Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: JG8E8nthIC8tGT3n7jeM0wmO/xxB9CNl8TAQOhfu5Ew=
Subject key identifier: 38:B2:B5:57:94:17:FE:3A:CE:66:89:06:73:5B:A7:7A:DD:8B:2C:F8
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 019E307240341CEF679814F49E905667E7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 18A4
Signing time: Sat 16 May 2026 11:00:54 +0000
Manifest this update: Sat 16 May 2026 11:00:54 +0000
Manifest next update: Sun 17 May 2026 11:00:54 +0000
Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: FJGrO9GuEkSjeP5/n2NrwwAA71IJRIhbWKt5eOE4fEY=)
2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:40:34:1c:ef:67:98:14:f4:9e:90:56:67:e7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: May 16 11:00:54 2026 GMT
Not After : May 17 11:00:54 2026 GMT
Subject: CN=38b2b5579417fe3ace668906735ba77add8b2cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:2d:59:e2:c9:fd:fa:bb:77:9c:8a:fe:11:
60:5b:00:5f:37:7b:a1:ca:b6:e7:86:4d:7d:91:76:
85:76:a5:48:7b:25:6d:fe:73:ef:4e:f7:9f:23:a1:
49:c2:fc:a3:d9:31:16:5e:46:45:c9:63:fb:64:62:
33:d8:2d:e9:50:44:2f:a5:6e:e2:d9:3c:dc:bc:c0:
b1:49:62:39:ad:bb:68:f8:a4:72:a6:d3:b6:11:56:
4b:1f:9f:e2:ca:56:e1:b5:a1:f4:fa:82:16:16:86:
ed:1e:f6:87:82:4c:04:dc:b7:34:f4:5c:a0:a5:7b:
0f:26:1d:9f:6d:77:e8:e8:5b:57:e2:98:3d:e9:2d:
f1:dc:01:d6:db:51:6c:6a:2f:66:78:9a:3c:a6:ab:
75:cc:d7:e2:3a:7a:14:c6:fd:f9:22:6c:c1:5f:30:
d3:03:1a:47:84:3f:ff:cf:02:65:70:ad:0f:65:25:
00:70:a9:23:19:5d:92:43:fc:35:1d:02:6a:ab:79:
4d:f2:94:dc:aa:c5:58:49:67:06:34:68:e1:83:b3:
77:eb:3f:80:bc:03:ee:a3:93:8b:2c:53:de:b2:c7:
eb:ff:d6:12:c7:27:42:6c:14:44:6d:77:1d:e6:29:
e2:cf:23:98:2a:c5:f6:ba:cc:45:e3:48:41:03:c0:
9c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B2:B5:57:94:17:FE:3A:CE:66:89:06:73:5B:A7:7A:DD:8B:2C:F8
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7e:c7:cf:be:46:b1:d4:d2:db:cf:5b:da:36:19:ed:63:aa:
55:da:e4:41:e1:4f:a9:da:af:8e:4f:b2:bd:36:e3:3f:ec:d6:
40:80:d9:ea:3c:a9:58:f3:91:c3:68:61:10:28:4b:ff:ab:a3:
c8:7f:05:3e:e8:e4:df:98:b4:c3:aa:d5:f4:1e:95:47:47:bb:
28:5e:a0:23:1f:69:9e:b9:ad:2b:26:78:97:d2:c8:77:33:89:
ec:4e:8f:65:30:5e:14:95:97:6f:5b:da:44:30:10:5d:8a:f8:
68:aa:19:9f:6f:7a:3f:f6:24:63:61:3c:07:8c:af:09:1d:ab:
1a:ff:5e:e7:b7:1d:dd:96:ba:c7:94:77:22:2b:d9:9a:98:2a:
7c:14:86:cd:54:a4:42:b8:7c:1a:c8:7a:35:31:0e:1c:44:73:
1f:4d:b4:68:01:63:21:10:2e:82:f9:5d:68:0a:c6:f4:f4:19:
4f:b9:89:9b:71:80:80:52:e8:4c:c7:d8:0f:ad:eb:b2:bb:32:
3f:95:98:71:3f:1d:d6:e6:47:02:cf:02:5f:05:a9:78:09:5d:
eb:59:4a:85:46:aa:bf:94:d9:c3:35:19:08:1c:26:08:b5:b1:
65:71:9d:41:c8:e4:ef:dd:c6:ba:04:39:72:43:1f:3e:17:70:
92:8a:7b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wckA0HO9nmBT0npBWZ+ffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDc3Y2EzYjQ0OWJiYzQxMjQ3ZThjOTIxZTRjOGRhYmZj
MWFmYWUwHhcNMjYwNTE2MTEwMDU0WhcNMjYwNTE3MTEwMDU0WjAzMTEwLwYDVQQD
EygzOGIyYjU1Nzk0MTdmZTNhY2U2Njg5MDY3MzViYTc3YWRkOGIyY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CctWeLJ/fq7d5yK/hFgWwBfN3uh
yrbnhk19kXaFdqVIeyVt/nPvTvefI6FJwvyj2TEWXkZFyWP7ZGIz2C3pUEQvpW7i
2TzcvMCxSWI5rbto+KRyptO2EVZLH5/iylbhtaH0+oIWFobtHvaHgkwE3Lc09Fyg
pXsPJh2fbXfo6FtX4pg96S3x3AHW21Fsai9meJo8pqt1zNfiOnoUxv35ImzBXzDT
AxpHhD//zwJlcK0PZSUAcKkjGV2SQ/w1HQJqq3lN8pTcqsVYSWcGNGjhg7N36z+A
vAPuo5OLLFPessfr/9YSxydCbBREbXcd5inizyOYKsX2usxF40hBA8CcrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiytVeUF/46zmaJBnNbp3rdiyz4MB8GA1UdIwQY
MBaAFO9HfKO0SbvEEkfoySHkyNq/wa+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUt
NjAzYWExZjIwOWQ4LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUtNjAzYWExZjIwOWQ4
LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU37Hz75G
sdTS289b2jYZ7WOqVdrkQeFPqdqvjk+yvTbjP+zWQIDZ6jypWPORw2hhEChL/6uj
yH8FPujk35i0w6rV9B6VR0e7KF6gIx9pnrmtKyZ4l9LIdzOJ7E6PZTBeFJWXb1va
RDAQXYr4aKoZn296P/YkY2E8B4yvCR2rGv9e57cd3Za6x5R3IivZmpgqfBSGzVSk
Qrh8Gsh6NTEOHERzH020aAFjIRAugvldaArG9PQZT7mJm3GAgFLoTMfYD63rsrsy
P5WYcT8d1uZHAs8CXwWpeAld61lKhUaqv5TZwzUZCBwmCLWxZXGdQcjk793GugQ5
ckMfPhdwkop7Nw==
-----END CERTIFICATE-----
Generated at Sat May 16 17:11:50 2026 by rpki-client