Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
File: 70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json)
Hash identifier: M6NlWKI1f8+hKVafHgAHEkjCtSeH9PpoUTbpLzRRL94=
Subject key identifier: 15:AE:51:68:AC:70:CA:CA:C0:59:0D:53:C2:53:0A:B2:81:8A:BE:3C
Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Certificate serial: 019F17F9758A63524DF690B867B604CCB671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 10:00:52 +0000
Manifest this update: Tue 30 Jun 2026 10:00:52 +0000
Manifest next update: Wed 01 Jul 2026 10:00:52 +0000
Files and hashes: 1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: 4w8oW3D1fb6EHeC5X9Y7eqW4xAafSAEq7levlJsS+kk=)
2: iihdxArhWBfRd2TbdfbS7PBd2-A.roa (hash: YhBcDUdnzWiPDeX7N0lIwAMHxmHjRf7w0DKaQDLlNXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:75:8a:63:52:4d:f6:90:b8:67:b6:04:cc:b6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Validity
Not Before: Jun 30 10:00:52 2026 GMT
Not After : Jul 1 10:00:52 2026 GMT
Subject: CN=15ae5168ac70cacac0590d53c2530ab2818abe3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:69:a4:59:f0:93:36:43:f9:c2:56:b6:09:6e:
cb:4f:2d:63:33:fd:fe:30:64:6f:28:11:8b:ad:ff:
a9:04:d0:40:ed:49:49:6c:68:a6:19:65:44:79:51:
af:03:93:bc:db:4f:cd:c3:8f:39:d2:d9:d3:d3:a7:
2d:7e:ed:62:c3:e0:90:45:8e:7d:b9:57:6b:a2:08:
ca:d9:83:87:8a:18:26:d1:8c:97:84:14:7b:27:d1:
de:25:62:6d:11:b1:cf:46:b6:54:71:8c:e8:81:03:
e0:12:f9:8c:b5:0b:c0:8b:31:9d:64:86:53:bc:d0:
c7:48:e3:ef:e3:50:60:1d:0d:b4:58:8f:41:b5:7c:
fd:48:24:c9:70:3f:91:60:ea:81:b8:f9:8a:b9:3a:
ff:71:43:c9:a8:ea:f0:73:cb:01:d0:75:dc:31:8a:
75:20:24:1a:78:a7:84:45:70:91:30:4a:05:1c:ac:
ec:16:d3:72:2c:8f:4a:04:35:b4:9e:3b:fa:17:6e:
1a:5f:87:a0:a9:e4:52:a7:5e:b4:bb:25:ec:2d:cf:
26:cd:0b:e3:b6:6f:62:c5:65:ac:86:6f:7e:3e:d7:
05:0d:99:ea:b6:a4:66:a9:6d:b6:7a:e7:97:97:15:
e4:34:5c:cc:1d:95:42:ca:4e:40:76:c4:9f:cd:8e:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AE:51:68:AC:70:CA:CA:C0:59:0D:53:C2:53:0A:B2:81:8A:BE:3C
X509v3 Authority Key Identifier:
keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:16:4f:8d:5f:12:db:ba:f6:34:07:06:49:65:c0:87:4a:ba:
03:e1:71:af:ad:6f:f4:99:98:d2:a3:cc:72:6e:8c:92:65:c7:
39:d3:51:9a:9e:bd:eb:34:36:cb:e5:ea:a4:81:28:f2:dc:ca:
99:19:82:bc:27:1f:4d:5c:d5:2a:e4:5d:4c:d0:c7:55:50:7b:
88:1e:db:18:b0:28:4f:56:43:c0:52:f4:9b:84:35:20:0f:ba:
df:36:3f:49:b6:69:c2:5a:d5:ae:3c:34:fe:06:51:6c:82:03:
3b:40:56:a1:7a:57:aa:54:a5:c4:7f:99:b1:e1:41:55:76:f3:
b5:7c:f0:0f:dc:c8:1a:0f:db:22:ab:21:63:d8:9c:d1:84:37:
31:59:51:93:be:1b:91:8f:1d:ae:7a:2b:fc:8d:c2:3f:44:be:
d7:3b:a8:c1:bb:3f:c3:0f:34:b6:b3:c8:b3:bc:1f:31:5b:72:
37:40:df:e9:ea:bd:14:a5:ac:07:12:bb:54:d0:aa:22:ff:50:
c2:5a:65:05:a3:d2:07:cc:9a:11:64:0d:3e:18:f9:a6:fc:0e:
e9:c2:97:fd:54:ba:a8:44:1e:b4:c6:ef:ba:61:c6:d5:0a:24:
29:f4:f2:2b:e7:b0:ea:71:b3:70:15:eb:fd:0c:a1:24:61:2b:
60:6c:71:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+XWKY1JN9pC4Z7YEzLZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDQwZTEzY2QyNjExMmNjYjU5NTE3NjBmY2ZiMmQ0OTE2
ZDcxMjcwHhcNMjYwNjMwMTAwMDUyWhcNMjYwNzAxMTAwMDUyWjAzMTEwLwYDVQQD
EygxNWFlNTE2OGFjNzBjYWNhYzA1OTBkNTNjMjUzMGFiMjgxOGFiZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GmkWfCTNkP5wla2CW7LTy1jM/3+
MGRvKBGLrf+pBNBA7UlJbGimGWVEeVGvA5O820/Nw4850tnT06ctfu1iw+CQRY59
uVdrogjK2YOHihgm0YyXhBR7J9HeJWJtEbHPRrZUcYzogQPgEvmMtQvAizGdZIZT
vNDHSOPv41BgHQ20WI9BtXz9SCTJcD+RYOqBuPmKuTr/cUPJqOrwc8sB0HXcMYp1
ICQaeKeERXCRMEoFHKzsFtNyLI9KBDW0njv6F24aX4egqeRSp160uyXsLc8mzQvj
tm9ixWWshm9+PtcFDZnqtqRmqW22eueXlxXkNFzMHZVCyk5AdsSfzY7a7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWuUWiscMrKwFkNU8JTCrKBir48MB8GA1UdIwQY
MBaAFO9EDhPNJhEsy1lRdg/PstSRbXEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDkt
N2E4MzY4MDBlOWY3LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDktN2E4MzY4MDBlOWY3
LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxZPjV8S
27r2NAcGSWXAh0q6A+Fxr61v9JmY0qPMcm6MkmXHOdNRmp696zQ2y+XqpIEo8tzK
mRmCvCcfTVzVKuRdTNDHVVB7iB7bGLAoT1ZDwFL0m4Q1IA+63zY/SbZpwlrVrjw0
/gZRbIIDO0BWoXpXqlSlxH+ZseFBVXbztXzwD9zIGg/bIqshY9ic0YQ3MVlRk74b
kY8drnor/I3CP0S+1zuowbs/ww80trPIs7wfMVtyN0Df6eq9FKWsBxK7VNCqIv9Q
wlplBaPSB8yaEWQNPhj5pvwO6cKX/VS6qEQetMbvumHG1QokKfTyK+ew6nGzcBXr
/QyhJGErYGxx1A==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:26 2026 by rpki-client