Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
File: 70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json)
Hash identifier: 8fwC1xr2Ld8dQPPUx4eG4SYYTrP4I0PdkthAUF/yN3k=
Subject key identifier: FB:00:FF:36:7D:AF:15:8A:85:90:DE:05:F8:F4:D8:98:02:14:12:A4
Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Certificate serial: 019D390A44251629918B9896F1BF34B7E1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:01:07 +0000
Manifest this update: Sun 29 Mar 2026 10:01:07 +0000
Manifest next update: Mon 30 Mar 2026 10:01:07 +0000
Files and hashes: 1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: +JBUTlyaGs3BifHkhUBzaxtHmZj18cjTDYAAXD8JLyU=)
2: iihdxArhWBfRd2TbdfbS7PBd2-A.roa (hash: YhBcDUdnzWiPDeX7N0lIwAMHxmHjRf7w0DKaQDLlNXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:44:25:16:29:91:8b:98:96:f1:bf:34:b7:e1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Validity
Not Before: Mar 29 10:01:07 2026 GMT
Not After : Mar 30 10:01:07 2026 GMT
Subject: CN=fb00ff367daf158a8590de05f8f4d898021412a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:86:cc:1f:c8:02:d9:76:d5:23:46:46:de:
25:4e:80:b4:b4:f4:28:ed:33:5c:d1:37:93:2c:ca:
72:ef:5a:17:56:ce:ea:14:95:e0:7e:f4:03:c8:f6:
31:22:74:fb:f4:c1:d1:69:4d:31:45:55:d8:bc:72:
34:0b:79:ae:f9:50:fe:d1:5e:42:ff:c6:fa:b5:67:
db:52:05:ed:3b:f4:0b:de:40:a4:bd:42:26:94:6a:
13:d3:8a:e0:68:dc:e2:c2:de:ef:56:2e:d6:71:41:
d2:0c:df:b3:6b:12:85:0b:a8:1a:b9:5c:cb:cf:dd:
81:48:0d:d5:75:f2:0a:9a:46:de:59:92:8e:08:56:
72:be:55:62:af:6a:f4:e6:93:65:ac:10:2b:1a:d3:
37:89:1e:22:9d:a7:19:46:91:a8:e1:ee:17:42:f0:
63:81:75:93:71:45:e7:fb:e8:ea:49:6e:db:05:3c:
e2:a0:2a:27:b4:f0:10:11:a1:6d:23:62:fe:e3:ad:
0f:8c:ba:af:fb:34:ad:b5:7a:c4:fd:82:56:67:a5:
09:e6:95:82:ba:28:64:b6:6b:99:e8:4e:5b:96:01:
05:bf:5b:46:19:35:2a:d2:7e:b7:03:95:29:0b:9d:
8a:9f:b7:a4:ad:83:68:7c:5c:60:01:b2:41:6f:16:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:00:FF:36:7D:AF:15:8A:85:90:DE:05:F8:F4:D8:98:02:14:12:A4
X509v3 Authority Key Identifier:
keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b7:82:b6:1f:48:83:da:25:f7:25:40:f4:73:fb:8c:fc:1d:
62:6d:8f:0c:63:ec:55:25:3e:30:7e:db:16:a9:49:98:3e:3b:
d1:62:8a:8c:24:08:95:58:23:8f:d4:3d:c4:85:0e:63:24:d3:
36:f2:c2:0b:91:71:41:f2:ff:35:30:e8:c3:92:db:87:67:8e:
91:6f:1b:9c:dc:65:22:2d:60:37:47:1e:2d:06:ca:b2:46:cc:
fb:2d:f1:96:6f:6c:37:7f:fd:01:9f:da:51:52:d1:23:3d:3c:
4c:86:ec:47:49:66:fd:78:e6:eb:56:e5:ae:79:74:ec:1c:ef:
de:fb:dd:85:22:ba:8a:41:97:53:ce:a3:eb:20:36:e4:0f:59:
d1:ae:75:26:c9:99:98:97:6b:79:e9:c2:4f:8b:d2:69:53:85:
cf:b5:7f:51:31:1d:c4:cd:8d:ad:0f:c0:69:2b:91:2f:76:f1:
e4:57:a2:95:cb:0c:db:14:9d:a8:67:f4:f1:3f:04:12:ca:51:
c6:45:a8:15:2f:0e:e8:15:44:43:08:56:73:c5:45:8d:bd:2c:
16:74:91:aa:ff:fd:4e:1b:82:1d:fa:a4:e4:f0:71:0e:53:1f:
71:7b:13:45:b9:43:49:7c:56:b0:24:7f:5d:b1:24:d5:17:cb:
96:1b:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:56 2026 by rpki-client