Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: e1CRQYPm49QpRPooy2PNO1eMjoOrpvpILQaPaai8vQg=
Subject key identifier: 38:C8:1C:98:64:E2:3A:F4:A9:C5:80:0A:C8:3C:E4:58:65:D8:DC:A1
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 019F18D6707009BB1C380A960E28D78C3FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 0DB1
Signing time: Tue 30 Jun 2026 14:02:14 +0000
Manifest this update: Tue 30 Jun 2026 14:02:14 +0000
Manifest next update: Wed 01 Jul 2026 14:02:14 +0000
Files and hashes: 1: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: vNLvA787npBrceNU50auk4A6wYNgzQ8yVmC6n9VN6N4=)
2: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (hash: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:70:70:09:bb:1c:38:0a:96:0e:28:d7:8c:3f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Jun 30 14:02:14 2026 GMT
Not After : Jul 1 14:02:14 2026 GMT
Subject: CN=38c81c9864e23af4a9c5800ac83ce45865d8dca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:2a:b7:2b:4d:9b:86:d7:9c:fc:b0:14:19:
e7:fc:e5:c2:3e:24:10:a3:1e:c7:72:8f:48:e8:5b:
73:32:a7:76:09:95:02:35:53:d8:32:d2:5f:c2:51:
8f:98:5f:48:26:83:2a:11:78:d0:40:6d:70:55:b7:
47:ad:80:15:fb:97:ba:9c:8e:09:a5:3a:41:29:c1:
7d:90:f4:3e:a0:8f:4a:1a:d3:48:96:47:48:ed:a5:
79:9a:ce:93:32:7e:0c:7b:15:52:2c:97:1d:2e:a3:
fe:12:cd:3d:15:ff:da:cc:25:5e:0e:36:28:e4:c1:
2d:37:b9:72:57:45:6e:8f:8a:65:43:5e:85:99:df:
bd:53:16:4a:ec:67:0e:0c:6e:49:06:6b:19:b4:fe:
65:ee:75:1e:de:33:d0:42:1d:84:7a:4a:af:c1:6e:
88:f1:25:1e:43:1e:28:4a:b7:c4:c0:89:3a:4b:89:
95:47:f4:c0:15:40:93:25:7f:1c:25:6e:67:fb:c7:
ec:3a:1d:c5:c0:3e:2b:f5:92:2a:87:4f:e3:49:b2:
86:fb:90:01:2d:93:a7:5a:43:72:1a:ab:de:1f:27:
08:d8:8f:2b:71:53:3b:bf:38:65:02:9c:2b:ff:1c:
50:f2:f3:6c:be:1d:d0:89:b3:c1:65:54:92:0e:bd:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C8:1C:98:64:E2:3A:F4:A9:C5:80:0A:C8:3C:E4:58:65:D8:DC:A1
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:87:3f:67:f1:d6:9e:0f:e8:71:2d:17:16:13:85:7b:f9:2e:
fb:6c:c5:d6:ee:7a:ad:cb:5e:37:05:cf:82:f4:7f:24:1d:52:
97:ef:20:c7:e9:31:01:46:f9:d9:39:35:82:61:1b:cc:19:24:
6d:82:19:84:29:b0:31:77:f1:e0:aa:19:4e:9d:d3:49:29:11:
bf:1d:66:67:1a:de:e7:da:05:9d:e6:2c:f3:2d:bb:8c:1a:a8:
10:c7:74:c2:41:33:f6:b7:f0:b7:b4:07:3c:2f:9f:28:f0:5f:
bc:fc:16:7d:61:5b:f0:0e:79:5d:e2:22:3a:2e:37:f7:86:c2:
cf:db:88:ca:48:23:78:a6:ed:27:4c:17:37:ee:48:e1:3b:8e:
38:9e:49:27:01:a1:58:d3:cd:58:46:a9:3e:83:b3:2a:90:30:
a3:78:88:ca:42:06:40:4d:01:ac:15:33:03:65:d9:8a:87:f0:
a2:d3:ae:fa:af:0f:47:21:2b:95:23:1c:a3:fc:15:6a:08:c0:
40:57:5d:99:0c:5a:ee:29:ca:3a:1c:a0:0b:ee:4b:d6:f4:42:
17:6e:a2:71:19:3b:85:c7:71:17:f5:54:28:65:a3:0d:05:e5:
3d:e2:db:35:14:44:c4:d5:a3:37:6b:89:f3:a8:4d:4e:aa:64:
10:83:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:08 2026 by rpki-client