Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: zNV5mJrlhJS4K2Iioalop2nQWBhja64chVvcvOUzOYI=
Subject key identifier: E4:CA:D5:BB:67:D3:D4:83:B9:8B:75:AA:07:23:7D:AB:02:0A:DC:44
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 019F8FEC1596F8D1F8188541D087BF98543E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 195A
Signing time: Thu 23 Jul 2026 17:00:41 +0000
Manifest this update: Thu 23 Jul 2026 17:00:41 +0000
Manifest next update: Fri 24 Jul 2026 17:00:41 +0000
Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: ZMBr5JVw6/WOLqFR1EAQHrIFv+y0BDLArOLv/SmzB2s=)
2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=)
3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:15:96:f8:d1:f8:18:85:41:d0:87:bf:98:54:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Jul 23 17:00:41 2026 GMT
Not After : Jul 24 17:00:41 2026 GMT
Subject: CN=e4cad5bb67d3d483b98b75aa07237dab020adc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:de:8d:75:bc:6e:62:4a:cf:95:3a:1c:15:b4:
c0:c6:cd:1b:2a:e1:9d:35:d1:fc:74:de:ec:a9:a5:
de:f1:ca:e9:1e:d8:4b:4b:6d:e1:1a:56:f1:c9:fa:
ff:ec:5a:bc:dd:7b:54:6c:e2:b3:52:8f:ad:79:fc:
f4:76:84:03:15:f9:cf:a5:2c:b3:2c:be:33:de:7d:
37:8d:7b:c6:7b:ad:20:df:71:f9:1b:f4:d1:d7:21:
e0:4b:31:1c:22:9a:76:76:1e:40:36:fc:d0:73:04:
2a:19:d9:8f:9e:99:04:30:61:ba:39:eb:fa:4e:01:
f4:2e:29:47:57:ca:81:2d:b9:1c:14:1a:36:0e:ff:
89:b8:ea:63:f5:7d:16:9a:c6:f7:0b:58:55:aa:d7:
56:51:4d:19:fa:26:3d:4f:7a:5a:c6:36:16:e2:48:
00:6a:30:c2:bd:22:84:83:c4:98:b0:7c:3b:dd:2f:
17:5b:8c:61:41:6b:fe:d7:92:17:0b:eb:2b:ef:f6:
57:0a:f7:3a:39:50:cf:2a:ca:46:d3:9a:10:36:f6:
eb:71:26:4a:6c:35:57:ed:30:c7:4f:8a:a4:50:c8:
ac:ad:7f:ba:ee:95:bf:27:8e:f5:ba:aa:24:99:3f:
f2:b1:2f:cd:6c:08:88:e5:18:c9:be:1a:04:2f:0f:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CA:D5:BB:67:D3:D4:83:B9:8B:75:AA:07:23:7D:AB:02:0A:DC:44
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c4:29:0a:fc:1b:13:9c:aa:5b:20:ed:6e:11:d4:2e:7a:ab:
c5:fe:28:8e:f2:16:87:c6:b9:e7:c2:ad:4e:4c:ef:8e:a1:f3:
20:b1:44:17:9e:d2:22:6b:c1:fe:56:57:46:13:32:24:bc:bc:
3a:80:9b:94:1c:68:1d:5d:65:f7:70:ee:e1:af:f4:f9:ea:b2:
fa:b9:3d:3c:c1:33:b2:13:a1:3e:f2:27:66:94:eb:30:00:6d:
40:aa:6d:5b:22:91:4e:32:b0:ad:a6:3b:66:86:bc:2c:4a:73:
e9:3b:46:96:95:7c:9a:af:ee:a0:e9:58:ed:8c:3c:35:96:85:
c1:62:84:00:78:29:5b:fd:73:91:bc:b2:2d:89:37:08:79:1f:
4e:25:ee:06:6c:b5:23:ef:07:5a:fc:ef:91:55:0f:47:14:ad:
d7:45:b7:70:f0:ef:4c:84:fd:94:a5:b8:f1:45:91:84:56:33:
46:3e:7b:2f:c6:bd:5d:7b:01:29:1b:fd:7a:07:e2:cb:5c:49:
a7:32:52:ee:83:d9:0b:4e:58:be:a2:5d:63:a1:3a:a4:35:b7:
ec:ee:0d:89:ca:ef:28:89:4a:3a:2a:0c:e8:5b:bc:d4:b4:b6:
84:b2:b4:95:0f:4c:40:f9:b1:44:7a:02:fb:06:12:58:d5:f2:
89:1b:4b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:20 2026 by rpki-client