Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: YQuzPOPMfd4DyZ1zJ5Qu2IfWLCHXzsbvAMvBpldf2oY=
Subject key identifier: AC:6A:5D:91:AC:AF:4E:90:8C:C2:6A:AF:BF:A0:B7:D9:41:CF:D9:44
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 01A14082FDB66A9BF9B70BE5E5781AA838D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 1A3A
Signing time: Thu 15 Oct 2026 17:01:28 +0000
Manifest this update: Thu 15 Oct 2026 17:01:28 +0000
Manifest next update: Fri 16 Oct 2026 17:01:28 +0000
Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: h5AT5Gr3VGP+ynemChHzg9ITmw0M6k2p/pgkIIIavFQ=)
2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:fd:b6:6a:9b:f9:b7:0b:e5:e5:78:1a:a8:38:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Oct 15 17:01:28 2026 GMT
Not After : Oct 16 17:01:28 2026 GMT
Subject: CN=ac6a5d91acaf4e908cc26aafbfa0b7d941cfd944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cb:54:8c:28:ff:7b:04:a7:6c:6b:57:13:6c:
71:f9:93:3a:6a:b1:b2:b4:98:d5:8c:8f:4a:81:a8:
81:b4:4f:06:96:c1:ba:1c:68:b4:4f:20:66:c3:93:
10:36:3c:13:14:75:ff:e3:e2:6a:ba:cb:16:1d:87:
29:28:dc:2c:5f:89:5b:e0:53:f5:fa:cf:4a:25:a7:
c6:e2:d1:73:6c:f3:46:51:39:f5:b5:e9:58:a4:08:
b3:ab:21:24:52:06:6a:75:42:bb:2e:42:14:30:41:
ca:af:9f:f4:00:d6:ba:f2:92:bb:2d:42:5f:26:11:
bc:11:90:5c:ae:89:42:b8:3c:4e:bf:4b:5d:76:51:
fb:9d:d3:11:d0:1d:40:3e:37:35:52:14:67:4b:b0:
19:fa:4e:d7:48:72:81:45:57:07:62:dc:c4:98:06:
b1:20:3a:1b:6a:1e:cb:9b:8a:99:39:91:1c:43:ca:
96:fb:c4:e7:31:84:c6:8d:1b:f4:4c:91:e3:cf:be:
55:36:2d:24:8c:ef:4a:3a:5a:9b:ec:ec:09:9b:b6:
21:73:07:49:0f:1a:ef:3e:36:f9:7c:63:93:72:d6:
49:1c:6f:5f:0d:43:50:e2:91:33:13:20:c5:28:42:
4b:6b:35:7a:1c:4a:8b:f1:b4:7c:ad:f2:f0:74:30:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6A:5D:91:AC:AF:4E:90:8C:C2:6A:AF:BF:A0:B7:D9:41:CF:D9:44
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:21:d0:63:7d:d7:46:d7:b7:6b:6b:d3:18:bb:62:e8:aa:30:
f8:47:1e:a9:43:7e:ac:15:ad:c7:8f:5c:e5:d4:3a:fc:8d:4d:
49:1a:e4:dd:db:69:68:62:49:51:cb:5c:41:95:d1:48:20:f1:
83:1a:5c:2a:1b:8c:df:79:24:56:c6:f4:a0:35:0f:18:36:ee:
a3:13:ce:13:7b:59:a6:2a:48:a2:0e:39:40:eb:eb:64:bc:63:
59:22:d2:52:24:26:6e:7b:be:15:d1:6b:c8:f9:6f:c1:e1:4f:
25:6c:c9:7a:54:69:85:3d:23:11:c7:e8:30:f9:8f:c7:95:90:
12:3b:27:93:bc:b0:d8:61:cf:0d:2b:29:82:8c:52:41:6b:6a:
89:91:eb:1b:3f:f9:9c:e3:b8:46:14:9f:fe:01:0c:a4:8b:b4:
8b:ac:6a:41:8d:ee:c2:55:4c:9c:92:0b:ed:11:97:6d:8a:f1:
84:6f:d6:f3:70:f7:4d:b0:df:dd:2f:f3:5b:df:46:65:4d:c2:
0d:1a:44:25:75:04:28:0c:d8:09:9d:11:ae:45:09:4a:4c:76:
6e:85:a5:ad:4b:bd:6b:19:c3:97:79:36:84:b6:88:af:ab:1c:
1d:d3:10:e6:ac:c9:12:c3:6a:04:5c:9c:9f:5b:2b:b0:36:7d:
bb:e1:1c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:32:57 2026 by rpki-client