Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier: QHuTxctaYaHhbcZBo9MbRnoLSMjZ1adyMFxFWCqbvD0=
Subject key identifier: F0:9D:DC:96:92:77:CE:50:ED:15:12:80:6C:5D:4A:8B:D5:86:A3:BD
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 019E2F295788B4C425936C2480EB70AB6BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number: 190D
Signing time: Sat 16 May 2026 05:01:38 +0000
Manifest this update: Sat 16 May 2026 05:01:38 +0000
Manifest next update: Sun 17 May 2026 05:01:38 +0000
Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: kxFnBhnoHk84ZYbWQcDZ4wqx0qR8kSU5vlV9PXexSOw=)
2: I9nUczY20Zb-qB4txSR8cQbIwOU.roa (hash: tVztN2aCOWmTRMBNdBunPfUafnJabZOVueK23yoz3NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:29:57:88:b4:c4:25:93:6c:24:80:eb:70:ab:6b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: May 16 05:01:38 2026 GMT
Not After : May 17 05:01:38 2026 GMT
Subject: CN=f09ddc969277ce50ed1512806c5d4a8bd586a3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:98:f3:02:02:9b:a8:00:69:19:35:6b:07:
06:ab:43:f1:ac:67:bf:ec:67:5a:ac:ec:b6:04:fe:
55:16:7a:a3:d5:fd:cd:55:e4:56:dc:80:23:ba:16:
70:73:ba:67:51:06:2c:c3:20:fa:d5:c2:fe:8f:29:
ff:f9:05:e3:af:2c:16:e7:fa:19:58:af:59:1b:02:
ea:9f:53:77:f3:8d:04:74:be:7a:fc:8f:f9:1f:f6:
04:c5:49:2e:48:15:fd:79:6b:84:06:7b:52:a0:63:
98:92:62:45:dc:d8:a5:7b:8c:d4:79:3e:a5:16:9e:
b2:30:f4:a0:49:7e:ee:ca:68:09:65:8a:2d:80:74:
62:bf:3a:ac:cf:69:6b:5a:0f:1e:c9:bd:bb:3f:b7:
ce:11:9c:8d:d1:66:0c:58:67:19:46:ea:00:d3:dc:
dc:6e:69:e8:48:4f:c7:f9:51:e6:0d:44:08:db:3e:
2b:a6:9a:e8:26:77:c0:6d:04:c2:35:b6:3b:5b:91:
a1:e1:2b:65:06:9f:95:0f:ac:c0:11:2b:b7:5d:a9:
84:e6:b2:f1:7d:53:ce:b6:f9:04:07:af:42:95:da:
30:64:05:fb:a1:0b:34:f0:c6:d4:80:0a:e7:b6:ec:
08:d5:5c:49:21:ac:6c:08:6c:ce:35:29:fe:fc:fe:
0e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9D:DC:96:92:77:CE:50:ED:15:12:80:6C:5D:4A:8B:D5:86:A3:BD
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:39:4d:fb:90:81:e9:69:82:7d:51:9b:b8:4c:fb:dc:33:fa:
6f:6b:a8:69:94:2b:28:60:37:66:ad:b4:dd:f4:ff:09:8c:45:
43:3f:a5:24:4f:e5:67:16:2b:49:60:bf:c1:2b:36:0e:49:ba:
e7:5d:b8:f7:e1:88:4e:d6:49:7d:b9:6b:53:43:ea:91:5b:7a:
71:21:b5:74:e2:a4:94:d4:6e:da:76:ef:b3:fc:65:2f:b7:f9:
24:df:cf:ff:15:ea:93:c0:18:08:3b:62:fa:69:c7:12:6f:49:
bf:4f:d8:70:36:f2:7d:22:91:33:18:7d:22:84:13:76:85:d8:
59:10:15:58:b1:e8:51:49:76:84:6e:a0:41:47:7b:0c:7f:12:
08:3c:73:11:aa:bb:65:c6:19:ff:cc:a0:b4:14:e6:15:eb:d0:
84:9d:29:d9:7e:26:01:fb:4b:ee:92:6b:21:c9:45:c0:57:70:
82:b8:ab:d4:5c:33:a3:bd:09:9c:17:e6:25:61:e3:b1:f4:32:
51:2e:46:6d:e9:c3:7e:8f:e4:2d:c9:89:f5:c3:ac:1a:d1:57:
7c:db:52:27:56:fa:c8:6f:9f:15:b8:9c:18:2e:2a:dd:78:92:
45:25:f1:42:35:2c:a4:cd:d0:e8:b2:dd:69:51:a5:8e:e6:52:
3b:c5:1f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:29 2026 by rpki-client