Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: Gur8cj50GRmSNimbyVqCUnhTePQg4d9Rv23ThQtaI/s=
Subject key identifier: 1E:5E:FD:04:E3:D6:08:AC:5F:DD:0F:4C:15:15:44:FC:04:74:DE:5B
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 01A0D07FD4B5E8362F7E613A8D2C008F569D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 1A00
Signing time: Wed 23 Sep 2026 23:00:33 +0000
Manifest this update: Wed 23 Sep 2026 23:00:33 +0000
Manifest next update: Thu 24 Sep 2026 23:00:33 +0000
Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: lg9Z5ge/T3yXWeTQoEPGijtmvgyiSIU0C6XHqdce8cU=)
2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:d4:b5:e8:36:2f:7e:61:3a:8d:2c:00:8f:56:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Sep 23 23:00:33 2026 GMT
Not After : Sep 24 23:00:33 2026 GMT
Subject: CN=1e5efd04e3d608ac5fdd0f4c151544fc0474de5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:ff:8b:e5:56:21:c8:dc:e5:7d:17:75:d7:
5e:93:c6:b6:24:81:7f:02:58:58:ab:38:24:ef:af:
07:4d:a9:77:ea:eb:97:92:8f:81:0a:62:d9:77:11:
2e:95:8c:29:05:e9:4f:dd:e5:ca:d1:50:2a:27:b2:
17:fa:79:74:62:29:e8:9a:5b:2a:a3:bf:16:c2:bd:
59:39:03:76:a8:a2:2a:2f:13:8e:2c:a7:b0:03:f7:
06:7b:f9:64:ce:e5:cc:60:70:be:ca:3d:a7:ed:35:
e8:3d:7f:a0:ed:be:0e:8a:9d:e9:2e:7c:eb:61:7a:
c8:03:84:d0:67:37:e5:f8:44:a2:a8:d5:56:49:38:
cb:50:46:5f:1c:f9:48:a1:14:b3:af:52:41:da:15:
d8:c7:69:e7:79:b8:e5:58:c0:3e:14:ae:8e:ba:c1:
81:7e:74:8e:d7:9d:69:31:07:b6:9a:8d:e8:1a:9b:
5a:3e:bb:2e:8f:60:bd:c4:66:b5:4f:36:24:b8:5c:
e0:75:fd:45:99:fa:83:a2:25:26:29:bc:1d:25:24:
48:81:0b:57:c5:7f:78:58:7b:7a:0c:14:ee:58:2a:
aa:07:3c:4c:ad:63:e8:64:36:2e:52:db:48:94:09:
10:40:87:c2:a3:91:ce:08:ec:02:ad:3c:c7:ed:f2:
68:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5E:FD:04:E3:D6:08:AC:5F:DD:0F:4C:15:15:44:FC:04:74:DE:5B
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:47:d5:b9:da:2e:8a:9b:ed:9a:45:36:5e:2e:eb:1b:0f:67:
39:a0:2a:2a:a3:7a:d5:cd:b8:ac:f6:06:0b:c2:09:dc:e8:5d:
0b:05:67:c5:29:92:9d:52:f2:85:0d:ec:f2:78:aa:d3:4c:8b:
63:8a:5a:b4:da:d8:27:2c:4a:20:1c:f4:6a:32:2a:91:a4:4c:
77:a6:a8:da:6a:b7:28:43:0c:95:b8:31:cd:ff:6e:3b:a1:05:
ba:10:c4:41:07:e4:a8:14:e8:9b:78:b0:3e:52:8d:1c:f3:d3:
03:fe:60:c0:f4:6a:08:51:55:a9:ef:95:2f:9d:7d:3c:27:20:
3b:14:c3:14:e2:06:8a:b4:73:72:89:b9:a8:9d:06:d5:b3:b4:
25:1d:1e:59:1f:b3:91:66:31:51:5d:01:57:83:82:ae:9a:75:
aa:72:3f:8f:91:e0:74:7d:78:f2:2c:80:ab:d9:50:5f:a8:42:
2b:c7:3d:f0:a0:89:8e:54:f3:2e:f3:d3:c0:11:b7:b3:0f:94:
3c:48:11:9f:a6:e2:72:81:d3:2e:eb:8e:76:e8:08:e5:66:c1:
1c:e0:e2:ae:8e:b8:aa:2a:d3:6a:fd:f1:1e:40:83:41:6e:23:
78:0f:01:e1:84:f6:c6:dd:24:d4:b0:28:59:c3:c9:6c:86:19:
9a:6c:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:19:19 2026 by rpki-client