Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: gSq2BUi3nKelpKrkqdTeVkTG6uGj1cnqphCgmwfVRpc=
Subject key identifier: 3F:98:BC:BA:29:DE:13:5F:AB:1A:41:21:B7:7A:78:15:0B:4A:67:76
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 019F1830EF2F687784D0D12F673E89A5630A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 191C
Signing time: Tue 30 Jun 2026 11:01:27 +0000
Manifest this update: Tue 30 Jun 2026 11:01:27 +0000
Manifest next update: Wed 01 Jul 2026 11:01:27 +0000
Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: EYliIqGBBSoHizc5vn2lL12HEwnXxgvVVvh7uNtOIFg=)
2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:ef:2f:68:77:84:d0:d1:2f:67:3e:89:a5:63:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Jun 30 11:01:27 2026 GMT
Not After : Jul 1 11:01:27 2026 GMT
Subject: CN=3f98bcba29de135fab1a4121b77a78150b4a6776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:d1:56:58:2c:a2:17:fa:ea:95:51:c7:e9:
02:9b:e2:77:68:45:89:51:38:fa:6b:06:69:37:55:
21:c1:8a:79:44:14:9f:2f:b6:82:77:fb:69:85:22:
f1:75:79:e0:b3:b6:40:74:b3:cc:32:6a:c9:6d:b7:
7c:3a:c7:31:3f:3b:5d:76:a8:24:77:f8:7c:ae:eb:
46:65:ed:0b:c4:7d:34:bc:c1:29:c9:1d:38:0b:15:
e4:d9:96:68:85:b0:d8:c4:f2:ee:75:64:cb:ca:62:
8c:02:94:cd:b2:da:0b:35:be:ef:6a:79:25:6f:a0:
45:1b:2f:66:d6:f7:8f:8c:4d:92:a9:62:c2:53:3b:
a6:86:e1:2c:89:96:d0:d7:20:40:0b:70:94:f8:c2:
17:6e:d9:17:b2:e9:fe:23:0b:46:f2:c4:c7:bd:c3:
5f:cf:bc:2b:0b:93:78:13:14:99:c1:79:73:e6:8c:
26:1b:47:42:2a:ac:18:5b:0c:3c:53:b9:a2:d9:ef:
77:12:8e:c2:9d:2f:16:8b:b5:b9:bb:d6:03:45:1e:
76:d4:ef:62:56:f2:f5:94:4f:e0:44:bf:7d:28:d2:
f3:a7:ce:b9:3d:06:7c:84:2d:88:ec:63:79:97:82:
36:d2:c0:0f:41:f7:b6:d4:6f:8b:d0:18:5e:77:7c:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:98:BC:BA:29:DE:13:5F:AB:1A:41:21:B7:7A:78:15:0B:4A:67:76
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6b:9f:d0:e9:83:77:17:fa:67:10:c4:a1:58:42:82:f6:03:
60:58:80:0a:c2:74:c5:3b:9f:5b:7b:6b:f1:68:d4:98:be:73:
7b:06:10:7e:6d:58:30:11:7b:43:ef:3a:e0:24:f1:cb:08:b9:
77:89:ae:a2:09:98:1c:dc:05:fd:21:b8:90:83:0d:66:70:a5:
5d:31:02:8c:4f:ff:67:32:8e:58:30:71:62:ac:60:82:f3:08:
86:d5:9d:74:2a:6c:24:47:64:e8:e0:4c:e7:70:0f:37:9d:52:
51:f0:fc:7a:26:83:3f:42:2f:b8:0f:c1:e3:ba:df:0d:65:b2:
85:d5:d4:fd:15:45:ad:4a:1e:e5:12:b4:ed:56:27:20:6d:c4:
dc:40:93:26:b7:13:b2:6f:66:44:ee:81:e2:fb:72:c8:94:b6:
8c:1b:49:da:81:5d:4f:a7:7f:c2:89:65:99:ee:96:b6:41:1f:
94:ba:b8:09:e0:25:1c:77:77:46:e2:19:98:4f:ce:b3:34:3e:
e9:88:7e:0c:66:1c:50:18:13:ed:6e:d7:db:9f:37:c8:09:74:
6b:2a:63:41:9c:84:2a:fb:13:ad:ef:4d:b9:77:37:c1:82:5a:
c6:5b:df:32:e4:f3:12:aa:83:5e:dc:00:b1:12:0c:18:d6:68:
d7:f5:8c:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMO8vaHeE0NEvZz6JpWMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDc3Y2EzYjQ0OWJiYzQxMjQ3ZThjOTIxZTRjOGRhYmZj
MWFmYWUwHhcNMjYwNjMwMTEwMTI3WhcNMjYwNzAxMTEwMTI3WjAzMTEwLwYDVQQD
EygzZjk4YmNiYTI5ZGUxMzVmYWIxYTQxMjFiNzdhNzgxNTBiNGE2Nzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIXRVlgsohf66pVRx+kCm+J3aEWJ
UTj6awZpN1UhwYp5RBSfL7aCd/tphSLxdXngs7ZAdLPMMmrJbbd8OscxPztddqgk
d/h8rutGZe0LxH00vMEpyR04CxXk2ZZohbDYxPLudWTLymKMApTNstoLNb7vankl
b6BFGy9m1vePjE2SqWLCUzumhuEsiZbQ1yBAC3CU+MIXbtkXsun+IwtG8sTHvcNf
z7wrC5N4ExSZwXlz5owmG0dCKqwYWww8U7mi2e93Eo7CnS8Wi7W5u9YDRR521O9i
VvL1lE/gRL99KNLzp865PQZ8hC2I7GN5l4I20sAPQfe21G+L0Bhed3z63wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+YvLop3hNfqxpBIbd6eBULSmd2MB8GA1UdIwQY
MBaAFO9HfKO0SbvEEkfoySHkyNq/wa+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUt
NjAzYWExZjIwOWQ4LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUtNjAzYWExZjIwOWQ4
LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGuf0OmD
dxf6ZxDEoVhCgvYDYFiACsJ0xTufW3tr8WjUmL5zewYQfm1YMBF7Q+864CTxywi5
d4muogmYHNwF/SG4kIMNZnClXTECjE//ZzKOWDBxYqxggvMIhtWddCpsJEdk6OBM
53APN51SUfD8eiaDP0IvuA/B47rfDWWyhdXU/RVFrUoe5RK07VYnIG3E3ECTJrcT
sm9mRO6B4vtyyJS2jBtJ2oFdT6d/wollme6WtkEflLq4CeAlHHd3RuIZmE/OszQ+
6Yh+DGYcUBgT7W7X2583yAl0aypjQZyEKvsTre9NuXc3wYJaxlvfMuTzEqqDXtwA
sRIMGNZo1/WM3A==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:23 2026 by rpki-client