10lCcN5UcMU=)
2: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (hash: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:2e:5c:83:db:cf:6c:24:e8:73:e4:47:93:95:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Sep 21 11:00:49 2026 GMT
Not After : Sep 22 11:00:49 2026 GMT
Subject: CN=8095dabe5b38109dc85c2b14c71a1ecd9d1b2851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:c5:3b:9d:02:8f:5e:e4:35:53:9c:a2:1d:
fc:43:02:1b:df:58:53:7a:ca:35:0c:80:61:36:5b:
4f:17:d8:f7:27:c2:f9:19:38:40:f0:e0:b4:4a:cf:
a3:46:79:a4:ad:2d:60:20:6f:b5:bb:0d:6a:49:ba:
b2:4b:96:19:31:28:59:b2:ab:d9:a0:94:85:59:9c:
cc:4e:cc:c5:23:9c:03:d8:31:ef:39:1f:f6:12:ca:
77:9c:d5:dd:47:ad:4b:1c:b1:1f:15:4a:24:32:b9:
49:fc:e6:59:ec:67:bc:aa:da:d3:63:6a:e4:67:85:
0a:5d:56:8d:fb:3e:07:da:7b:d9:78:ee:49:34:36:
1d:5b:3e:55:b0:eb:33:af:19:4a:a2:d4:84:b1:c8:
e3:df:c1:58:f3:17:1d:f1:fd:8a:45:2e:69:96:43:
cb:2a:ec:80:0b:ce:66:eb:2c:e4:04:9e:ba:cc:e4:
ea:0b:5e:fa:ea:58:da:c7:05:e8:c1:05:6b:33:57:
eb:35:c6:da:ea:c3:11:fd:8b:84:f4:f3:b9:d6:f9:
56:2f:51:18:11:35:44:f7:ce:93:65:2b:c7:e1:71:
b7:09:49:7a:7d:f8:9d:3d:3a:8f:f9:ba:a3:92:33:
b6:cd:55:9b:7a:8e:57:de:f8:5a:dc:9b:5c:ed:e0:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:95:DA:BE:5B:38:10:9D:C8:5C:2B:14:C7:1A:1E:CD:9D:1B:28:51
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:88:08:70:44:03:e0:01:a6:cd:6c:f3:b3:d0:8d:98:23:0e:
84:4b:f9:ce:ea:fa:e1:3f:34:2c:96:c0:30:18:15:3a:e2:a3:
0c:b9:95:e2:8e:f3:a3:22:2d:0b:2f:99:1e:67:7f:e4:06:30:
08:1b:81:4a:57:66:da:bf:73:61:b4:ee:8c:13:41:bc:e7:db:
79:10:82:b5:bc:09:43:0f:e0:0f:5f:d3:e4:b7:89:d5:cd:42:
a0:26:56:1e:aa:3f:01:69:c1:0f:5a:b0:a2:b7:01:7d:c2:44:
22:64:2b:6e:eb:a0:47:e8:17:5e:a0:72:3e:c0:29:ec:e1:fa:
8f:7e:13:a9:f3:c3:2c:41:95:4c:c0:ba:bb:11:cd:16:4b:3c:
3e:6e:4c:10:67:20:8b:a4:c6:18:4a:79:50:f3:7e:05:ab:14:
c4:94:50:1a:4b:0a:bc:4c:ee:02:c1:d2:c3:da:06:60:61:d1:
4e:f2:3d:22:6e:c5:4a:b7:04:53:86:54:0c:18:78:2d:c8:88:
f5:19:45:fc:03:9f:e6:14:b6:c7:dc:44:74:4e:1f:ad:ba:dc:
1b:7a:fd:84:8b:3e:65:1b:08:66:08:03:49:25:04:50:49:18:
a6:46:77:0b:c4:f5:99:79:39:ea:33:a3:60:a3:f3:bc:ba:a8:
54:5e:00:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDoC5cg9vPbCToc+RHk5XnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDljYWMxNTFkYjE1OGVkNmE4NTYzMzU4NTU1NTdmNGU3
NWY3MjUwHhcNMjYwOTIxMTEwMDQ5WhcNMjYwOTIyMTEwMDQ5WjAzMTEwLwYDVQQD
Eyg4MDk1ZGFiZTViMzgxMDlkYzg1YzJiMTRjNzFhMWVjZDlkMWIyODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBTFO50Cj17kNVOcoh38QwIb31hT
eso1DIBhNltPF9j3J8L5GThA8OC0Ss+jRnmkrS1gIG+1uw1qSbqyS5YZMShZsqvZ
oJSFWZzMTszFI5wD2DHvOR/2Esp3nNXdR61LHLEfFUokMrlJ/OZZ7Ge8qtrTY2rk
Z4UKXVaN+z4H2nvZeO5JNDYdWz5VsOszrxlKotSEscjj38FY8xcd8f2KRS5plkPL
KuyAC85m6yzkBJ66zOTqC1766ljaxwXowQVrM1frNcba6sMR/YuE9PO51vlWL1EY
ETVE986TZSvH4XG3CUl6ffidPTqP+bqjkjO2zVWbeo5X3vha3Jtc7eCfkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICV2r5bOBCdyFwrFMcaHs2dGyhRMB8GA1UdIwQY
MBaAFO9JysFR2xWO1qhWM1hVVX9OdfclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2It
ZDhhN2EyY2M4NzNiLzEvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2ItZDhhN2EyY2M4NzNi
LzEvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhogIcEQD
4AGmzWzzs9CNmCMOhEv5zur64T80LJbAMBgVOuKjDLmV4o7zoyItCy+ZHmd/5AYw
CBuBSldm2r9zYbTujBNBvOfbeRCCtbwJQw/gD1/T5LeJ1c1CoCZWHqo/AWnBD1qw
orcBfcJEImQrbuugR+gXXqByPsAp7OH6j34TqfPDLEGVTMC6uxHNFks8Pm5MEGcg
i6TGGEp5UPN+BasUxJRQGksKvEzuAsHSw9oGYGHRTvI9Im7FSrcEU4ZUDBh4LciI
9RlF/AOf5hS2x9xEdE4frbrcG3r9hIs+ZRsIZggDSSUEUEkYpkZ3C8T1mXk56jOj
YKPzvLqoVF4AXQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:05:15 2026 by rpki-client