Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
File: 70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json)
Hash identifier: ByOPtapzFemu8JUxAAMmIr0Lz9iypMXLsqb52tFAGCM=
Subject key identifier: A5:F2:AF:34:1D:90:17:67:1F:9E:FA:6E:CA:51:81:70:9E:D9:04:F0
Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Certificate serial: 01A1DCB95D7B64696623416527EB3C3044D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 01:01:37 +0000
Manifest this update: Sun 15 Nov 2026 01:01:37 +0000
Manifest next update: Mon 16 Nov 2026 01:01:37 +0000
Files and hashes: 1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: Ka2eS7DtUbc7DBsWEob6UO9pY20yKANVPPPMxOInCaU=)
2: iihdxArhWBfRd2TbdfbS7PBd2-A.roa (hash: YhBcDUdnzWiPDeX7N0lIwAMHxmHjRf7w0DKaQDLlNXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:5d:7b:64:69:66:23:41:65:27:eb:3c:30:44:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Validity
Not Before: Nov 15 01:01:37 2026 GMT
Not After : Nov 16 01:01:37 2026 GMT
Subject: CN=a5f2af341d9017671f9efa6eca5181709ed904f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:f7:52:85:9a:10:05:f2:42:39:0f:c5:b4:
3a:9b:f2:51:ba:60:08:74:59:b9:b5:bf:e2:66:7e:
48:b6:1d:1a:bb:75:20:8e:56:2e:fe:63:38:f0:55:
f7:41:da:5f:da:36:a3:e8:2b:69:91:73:ca:56:d4:
28:5e:72:0e:7b:d8:6c:12:0e:40:7f:9b:f3:b1:ae:
51:f4:15:cb:8c:81:a2:de:33:40:9b:a3:8b:29:08:
ae:80:7f:55:f6:8e:c1:89:59:80:ce:b7:12:de:c6:
44:ff:5f:5a:30:a9:47:60:9e:25:63:3f:00:79:ef:
32:76:e8:e4:04:5d:ad:f7:b7:0a:dc:e4:20:49:ff:
e5:e1:76:b3:b1:93:92:11:e8:74:6b:6a:73:e0:74:
ed:85:bf:10:2a:a7:d5:0a:2d:35:f0:de:e7:76:a9:
30:6f:f3:eb:57:10:7c:8a:8c:27:c7:0a:44:c1:0b:
3d:e2:59:1e:7d:b3:55:62:ac:20:93:c0:30:f3:a2:
29:52:ff:90:d5:43:a3:0a:42:4e:d8:95:8e:6c:79:
e2:49:7f:81:44:e1:da:28:1a:da:0f:b8:8d:70:1a:
6c:99:3a:52:cd:9d:0f:27:a2:ca:9d:d0:35:54:eb:
1b:17:6b:90:1a:69:b7:1a:72:0a:ec:50:5d:1b:0f:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F2:AF:34:1D:90:17:67:1F:9E:FA:6E:CA:51:81:70:9E:D9:04:F0
X509v3 Authority Key Identifier:
keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ba:17:b0:cd:4e:07:21:f5:ca:f5:e4:78:39:a9:59:e0:66:
e4:44:5c:a0:09:88:2a:e4:fd:81:23:c9:58:8b:66:f5:21:24:
5e:d8:90:63:68:22:d3:39:35:0f:0d:be:52:38:fb:f9:99:4c:
e7:9c:8d:dd:67:42:3e:0f:09:d9:9f:58:29:68:a8:6a:bd:a0:
0b:ec:bb:cf:87:93:4a:ed:a5:55:30:bb:ed:00:3a:a5:29:01:
8e:7a:c3:b6:80:48:79:51:63:6e:1c:a3:75:f3:e8:23:b6:39:
38:5b:42:45:8b:21:1f:94:6c:f6:ee:82:7e:6a:28:1f:81:05:
a4:04:f9:15:a1:1a:7a:4c:29:8b:d4:db:99:ef:1a:e5:c7:f1:
6e:dc:b8:42:c3:aa:a2:6d:f6:6b:cf:8c:00:88:fb:35:4c:33:
fe:93:1d:a6:6d:d0:34:3c:2e:3d:96:bd:72:ce:fa:ea:73:2f:
6a:0e:f7:de:b1:3a:ef:8f:b9:b7:fa:4b:3c:c8:14:d4:88:e3:
5b:39:9f:c6:e9:e2:09:73:a5:07:a2:b8:77:fe:b5:1f:ae:16:
d7:2b:a6:92:83:7c:cf:ef:a4:03:43:23:30:1b:25:4b:7b:89:
6a:dd:89:de:92:f3:20:32:e9:17:00:4c:c4:d7:15:c1:df:52:
33:4d:62:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuV17ZGlmI0FlJ+s8METWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDQwZTEzY2QyNjExMmNjYjU5NTE3NjBmY2ZiMmQ0OTE2
ZDcxMjcwHhcNMjYxMTE1MDEwMTM3WhcNMjYxMTE2MDEwMTM3WjAzMTEwLwYDVQQD
EyhhNWYyYWYzNDFkOTAxNzY3MWY5ZWZhNmVjYTUxODE3MDllZDkwNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrD3UoWaEAXyQjkPxbQ6m/JRumAI
dFm5tb/iZn5Ith0au3UgjlYu/mM48FX3Qdpf2jaj6CtpkXPKVtQoXnIOe9hsEg5A
f5vzsa5R9BXLjIGi3jNAm6OLKQiugH9V9o7BiVmAzrcS3sZE/19aMKlHYJ4lYz8A
ee8ydujkBF2t97cK3OQgSf/l4XazsZOSEeh0a2pz4HTthb8QKqfVCi018N7ndqkw
b/PrVxB8iownxwpEwQs94lkefbNVYqwgk8Aw86IpUv+Q1UOjCkJO2JWObHniSX+B
ROHaKBraD7iNcBpsmTpSzZ0PJ6LKndA1VOsbF2uQGmm3GnIK7FBdGw+JdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXyrzQdkBdnH576bspRgXCe2QTwMB8GA1UdIwQY
MBaAFO9EDhPNJhEsy1lRdg/PstSRbXEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDkt
N2E4MzY4MDBlOWY3LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDktN2E4MzY4MDBlOWY3
LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZroXsM1O
ByH1yvXkeDmpWeBm5ERcoAmIKuT9gSPJWItm9SEkXtiQY2gi0zk1Dw2+Ujj7+ZlM
55yN3WdCPg8J2Z9YKWioar2gC+y7z4eTSu2lVTC77QA6pSkBjnrDtoBIeVFjbhyj
dfPoI7Y5OFtCRYshH5Rs9u6CfmooH4EFpAT5FaEaekwpi9Tbme8a5cfxbty4QsOq
om32a8+MAIj7NUwz/pMdpm3QNDwuPZa9cs766nMvag733rE674+5t/pLPMgU1Ijj
WzmfxuniCXOlB6K4d/61H64W1yumkoN8z++kA0MjMBslS3uJat2J3pLzIDLpFwBM
xNcVwd9SM01i+g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:23:04 2026 by rpki-client