Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier: B2d2iekbTlxtfkik7BK44vqVv4OaN4FM446M/ofaoSE=
Subject key identifier: E5:2A:86:72:93:17:53:BA:37:54:FF:8E:2A:BF:9F:AE:3C:E2:7F:0D
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 019D37F7885914258914EC748D50CA739A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 05:01:02 +0000
Manifest this update: Sun 29 Mar 2026 05:01:02 +0000
Manifest next update: Mon 30 Mar 2026 05:01:02 +0000
Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: wbYqRHjroLG8Sr2iAU5YfONykY+wfyQ/2M88NcdMDTo=)
2: I9nUczY20Zb-qB4txSR8cQbIwOU.roa (hash: tVztN2aCOWmTRMBNdBunPfUafnJabZOVueK23yoz3NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:88:59:14:25:89:14:ec:74:8d:50:ca:73:9a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: Mar 29 05:01:02 2026 GMT
Not After : Mar 30 05:01:02 2026 GMT
Subject: CN=e52a8672931753ba3754ff8e2abf9fae3ce27f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:b2:39:e5:0d:e6:50:22:cd:7e:a9:bd:90:
3c:28:56:cd:56:cd:43:25:d2:08:90:18:ce:5f:f2:
bd:6f:13:4a:dd:6e:b4:47:12:b3:7b:62:2f:87:b8:
7a:7b:ef:9a:fd:f4:f1:a9:42:70:58:dd:ae:9f:c9:
8c:ec:d5:ed:15:67:c8:ee:66:66:f0:65:cb:8d:a0:
24:77:ea:50:1e:27:85:06:45:81:cd:8e:92:56:b0:
58:63:8d:c9:80:f0:c4:d5:05:06:1d:ff:48:0e:19:
ec:54:4e:d6:68:94:21:89:18:48:a3:28:62:43:55:
94:01:30:5e:ce:94:fd:c7:90:16:e7:76:4a:74:83:
e6:d6:34:4b:b2:86:bb:d4:a6:c8:d6:e8:6f:77:34:
fe:ef:01:37:f5:ee:75:8c:2d:eb:90:7c:98:b9:af:
5c:fc:94:28:7f:ab:18:ac:d9:70:7f:9d:bd:51:8d:
8b:aa:b4:f5:35:3c:7d:58:9e:a0:f4:e4:7b:aa:90:
c9:0b:20:09:21:8f:d0:b0:7a:88:e3:65:22:48:4a:
bc:fe:8b:08:7d:64:7f:75:a1:23:e4:66:fd:49:15:
a4:fe:57:e6:e0:b0:e7:4e:8b:3f:ab:94:f4:ee:a1:
75:cd:fa:45:d6:8d:b9:eb:d0:cc:11:d0:2d:6b:1a:
fb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2A:86:72:93:17:53:BA:37:54:FF:8E:2A:BF:9F:AE:3C:E2:7F:0D
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ee:ac:34:7e:52:16:58:75:f5:78:c6:fd:0f:5f:b6:78:5a:
ff:c4:b6:ac:8a:5a:85:e1:c1:b2:8c:8b:6c:65:ad:7f:b9:f4:
ad:69:4b:f8:b9:de:74:0f:3a:69:1c:51:cb:86:60:47:1f:bb:
52:f3:c2:9c:06:9b:04:e9:ad:0b:f7:73:db:7f:26:08:15:87:
bf:5e:65:27:da:d7:78:44:02:30:b8:fa:95:f1:2e:0e:51:db:
5d:ba:40:fb:20:cf:21:e3:f9:10:e5:cf:64:40:1d:cc:78:a6:
a6:03:2c:f9:8d:da:3b:73:28:7e:12:b4:3c:b1:1a:a4:1c:f6:
9f:3f:f8:75:c8:f9:6f:31:33:64:97:e9:cf:48:6b:df:07:f5:
db:2f:28:e4:6c:bd:5f:7e:cc:e0:b1:07:cb:bb:5d:d9:6b:bd:
d3:63:71:05:c6:96:74:e3:c5:ee:27:85:d3:f9:32:ed:f1:e6:
7a:6c:b2:4b:fd:42:4a:31:8f:52:98:3f:1c:89:c5:b5:53:90:
2c:77:3f:7f:fa:14:14:f7:40:dc:f6:01:dc:55:e1:84:e7:2f:
a9:4d:f3:f7:22:5d:be:78:81:a5:fb:38:f8:af:05:80:c4:36:
99:76:70:12:04:fe:c8:01:4d:0c:3f:7c:2d:29:a8:d2:b8:78:
d0:de:4d:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0394hZFCWJFOx0jVDKc5puMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDc4MDIxZjcyYTIxYjc3MTQyYTQ0ZDgxNWRkZTllZjI2
ODRjYmMwHhcNMjYwMzI5MDUwMTAyWhcNMjYwMzMwMDUwMTAyWjAzMTEwLwYDVQQD
EyhlNTJhODY3MjkzMTc1M2JhMzc1NGZmOGUyYWJmOWZhZTNjZTI3ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti2yOeUN5lAizX6pvZA8KFbNVs1D
JdIIkBjOX/K9bxNK3W60RxKze2Ivh7h6e++a/fTxqUJwWN2un8mM7NXtFWfI7mZm
8GXLjaAkd+pQHieFBkWBzY6SVrBYY43JgPDE1QUGHf9IDhnsVE7WaJQhiRhIoyhi
Q1WUATBezpT9x5AW53ZKdIPm1jRLsoa71KbI1uhvdzT+7wE39e51jC3rkHyYua9c
/JQof6sYrNlwf529UY2LqrT1NTx9WJ6g9OR7qpDJCyAJIY/QsHqI42UiSEq8/osI
fWR/daEj5Gb9SRWk/lfm4LDnTos/q5T07qF1zfpF1o2569DMEdAtaxr7CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUqhnKTF1O6N1T/jiq/n6484n8NMB8GA1UdIwQY
MBaAFO9HgCH3KiG3cUKkTYFd3p7yaEy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEt
MzQ0MzQ2NGI5MjA5LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEtMzQ0MzQ2NGI5MjA5
LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjO6sNH5S
Flh19XjG/Q9ftnha/8S2rIpaheHBsoyLbGWtf7n0rWlL+LnedA86aRxRy4ZgRx+7
UvPCnAabBOmtC/dz238mCBWHv15lJ9rXeEQCMLj6lfEuDlHbXbpA+yDPIeP5EOXP
ZEAdzHimpgMs+Y3aO3MofhK0PLEapBz2nz/4dcj5bzEzZJfpz0hr3wf12y8o5Gy9
X37M4LEHy7td2Wu902NxBcaWdOPF7ieF0/ky7fHmemyyS/1CSjGPUpg/HInFtVOQ
LHc/f/oUFPdA3PYB3FXhhOcvqU3z9yJdvniBpfs4+K8FgMQ2mXZwEgT+yAFNDD98
LSmo0rh40N5N8Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:51 2026 by rpki-client