Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
File: 70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json)
Hash identifier: pDCOa5g7aw6y8Yu5CKqZulilAKNNarEvGI+jNKUMs7E=
Subject key identifier: 9B:79:D0:72:F6:40:88:29:C9:30:8E:7E:3F:5D:7E:7A:BE:44:46:B3
Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Certificate serial: 01A13E5CE47C385F035F2860266FEDDF3BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 07:00:37 +0000
Manifest this update: Thu 15 Oct 2026 07:00:37 +0000
Manifest next update: Fri 16 Oct 2026 07:00:37 +0000
Files and hashes: 1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: Iz1Pre+WUgoW2pOvNXNym4njtqD/rQcEk+TApTEkHko=)
2: iihdxArhWBfRd2TbdfbS7PBd2-A.roa (hash: YhBcDUdnzWiPDeX7N0lIwAMHxmHjRf7w0DKaQDLlNXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:e4:7c:38:5f:03:5f:28:60:26:6f:ed:df:3b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Validity
Not Before: Oct 15 07:00:37 2026 GMT
Not After : Oct 16 07:00:37 2026 GMT
Subject: CN=9b79d072f6408829c9308e7e3f5d7e7abe4446b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:40:ee:41:1c:8f:11:94:f5:28:22:a7:e4:
a0:83:56:7f:a9:03:a6:f7:b4:fd:50:1b:2e:cf:24:
ec:f4:de:b2:04:dc:ae:ed:40:6f:c6:5a:fb:de:b5:
e0:c2:ef:c0:6c:88:a7:19:3a:0e:17:13:7f:05:fd:
79:68:c7:a6:d4:d5:50:e4:05:b7:87:76:71:bc:c3:
ce:38:ab:8f:51:bb:b7:7c:ea:12:a6:6a:83:65:30:
bf:f9:df:97:ba:31:7a:7b:d2:51:17:05:f9:2d:ae:
96:dc:7d:ee:3e:0a:b3:b8:cc:2a:9f:e8:f8:93:03:
d8:cb:ea:e5:59:50:e0:a7:aa:79:c7:23:6d:7f:6b:
fb:29:6d:c1:89:a7:ec:27:5a:75:da:af:9d:10:83:
32:52:ef:f0:73:fa:35:5c:cc:fa:47:19:ca:d4:ec:
4a:93:0e:4c:77:b1:7d:71:b6:1d:2c:62:6b:45:3e:
d1:04:93:64:05:e9:89:29:93:c7:bc:9d:01:e9:35:
26:f0:65:b2:fc:c6:1b:a3:06:54:ca:de:75:b0:fb:
fc:8a:21:00:e8:f9:e2:e5:70:84:8e:fe:bb:77:36:
79:b0:3f:bc:62:58:ce:de:2c:4f:e0:24:ab:37:a3:
f7:45:78:94:09:8c:d0:00:b6:64:09:91:69:40:a4:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:79:D0:72:F6:40:88:29:C9:30:8E:7E:3F:5D:7E:7A:BE:44:46:B3
X509v3 Authority Key Identifier:
keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ff:c6:d7:1e:de:9d:4b:90:d5:5a:a5:3b:7a:af:81:32:00:
6c:1d:34:d1:9c:09:81:07:7b:27:e7:0b:af:65:55:c7:71:ec:
92:78:de:b2:0d:a3:ab:39:1b:37:de:a7:67:d2:58:9f:41:4a:
44:8f:c0:a2:fb:75:10:4e:8c:64:aa:55:c5:c1:ba:29:f8:46:
07:56:ff:a8:57:82:74:24:76:89:5f:21:e2:d3:b8:33:8c:f3:
09:58:88:dc:8f:6c:51:f5:d6:6e:64:e8:2f:ea:5e:87:80:2e:
78:a7:48:ae:c7:2e:ab:0e:19:05:cd:be:3a:44:8d:8d:20:7b:
a0:5e:71:61:b6:e5:98:b3:8a:09:59:7d:a2:25:16:e6:c8:71:
f0:90:be:3a:6e:86:e1:86:05:97:18:ad:0d:27:c4:5b:8a:7c:
02:4a:64:93:19:06:dd:ef:7e:1f:94:1b:b4:1b:8e:bb:46:5d:
33:30:0d:41:08:9f:a4:b9:97:98:35:8b:a9:68:92:e5:88:cf:
67:fa:19:ee:52:41:e9:c2:e5:f6:8c:52:6a:ed:45:34:a6:a4:
b8:d3:23:6a:52:3b:ad:05:f4:e1:d7:87:e7:4e:20:8e:34:d4:
71:f9:3e:e3:c5:52:7a:c9:b2:91:41:bb:50:b0:84:ac:fb:c1:
d4:91:a1:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XOR8OF8DXyhgJm/t3zvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDQwZTEzY2QyNjExMmNjYjU5NTE3NjBmY2ZiMmQ0OTE2
ZDcxMjcwHhcNMjYxMDE1MDcwMDM3WhcNMjYxMDE2MDcwMDM3WjAzMTEwLwYDVQQD
Eyg5Yjc5ZDA3MmY2NDA4ODI5YzkzMDhlN2UzZjVkN2U3YWJlNDQ0NmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp95A7kEcjxGU9Sgip+Sgg1Z/qQOm
97T9UBsuzyTs9N6yBNyu7UBvxlr73rXgwu/AbIinGToOFxN/Bf15aMem1NVQ5AW3
h3ZxvMPOOKuPUbu3fOoSpmqDZTC/+d+XujF6e9JRFwX5La6W3H3uPgqzuMwqn+j4
kwPYy+rlWVDgp6p5xyNtf2v7KW3BiafsJ1p12q+dEIMyUu/wc/o1XMz6RxnK1OxK
kw5Md7F9cbYdLGJrRT7RBJNkBemJKZPHvJ0B6TUm8GWy/MYbowZUyt51sPv8iiEA
6Pni5XCEjv67dzZ5sD+8YljO3ixP4CSrN6P3RXiUCYzQALZkCZFpQKQvnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt50HL2QIgpyTCOfj9dfnq+REazMB8GA1UdIwQY
MBaAFO9EDhPNJhEsy1lRdg/PstSRbXEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDkt
N2E4MzY4MDBlOWY3LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDktN2E4MzY4MDBlOWY3
LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjv/G1x7e
nUuQ1VqlO3qvgTIAbB000ZwJgQd7J+cLr2VVx3Hsknjesg2jqzkbN96nZ9JYn0FK
RI/Aovt1EE6MZKpVxcG6KfhGB1b/qFeCdCR2iV8h4tO4M4zzCViI3I9sUfXWbmTo
L+peh4AueKdIrscuqw4ZBc2+OkSNjSB7oF5xYbblmLOKCVl9oiUW5shx8JC+Om6G
4YYFlxitDSfEW4p8AkpkkxkG3e9+H5QbtBuOu0ZdMzANQQifpLmXmDWLqWiS5YjP
Z/oZ7lJB6cLl9oxSau1FNKakuNMjalI7rQX04deH504gjjTUcfk+48VSesmykUG7
ULCErPvB1JGh+A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:12 2026 by rpki-client