Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
File: 70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json)
Hash identifier: vaJFUh/nSZ6PH4hNJZbMA5CAS8w+fBH4krwsxyfS5BA=
Subject key identifier: 1D:00:36:6B:8C:58:71:C4:F4:5F:B6:6A:39:59:C4:BE:D8:D9:03:44
Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Certificate serial: 01A001A62645ACB9FB05113EA29A3E12B0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 19:01:00 +0000
Manifest this update: Fri 14 Aug 2026 19:01:00 +0000
Manifest next update: Sat 15 Aug 2026 19:01:00 +0000
Files and hashes: 1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: fc2si6q5xBBzCB9JIh8kyHdZgLM/ZDtsrrtxlVwZPgA=)
2: iihdxArhWBfRd2TbdfbS7PBd2-A.roa (hash: YhBcDUdnzWiPDeX7N0lIwAMHxmHjRf7w0DKaQDLlNXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:26:45:ac:b9:fb:05:11:3e:a2:9a:3e:12:b0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Validity
Not Before: Aug 14 19:01:00 2026 GMT
Not After : Aug 15 19:01:00 2026 GMT
Subject: CN=1d00366b8c5871c4f45fb66a3959c4bed8d90344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c1:9c:17:d4:58:2d:9f:39:ee:b9:bd:86:3b:
62:6d:5f:49:85:5b:9e:9c:48:43:1b:7f:05:85:d9:
a6:5f:e7:cd:89:6b:e5:eb:7b:a2:28:a7:54:f4:05:
4c:ef:8f:f9:d7:b4:9d:14:af:8e:47:70:b3:c9:70:
db:d0:df:5d:20:68:f5:57:d6:de:16:80:46:44:0e:
a8:26:2d:82:b0:e2:7d:45:54:aa:2f:cc:26:31:91:
85:ca:9a:37:29:74:d2:b3:6e:41:e2:c4:4b:d1:69:
58:1f:a2:bd:85:89:11:f3:3d:d5:7a:57:35:64:0a:
12:a0:a5:da:d6:7b:3b:37:e3:15:31:f5:6a:f6:03:
db:d8:a1:e9:c7:a2:d6:d6:78:c3:c2:e7:d4:50:1f:
35:d3:1d:16:93:1c:90:34:cc:87:cb:fa:37:7b:ed:
6e:05:a8:c0:5a:69:c7:14:b3:c1:52:a0:24:48:ed:
cb:b6:e1:03:d8:8f:2e:d4:2b:ea:e2:76:6b:f0:79:
12:52:4c:f2:00:3b:d2:54:4e:7a:0f:90:3b:72:0f:
76:40:81:3b:0b:89:53:85:f0:3c:bb:99:a7:cd:9a:
29:0c:6b:c7:3e:22:da:ac:97:32:9f:f4:05:e2:91:
07:4f:61:b4:e3:68:de:7f:48:ba:dd:88:6b:c3:73:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:00:36:6B:8C:58:71:C4:F4:5F:B6:6A:39:59:C4:BE:D8:D9:03:44
X509v3 Authority Key Identifier:
keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3e:53:7c:23:15:1f:8d:77:2b:78:60:e7:ed:50:9f:46:03:
28:c6:b8:e0:08:d6:d1:91:27:d0:bf:cb:fa:18:d3:40:96:cd:
ae:d0:58:48:d6:dd:d2:79:a6:59:b7:b6:b2:f8:3d:44:b9:c4:
c9:66:1a:96:33:eb:ec:5f:1c:96:a7:fe:37:2f:54:f6:95:05:
bd:5b:18:a3:23:1c:46:b8:7f:67:71:8c:1b:75:ec:05:c9:86:
d4:92:50:91:1a:97:fa:e3:82:f2:1e:e5:19:18:a0:4b:2e:bc:
bd:11:8e:1b:ac:4a:fb:3e:87:80:d2:b4:97:35:9d:6d:37:62:
cd:b3:22:20:eb:cf:77:aa:1c:7e:de:47:95:1f:78:35:65:34:
85:41:6d:2e:ec:0b:01:6e:10:cc:25:cc:78:bb:8e:18:3b:3d:
db:a0:6c:93:43:cb:b7:bb:1f:29:29:ae:d9:3e:57:37:5f:6e:
e3:97:49:2c:7b:ea:39:27:27:03:8b:98:ee:80:d0:62:6a:98:
4f:6e:81:72:c7:fc:f1:78:4d:84:a2:f9:61:a4:ca:c5:ba:57:
08:f2:dd:91:fa:61:fb:01:bb:5a:d6:0d:b4:56:d5:b6:0d:8d:
6b:2d:d6:6c:4c:31:ef:f3:ab:80:30:88:fd:1f:4b:9a:f5:17:
a7:ee:a6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:37 2026 by rpki-client