Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier: Z3iblJT0xkrrUkQQ+d4J+v7ZY+WsuXpDHVR7Ula+W/g=
Subject key identifier: A0:1F:0C:DD:DB:5E:C9:AC:28:FF:31:7F:12:CB:4A:C5:CD:DE:5B:C0
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 019F927EEE814372D2BDCEAD7F98F7F0EC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 05:00:19 +0000
Manifest this update: Fri 24 Jul 2026 05:00:19 +0000
Manifest next update: Sat 25 Jul 2026 05:00:19 +0000
Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: vSl8bPdCQhkHXoVizX+yslaA+xvTrpBvOPJcwLMS8Uo=)
2: I9nUczY20Zb-qB4txSR8cQbIwOU.roa (hash: tVztN2aCOWmTRMBNdBunPfUafnJabZOVueK23yoz3NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:ee:81:43:72:d2:bd:ce:ad:7f:98:f7:f0:ec:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: Jul 24 05:00:19 2026 GMT
Not After : Jul 25 05:00:19 2026 GMT
Subject: CN=a01f0cdddb5ec9ac28ff317f12cb4ac5cdde5bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:d2:45:61:03:4f:ff:7c:91:e8:70:49:23:
d0:c9:ca:a2:8f:05:be:14:08:59:46:bc:83:f4:2e:
d7:7b:4c:d0:82:cf:2f:6f:93:69:52:81:e9:79:ad:
79:a6:e9:3b:8f:db:1d:9c:9b:e4:98:87:f9:7e:f4:
ab:2a:c8:93:ca:86:35:fc:d9:50:fc:4f:a9:37:cf:
e9:8d:b9:42:41:15:f3:ec:18:92:2a:b5:ad:67:f1:
17:01:0c:f7:9d:0e:b4:48:a5:b7:47:22:8d:1c:60:
82:b6:f7:90:ac:c8:fe:4c:e8:d2:3a:cc:0d:46:0c:
32:3a:22:70:ba:8f:ce:65:5d:a1:bd:9b:06:d9:2e:
27:ea:37:16:ff:2d:83:08:19:67:c7:bb:15:9a:86:
ff:a8:c9:4d:f4:01:82:04:31:cf:0f:5e:d6:4f:c3:
1d:f8:9f:98:bf:80:51:97:de:77:27:2a:70:32:35:
0e:b6:e2:f1:0a:be:22:af:0c:2a:cd:e4:b7:1d:22:
05:b9:d3:50:b2:71:7a:0b:09:3d:b9:4f:bf:9c:4c:
f5:69:96:0c:b1:e9:bf:8c:40:e3:c2:54:6d:82:fc:
88:14:47:e0:dd:66:bf:d0:b1:7d:9b:d7:a8:9d:f2:
90:80:cc:62:40:cc:da:70:21:3c:a8:49:51:f8:da:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1F:0C:DD:DB:5E:C9:AC:28:FF:31:7F:12:CB:4A:C5:CD:DE:5B:C0
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d8:69:f4:5c:ca:0b:a8:4d:12:3c:e1:04:2c:63:2d:df:ba:
d1:2c:6b:6a:f4:da:f4:bf:5c:eb:0e:07:9d:72:ae:73:7e:26:
02:8a:b2:f6:d4:6e:a0:ac:31:89:40:f3:78:af:8f:25:d6:6f:
29:64:4f:f9:5f:e3:7d:af:b0:ad:c7:c2:f7:f9:28:f6:0b:8e:
16:3a:23:4d:1c:9b:b4:c9:14:57:53:87:95:f4:f0:a8:5b:36:
cd:90:63:82:8b:30:dc:46:65:39:9e:4e:60:6f:0b:53:62:81:
b2:6f:3d:cc:00:78:57:27:0e:b6:68:25:62:94:db:b7:b7:ae:
65:39:39:b8:e9:f9:97:f5:5f:5f:49:83:95:ba:e7:fb:ce:92:
e2:c4:ce:38:aa:3d:01:44:3b:39:30:cf:e1:6d:51:97:28:a3:
a1:ce:9a:38:2b:f3:d2:2f:35:62:29:ba:73:be:f9:1f:68:6b:
18:fc:d9:b8:12:0b:56:2b:25:82:1c:e5:be:8a:54:6a:54:94:
d4:00:9e:b2:32:89:68:2e:c5:46:99:bc:d9:a8:11:85:a8:4f:
97:ea:40:8c:97:1e:32:48:c6:9f:96:a0:79:24:be:77:46:96:
c3:42:cb:94:30:c8:fe:99:91:1c:48:10:7c:fa:b2:7a:2d:bf:
e3:6d:52:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:25 2026 by rpki-client