Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier: qh7q9FstrvK6yNQAUsv2fq9EtCvBRo+Z35sold9kR+Q=
Subject key identifier: 2F:DF:75:61:5D:1F:20:6A:10:36:A6:BE:D3:A7:F4:08:98:CA:47:51
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 01A00281F58A7652EE3BDC8C9F0FEF3626F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 23:01:06 +0000
Manifest this update: Fri 14 Aug 2026 23:01:06 +0000
Manifest next update: Sat 15 Aug 2026 23:01:06 +0000
Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: ioOJQJYp4ByMrA3yc/LFqOPemdkae2HvXIK2jaactLc=)
2: I9nUczY20Zb-qB4txSR8cQbIwOU.roa (hash: tVztN2aCOWmTRMBNdBunPfUafnJabZOVueK23yoz3NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:f5:8a:76:52:ee:3b:dc:8c:9f:0f:ef:36:26:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: Aug 14 23:01:06 2026 GMT
Not After : Aug 15 23:01:06 2026 GMT
Subject: CN=2fdf75615d1f206a1036a6bed3a7f40898ca4751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a5:ab:64:9b:96:c5:98:05:c5:c6:fa:de:d1:
11:46:47:d0:7c:07:d0:3f:8b:8b:d3:be:00:94:d7:
f7:09:10:19:80:c5:91:e8:a0:45:75:d2:d1:d9:0b:
53:f8:5d:5a:77:cd:16:67:e8:be:39:d8:f3:4b:a3:
f0:43:74:b2:9c:f0:d5:36:de:34:b8:13:0c:75:5a:
87:17:7f:3e:34:93:b9:1a:3b:f2:67:0e:de:db:78:
67:cb:49:9e:e3:53:6f:4f:7b:64:37:7b:3f:fa:cf:
65:b3:e7:51:04:62:86:be:16:0e:8a:0c:54:4f:30:
c2:53:6c:48:bc:79:f7:be:8a:01:bb:2b:d6:8f:eb:
71:f8:ed:14:79:a2:8e:b5:b2:49:73:75:e4:07:98:
bb:da:36:a6:69:da:52:92:db:8c:cc:14:f7:15:38:
04:b5:6f:f9:69:1c:a3:78:a2:f6:04:24:29:cd:9a:
89:25:fe:9f:93:4f:6a:8f:7a:47:d2:61:36:93:1d:
3f:a7:eb:44:20:b5:bd:2d:bc:61:8b:07:b1:43:27:
d7:9a:fb:53:99:ae:b8:d8:4e:16:b7:41:32:36:9f:
2e:9e:47:16:00:1c:5f:91:60:32:82:c3:46:fb:57:
26:3e:84:57:f6:ed:f9:2d:92:b5:24:b1:cc:44:0f:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DF:75:61:5D:1F:20:6A:10:36:A6:BE:D3:A7:F4:08:98:CA:47:51
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fe:7b:12:8e:d0:e4:a5:81:a7:dd:f5:b7:de:7a:b9:5e:37:
36:fc:70:f6:21:35:c8:7a:b7:7e:88:f2:5b:67:58:45:2f:ca:
90:e7:a4:6e:89:8e:cb:6c:86:28:48:89:bd:92:77:52:9d:49:
70:da:59:86:ee:88:74:6a:58:e5:c5:fb:f2:d4:9d:63:94:c9:
e9:a8:19:fd:8b:a0:31:9d:2a:fd:b7:c5:2d:2b:d9:0e:3e:40:
04:43:c1:7f:4b:1f:b9:2b:87:20:0c:1a:27:f8:5b:f2:b9:c9:
7d:db:37:bd:11:57:e3:10:4e:88:cc:26:d4:82:0f:93:37:4f:
da:91:70:4f:99:83:85:4e:3e:88:b0:9d:56:ff:c7:95:33:7c:
fa:af:69:bc:86:4f:64:59:11:74:6e:c8:0b:87:71:3e:88:ae:
e3:d5:39:b4:18:33:45:12:c2:ca:37:0a:31:02:0d:14:d7:94:
ed:e6:3b:aa:91:9d:9c:74:9e:30:0f:cc:99:04:f7:84:34:c6:
fd:3f:76:95:00:28:54:36:2d:be:67:d9:0f:49:03:d2:91:f6:
a8:95:05:51:68:f3:0b:ca:92:31:36:13:4e:b0:7d:00:a1:68:
06:e0:3b:48:16:2e:52:a4:e0:3d:bb:75:f8:91:76:90:38:be:
52:ab:e4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:34:13 2026 by rpki-client