Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier: xybHe5cdqrowG5T0lHswRQBdzKfd7HQrcyn4AVw0ThQ=
Subject key identifier: 90:B7:4E:18:95:B3:D7:BB:0B:CC:68:7D:9F:3F:FB:60:B8:F6:60:8E
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 019F18D648172B65C9E2A2C395EA2B703EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 14:02:03 +0000
Manifest this update: Tue 30 Jun 2026 14:02:03 +0000
Manifest next update: Wed 01 Jul 2026 14:02:03 +0000
Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: B1eHFeLesB6BbQA8HFnEtTQdExcv6gZYd/9c7ajG2uI=)
2: I9nUczY20Zb-qB4txSR8cQbIwOU.roa (hash: tVztN2aCOWmTRMBNdBunPfUafnJabZOVueK23yoz3NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:48:17:2b:65:c9:e2:a2:c3:95:ea:2b:70:3e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: Jun 30 14:02:03 2026 GMT
Not After : Jul 1 14:02:03 2026 GMT
Subject: CN=90b74e1895b3d7bb0bcc687d9f3ffb60b8f6608e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:1c:3b:11:99:0d:9f:d2:2d:c3:5d:57:3c:
7f:de:a5:ca:5c:fc:54:b0:a4:cd:25:32:78:45:d1:
75:9f:7b:9d:92:4d:01:f3:b9:01:d6:c2:6c:28:73:
bc:6c:ef:cc:8f:0d:44:fb:b1:8b:f1:d5:73:9e:3c:
27:88:ca:d6:4a:93:73:8b:a2:89:9d:00:ae:38:30:
0c:a4:f0:7c:74:c5:56:9b:d2:98:fa:a7:5e:18:84:
11:29:e3:83:c3:e3:83:4a:e6:47:0d:32:88:d0:e8:
5d:2f:4c:d9:a6:38:ba:94:8b:00:56:d6:d6:cc:49:
50:c9:8b:c7:34:ba:aa:ef:7d:99:20:40:87:66:71:
2a:c0:8f:0d:af:44:29:02:21:0d:dd:c5:a8:2e:ef:
5c:87:ab:1b:96:d9:65:c9:74:4b:ce:c3:56:af:05:
0b:2c:df:6e:4b:aa:96:be:a9:cd:33:43:0f:60:34:
fc:ab:2f:d6:9a:47:c4:6f:dd:5e:30:82:c3:5b:da:
0c:5e:b8:60:56:96:ff:ae:44:cc:dc:2a:07:a7:a8:
74:26:63:87:4a:5b:8b:b8:43:0d:98:b2:6c:46:6b:
9d:28:e4:4b:0a:7c:07:4b:e4:8d:c6:a5:0a:a1:1f:
ee:b9:fe:7b:12:f9:d2:ae:6d:70:de:aa:c0:85:e3:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B7:4E:18:95:B3:D7:BB:0B:CC:68:7D:9F:3F:FB:60:B8:F6:60:8E
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8b:1e:f6:2a:69:c5:ff:36:3a:e2:5c:3f:97:ec:33:d3:96:
77:8d:12:49:25:b2:9c:cb:50:61:d0:88:cd:03:2b:1e:da:dd:
b1:52:53:43:67:b1:e1:b1:b3:51:a3:4c:87:85:04:e4:e8:05:
28:2b:82:b9:ce:43:5f:f3:96:b4:4d:17:44:d8:5f:9d:42:04:
ac:9a:95:51:d6:1a:98:b6:4d:71:78:78:d1:89:c3:6b:8a:d8:
66:35:f8:d8:04:93:0d:76:5e:81:70:d2:61:58:01:ab:08:80:
d9:6d:8c:5d:67:ad:e6:35:4b:bc:1e:47:ae:3f:00:68:85:c0:
5f:b2:b4:d9:ca:d3:71:d3:42:65:a7:b4:65:79:17:fe:f9:9a:
c7:ba:82:c0:91:85:f0:0c:a8:59:59:bd:65:2e:0e:0f:10:04:
7e:59:1b:88:4b:e1:27:2a:31:7b:88:d5:ed:1f:bd:b7:b5:b5:
48:a4:26:81:72:75:98:3b:53:14:bc:67:06:8a:84:9b:79:9e:
ff:e4:19:7c:ee:f1:97:a0:f4:14:42:ad:0e:73:73:56:30:ca:
3c:8e:24:76:b2:e1:8d:e0:3f:7a:23:38:6e:66:2c:56:2f:cc:
f0:1c:36:c8:f5:89:5d:64:2a:dd:9c:67:4e:e8:b0:e8:3b:19:
d1:fc:56:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1kgXK2XJ4qLDleorcD7iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDc4MDIxZjcyYTIxYjc3MTQyYTQ0ZDgxNWRkZTllZjI2
ODRjYmMwHhcNMjYwNjMwMTQwMjAzWhcNMjYwNzAxMTQwMjAzWjAzMTEwLwYDVQQD
Eyg5MGI3NGUxODk1YjNkN2JiMGJjYzY4N2Q5ZjNmZmI2MGI4ZjY2MDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8kcOxGZDZ/SLcNdVzx/3qXKXPxU
sKTNJTJ4RdF1n3udkk0B87kB1sJsKHO8bO/Mjw1E+7GL8dVznjwniMrWSpNzi6KJ
nQCuODAMpPB8dMVWm9KY+qdeGIQRKeODw+ODSuZHDTKI0OhdL0zZpji6lIsAVtbW
zElQyYvHNLqq732ZIECHZnEqwI8Nr0QpAiEN3cWoLu9ch6sbltllyXRLzsNWrwUL
LN9uS6qWvqnNM0MPYDT8qy/WmkfEb91eMILDW9oMXrhgVpb/rkTM3CoHp6h0JmOH
SluLuEMNmLJsRmudKORLCnwHS+SNxqUKoR/uuf57EvnSrm1w3qrAheNXvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJC3ThiVs9e7C8xofZ8/+2C49mCOMB8GA1UdIwQY
MBaAFO9HgCH3KiG3cUKkTYFd3p7yaEy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEt
MzQ0MzQ2NGI5MjA5LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEtMzQ0MzQ2NGI5MjA5
LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaose9ipp
xf82OuJcP5fsM9OWd40SSSWynMtQYdCIzQMrHtrdsVJTQ2ex4bGzUaNMh4UE5OgF
KCuCuc5DX/OWtE0XRNhfnUIErJqVUdYamLZNcXh40YnDa4rYZjX42ASTDXZegXDS
YVgBqwiA2W2MXWet5jVLvB5Hrj8AaIXAX7K02crTcdNCZae0ZXkX/vmax7qCwJGF
8AyoWVm9ZS4ODxAEflkbiEvhJyoxe4jV7R+9t7W1SKQmgXJ1mDtTFLxnBoqEm3me
/+QZfO7xl6D0FEKtDnNzVjDKPI4kdrLhjeA/eiM4bmYsVi/M8Bw2yPWJXWQq3Zxn
Tuiw6DsZ0fxWRw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:19 2026 by rpki-client