Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: a1ui44961MN67FPLh9HAoMX2SX4kWadWSi9PmL81Qq8=
Subject key identifier: A4:7F:F0:E4:EB:92:EA:94:5E:54:15:37:7F:8B:F0:3A:6B:22:EC:CA
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 01A001DD7A64AA988008DAE79681CBA1FDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 1995
Signing time: Fri 14 Aug 2026 20:01:26 +0000
Manifest this update: Fri 14 Aug 2026 20:01:26 +0000
Manifest next update: Sat 15 Aug 2026 20:01:26 +0000
Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: 6txU7veHQkEFjkh+yqeXDR4/jX4T4fqfOh8TkjTBQQk=)
2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:7a:64:aa:98:80:08:da:e7:96:81:cb:a1:fd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Aug 14 20:01:26 2026 GMT
Not After : Aug 15 20:01:26 2026 GMT
Subject: CN=a47ff0e4eb92ea945e5415377f8bf03a6b22ecca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:a1:08:92:cc:a4:4d:12:2a:b1:d1:b9:08:
41:6d:7b:a0:b4:58:8b:df:e4:2b:cc:ac:17:ef:c0:
02:1e:06:a8:7d:2f:dc:df:4f:c9:42:bf:84:a9:bd:
b8:a6:50:db:2a:55:e5:67:0d:13:f3:41:65:4d:28:
a6:c3:15:7b:8d:b0:76:8a:1f:32:eb:18:a3:13:a0:
e4:cc:f1:71:bd:52:9c:2b:f4:76:8c:e1:84:a5:f3:
a1:4c:90:0e:b7:37:09:89:3e:5c:ba:c3:44:a8:ed:
51:3d:38:47:18:50:90:f6:ce:8a:05:f6:00:a8:a5:
63:e5:77:e0:08:df:12:62:c8:48:76:bb:74:e2:a4:
a8:52:15:5d:6e:c4:c8:8e:19:28:61:d2:4a:49:44:
a0:48:d7:b6:ca:ae:1c:f0:58:3a:d6:24:36:fd:09:
66:4b:df:07:0e:ba:c8:76:3c:04:62:a9:3f:4d:73:
a0:30:71:b6:14:ad:75:d1:cc:21:bf:40:c4:60:ef:
5b:e4:bc:71:d6:7c:f1:05:49:3f:58:64:3b:a9:b1:
a6:b1:86:af:d6:64:88:c9:95:21:4c:b0:a1:f5:16:
69:1d:bb:51:c5:1e:eb:df:80:6b:2a:89:ad:d5:64:
09:0f:c4:26:11:c7:6e:e3:5b:1d:ce:d3:91:a5:d3:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7F:F0:E4:EB:92:EA:94:5E:54:15:37:7F:8B:F0:3A:6B:22:EC:CA
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:61:a6:20:28:8d:81:57:b0:49:a6:8f:c8:ce:53:6b:a6:ea:
f2:83:13:d1:0f:19:c8:a5:d0:73:8c:3c:44:03:08:36:f9:b4:
6a:3b:73:52:f0:ed:33:b7:23:25:c1:f0:08:27:17:1a:45:ff:
15:7d:84:31:b9:81:b0:1e:51:e2:79:f1:f9:bd:db:a8:9a:36:
1a:4f:ac:84:1a:dc:b1:b9:5f:2e:4a:ff:ca:5f:7b:8b:07:c7:
c1:a8:97:79:1f:3d:59:6d:15:20:38:5f:92:bc:b9:c9:a0:75:
7b:05:02:fb:36:0e:20:7c:e8:4c:51:5a:51:c9:12:35:77:a6:
15:3b:4a:c4:a2:6f:83:3b:5a:4d:ed:83:a7:2f:60:d7:c2:bd:
cb:a1:da:27:cb:a6:38:5d:ed:41:13:b1:b6:80:ee:06:7d:d6:
71:28:3a:a7:d4:07:de:af:9b:3b:e0:e4:07:fc:e2:8b:96:01:
12:f9:05:bd:83:84:7a:05:1e:78:56:2a:42:f8:90:d4:33:d8:
cf:25:a0:b2:3c:ad:e8:d0:51:3b:ee:55:9a:3d:b0:b2:9f:91:
83:37:96:a5:96:93:65:31:f4:f8:24:7c:c2:d5:e1:e7:28:2a:
fe:fa:32:92:3e:1d:ee:35:8d:32:f6:46:20:3a:ce:98:e3:a9:
2c:a9:ef:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:53 2026 by rpki-client