Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: 1XhQtCu7fGdo7GQ2rMIBPMJ4nNHfGkyrHXWuYtF87/8=
Subject key identifier: 4B:29:32:F5:2E:76:06:41:BB:8F:25:53:F4:A1:33:28:46:0C:5B:A0
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 01A1DD94DE01D24282770D7C10888DB00C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 0F20
Signing time: Sun 15 Nov 2026 05:01:23 +0000
Manifest this update: Sun 15 Nov 2026 05:01:23 +0000
Manifest next update: Mon 16 Nov 2026 05:01:23 +0000
Files and hashes: 1: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: 5KllfuU8/9scIBkS99W0mDmRWCdydxnwEdjXkEtib9Y=)
2: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (hash: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:de:01:d2:42:82:77:0d:7c:10:88:8d:b0:0c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Nov 15 05:01:23 2026 GMT
Not After : Nov 16 05:01:23 2026 GMT
Subject: CN=4b2932f52e760641bb8f2553f4a13328460c5ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:6f:48:12:eb:34:7a:de:b4:20:25:d5:6d:
13:de:a0:2f:8b:38:91:38:19:ea:a6:b2:37:dc:33:
e6:5a:96:70:93:f4:9b:32:55:5c:1a:23:89:c7:f8:
0d:18:86:c1:ee:08:88:5b:a4:56:b4:38:95:6a:56:
c9:cf:53:02:6c:01:43:7e:df:7e:c8:d0:45:a7:84:
e3:54:49:b0:bc:5d:fc:ce:35:12:26:f4:f4:52:64:
60:e6:72:c5:60:66:5a:f6:c9:3b:b1:7b:ab:2a:6a:
cf:cf:13:23:02:4a:46:b3:35:3b:70:f8:1b:b5:54:
7a:b8:8d:4f:21:fa:e5:4b:7b:89:39:f1:42:cc:6f:
7c:0e:cb:58:36:6f:7b:aa:b8:59:61:22:a3:e0:5b:
15:6a:18:dd:53:7f:91:d3:91:3e:60:28:97:f6:1a:
db:2b:0a:1e:b9:c3:f7:f5:3f:a6:d6:60:cc:a7:fe:
02:f6:c9:88:a2:0b:77:95:83:59:78:50:cf:e0:fd:
53:f0:22:cd:db:ed:a2:5c:18:3b:af:97:ee:e8:2c:
44:02:a3:8c:79:f2:1c:41:44:26:6f:90:78:e7:12:
1f:f6:77:4e:ed:d8:e7:ba:e9:ee:18:b0:aa:09:81:
1c:f8:72:89:1e:88:f4:f8:7e:e7:2b:a5:97:d9:f4:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:29:32:F5:2E:76:06:41:BB:8F:25:53:F4:A1:33:28:46:0C:5B:A0
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:22:70:23:ed:dc:ae:f7:1b:73:60:62:09:73:6e:b8:1d:8a:
8c:89:94:bc:71:b2:77:f8:1f:f8:09:26:91:32:9f:b6:a5:5a:
b7:b1:64:ba:20:ca:f3:db:5d:57:68:32:7c:fa:5b:0b:b6:93:
c5:08:fb:09:dc:a8:b8:98:0d:67:ba:61:f3:24:ae:8d:29:50:
1b:b6:ba:dd:8f:77:62:11:de:71:30:5b:cb:46:db:35:4e:09:
0e:cd:15:fd:ac:9e:73:85:e4:95:cc:cf:f5:ac:e0:8a:f5:da:
09:88:55:40:77:85:cb:29:21:ff:18:f3:ad:f1:ec:f0:ef:07:
09:8a:5e:cd:7f:08:ee:43:fe:a3:bf:8f:ec:0e:48:cf:b0:0b:
c4:18:51:43:67:bd:12:db:e1:18:f2:3c:f3:ab:81:b0:19:52:
41:4c:64:fb:e7:3a:94:2e:73:3a:62:aa:f1:23:bc:cb:be:25:
8b:6d:bf:51:9e:76:de:39:82:ec:12:e0:87:32:1a:6f:c4:ed:
98:67:99:2b:09:e7:eb:a9:0f:a0:82:70:e7:0d:36:cb:6c:2f:
92:9d:b4:36:d5:58:9f:ee:2a:7b:82:d0:e0:8c:c8:3d:3b:64:
8a:0b:aa:f8:40:fc:06:03:6e:a9:b9:f8:5f:67:b2:d4:b6:c9:
c9:4c:ea:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:10 2026 by rpki-client