Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier: Fn4/8V1md3a7GWA1OFnPAPRq4GLcqucnX4WIIf9UtDI=
Subject key identifier: 6F:C9:05:EA:BF:74:0F:AC:8B:ED:DA:A2:4E:76:B4:43:81:18:FA:10
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 01A13D49DDE799D0EC43EEB8070A4A65B225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 02:00:13 +0000
Manifest this update: Thu 15 Oct 2026 02:00:13 +0000
Manifest next update: Fri 16 Oct 2026 02:00:13 +0000
Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: 96Vq9O5AFh2FClw5FINtLhCujI5qhJZAx6UJblwpJ7Y=)
2: I9nUczY20Zb-qB4txSR8cQbIwOU.roa (hash: tVztN2aCOWmTRMBNdBunPfUafnJabZOVueK23yoz3NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:49:dd:e7:99:d0:ec:43:ee:b8:07:0a:4a:65:b2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: Oct 15 02:00:13 2026 GMT
Not After : Oct 16 02:00:13 2026 GMT
Subject: CN=6fc905eabf740fac8beddaa24e76b4438118fa10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:b8:21:9f:84:eb:4d:35:42:7c:ae:79:95:
1b:d3:b5:b9:25:55:a0:95:2d:87:57:43:bf:9a:ab:
1e:28:9b:5c:05:7d:7c:5d:85:a0:02:5c:34:cd:7d:
fd:84:0a:4b:e1:f8:4e:86:90:c4:1b:86:ff:44:d0:
57:cf:67:f2:c5:b4:08:a7:f2:56:fd:24:91:b4:16:
dc:50:18:6c:0e:90:19:eb:f5:cd:6a:e9:71:3f:39:
57:93:91:95:fe:e4:3e:40:c8:d4:db:4f:94:66:22:
74:23:cc:63:35:15:f5:22:f9:9e:49:c9:8e:70:1b:
0e:7a:e8:43:72:45:f3:c6:c1:15:d1:65:b2:6e:26:
9f:f7:07:0e:a0:76:bc:15:ad:24:b6:44:a4:b3:5e:
79:74:de:9b:fe:7f:05:2e:9a:31:a2:62:b7:66:f1:
51:01:df:65:46:0d:51:80:09:e7:7e:ab:f4:15:17:
67:63:6b:1d:90:d6:76:7d:0c:db:c6:a4:4f:70:a9:
20:83:96:05:52:0a:b1:3d:92:ad:31:d2:cf:f7:66:
89:ce:29:d8:aa:fa:bf:9d:32:f4:02:66:51:e9:ca:
cc:fa:b0:36:0c:0e:c9:d6:4f:84:39:8c:07:25:a7:
c1:c5:13:76:4a:2f:9b:72:98:15:bf:b0:11:a1:61:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C9:05:EA:BF:74:0F:AC:8B:ED:DA:A2:4E:76:B4:43:81:18:FA:10
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:78:2f:b0:05:55:e4:be:11:99:b8:76:42:22:47:58:97:46:
26:bf:3f:4d:bb:32:41:a3:29:55:29:bf:26:c1:fd:90:92:4b:
7c:20:93:0d:f8:56:dc:49:44:a3:10:3e:a1:a6:23:03:75:4e:
a7:4b:af:83:8d:86:28:08:c6:7e:29:00:70:da:2b:76:e0:81:
43:84:63:bf:2d:2f:79:e8:2a:33:f4:ed:9c:eb:bc:6f:16:3a:
66:30:fe:93:4f:ca:0d:58:87:eb:b7:0f:b0:de:3e:c0:ad:f7:
fe:1a:6c:9e:e5:13:89:44:2b:d1:3f:88:62:73:c2:d1:53:87:
9c:23:39:2c:95:d3:af:39:e5:e1:5c:94:7e:6a:80:98:97:15:
92:3f:c4:41:94:b3:1b:02:07:18:00:c1:8c:b5:6d:99:71:04:
58:cf:96:0b:f3:22:bc:e3:db:e4:ba:a4:a8:cd:a8:bd:34:a2:
9e:61:90:58:5c:d8:6a:3e:b5:0f:c6:e0:39:63:47:8f:6d:5c:
82:a2:59:e5:42:96:71:e7:d8:b3:98:1f:a7:81:cc:6b:1a:cf:
25:d9:f7:a9:ff:d6:8e:03:9f:f0:99:cd:82:b6:53:58:3b:0d:
77:0c:03:91:11:3b:b2:91:47:da:10:d1:bb:9e:78:b6:68:88:
6c:10:9c:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9Sd3nmdDsQ+64BwpKZbIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDc4MDIxZjcyYTIxYjc3MTQyYTQ0ZDgxNWRkZTllZjI2
ODRjYmMwHhcNMjYxMDE1MDIwMDEzWhcNMjYxMDE2MDIwMDEzWjAzMTEwLwYDVQQD
Eyg2ZmM5MDVlYWJmNzQwZmFjOGJlZGRhYTI0ZTc2YjQ0MzgxMThmYTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte24IZ+E6001QnyueZUb07W5JVWg
lS2HV0O/mqseKJtcBX18XYWgAlw0zX39hApL4fhOhpDEG4b/RNBXz2fyxbQIp/JW
/SSRtBbcUBhsDpAZ6/XNaulxPzlXk5GV/uQ+QMjU20+UZiJ0I8xjNRX1IvmeScmO
cBsOeuhDckXzxsEV0WWybiaf9wcOoHa8Fa0ktkSks155dN6b/n8FLpoxomK3ZvFR
Ad9lRg1RgAnnfqv0FRdnY2sdkNZ2fQzbxqRPcKkgg5YFUgqxPZKtMdLP92aJzinY
qvq/nTL0AmZR6crM+rA2DA7J1k+EOYwHJafBxRN2Si+bcpgVv7ARoWEzAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/JBeq/dA+si+3aok52tEOBGPoQMB8GA1UdIwQY
MBaAFO9HgCH3KiG3cUKkTYFd3p7yaEy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEt
MzQ0MzQ2NGI5MjA5LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEtMzQ0MzQ2NGI5MjA5
LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXgvsAVV
5L4Rmbh2QiJHWJdGJr8/TbsyQaMpVSm/JsH9kJJLfCCTDfhW3ElEoxA+oaYjA3VO
p0uvg42GKAjGfikAcNorduCBQ4Rjvy0veegqM/TtnOu8bxY6ZjD+k0/KDViH67cP
sN4+wK33/hpsnuUTiUQr0T+IYnPC0VOHnCM5LJXTrznl4VyUfmqAmJcVkj/EQZSz
GwIHGADBjLVtmXEEWM+WC/MivOPb5LqkqM2ovTSinmGQWFzYaj61D8bgOWNHj21c
gqJZ5UKWcefYs5gfp4HMaxrPJdn3qf/WjgOf8JnNgrZTWDsNdwwDkRE7spFH2hDR
u554tmiIbBCcPw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:58 2026 by rpki-client