Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: 7eBue3e+U+gkoPBtPViIWL2j1Cu7peONrwQFLLRmLFs=
Subject key identifier: 17:E1:44:08:7A:47:AD:93:60:00:2E:D8:90:85:CA:36:CC:E9:DA:57
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 019E1D223CA53B45349A1AFE9EE53534DD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 189A
Signing time: Tue 12 May 2026 17:00:43 +0000
Manifest this update: Tue 12 May 2026 17:00:43 +0000
Manifest next update: Wed 13 May 2026 17:00:43 +0000
Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: XQlw6qOJn2jb971RP0LZfjHgEgYz8LcnwJh2Ya3zukI=)
2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:3c:a5:3b:45:34:9a:1a:fe:9e:e5:35:34:dd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: May 12 17:00:43 2026 GMT
Not After : May 13 17:00:43 2026 GMT
Subject: CN=17e144087a47ad9360002ed89085ca36cce9da57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:b4:7e:e1:3d:07:fd:27:ee:58:f8:c1:73:
7f:9d:8d:34:97:d5:0f:b5:0c:10:14:03:d8:9e:c4:
de:6a:84:e5:2d:87:af:90:2d:45:b8:52:02:f8:dc:
ba:c9:38:0f:ca:3d:ae:5d:51:ba:d4:45:22:5a:3d:
2f:bd:49:7c:2c:e5:ed:d5:6d:b9:6c:5b:b7:fb:e2:
c1:74:ef:bd:68:c7:2b:89:b4:5c:a4:f7:4b:f3:f0:
e8:ed:46:48:14:84:9d:12:b6:d6:e7:5f:3c:21:db:
5d:f3:ff:23:f4:c6:e2:46:79:b5:89:b9:93:19:8c:
b3:23:8c:b8:34:7f:51:70:11:ff:6a:b8:86:21:a0:
75:b9:dc:40:da:00:0a:f0:b5:23:b7:fc:4b:ec:7c:
3d:25:22:6f:06:f0:ae:0c:86:b4:22:13:08:67:ed:
86:7c:9f:7b:0c:b1:b3:bd:26:67:56:e7:ba:39:11:
c5:eb:93:df:69:77:28:f0:d8:ad:dd:71:79:3b:0b:
57:eb:3a:dd:10:3a:fe:13:76:36:7c:45:d5:58:08:
6f:f6:bb:7c:df:35:4c:64:74:6c:06:c9:22:a6:4b:
ae:62:e5:8e:22:e5:c5:d6:09:c7:39:91:78:5f:ea:
bd:68:4f:b3:7a:10:97:7e:4d:a4:f8:cb:b7:81:f8:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E1:44:08:7A:47:AD:93:60:00:2E:D8:90:85:CA:36:CC:E9:DA:57
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b0:99:57:53:a5:b4:c3:da:a3:5d:48:d1:e6:89:18:8b:3c:
86:cc:cf:20:79:45:0e:ae:25:52:a1:41:0e:df:5b:cc:70:e9:
4d:64:bd:aa:80:89:9f:b8:47:3c:91:88:de:b4:4b:db:8f:b5:
ae:74:1f:76:9a:44:89:a7:e3:f7:29:b2:f8:c6:91:de:7b:19:
e8:98:e4:5e:5e:7e:74:1c:41:92:d0:ba:87:68:25:57:78:70:
d6:37:20:7f:c5:15:53:b5:2e:b6:69:7a:f4:9b:b8:14:1b:14:
ad:3a:9a:db:a4:f4:32:ef:3d:9c:6f:32:11:45:7a:c7:69:5d:
e7:1c:1e:02:4a:fa:0f:4b:33:bd:10:d9:29:a4:bc:0f:e6:a3:
29:da:e5:b3:cc:5b:3c:e3:5b:45:e1:1d:12:3e:b2:97:93:74:
ec:ec:ab:cf:c1:6a:46:bb:5a:2f:e9:1c:7c:65:75:c5:e9:a9:
ec:f1:9b:13:4b:db:55:2f:2a:0c:99:9e:c7:12:39:5a:cd:d5:
46:84:13:4f:d5:70:ec:2c:e3:32:be:fc:38:a5:92:0e:2d:52:
51:f0:c5:ca:95:e5:78:47:bf:a2:b9:21:9b:99:dc:52:4d:09:
30:c4:82:a6:15:7d:b4:ad:89:f4:05:6c:a3:e0:6e:4b:c1:24:
db:06:b9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:14 2026 by rpki-client