Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
File: 70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json)
Hash identifier: aUFCQzXPZqqz0WVbF4JVTWiWM1XAjbmynm3CaTGqM7k=
Subject key identifier: 0A:40:52:8B:A4:21:9E:E6:7E:09:1C:BA:0C:66:8A:C2:C7:75:A9:40
Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Certificate serial: 019D299739BB4999CF76075E8A4B69D2F73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:01:09 +0000
Manifest this update: Thu 26 Mar 2026 10:01:09 +0000
Manifest next update: Fri 27 Mar 2026 10:01:09 +0000
Files and hashes: 1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: 5grRHRV24mJ2ZoWPORiQwJP9lsi+EquMpoga6sIlZPo=)
2: iihdxArhWBfRd2TbdfbS7PBd2-A.roa (hash: YhBcDUdnzWiPDeX7N0lIwAMHxmHjRf7w0DKaQDLlNXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:39:bb:49:99:cf:76:07:5e:8a:4b:69:d2:f7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Validity
Not Before: Mar 26 10:01:09 2026 GMT
Not After : Mar 27 10:01:09 2026 GMT
Subject: CN=0a40528ba4219ee67e091cba0c668ac2c775a940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:84:d1:28:e5:3a:d8:cd:ce:81:b7:cc:e1:
7c:53:35:7a:b3:17:57:c9:bc:50:dc:cf:2f:df:5e:
bf:3c:85:b8:8e:a6:f0:e7:13:84:67:46:2d:6a:5b:
24:05:80:5e:ce:46:89:6a:5f:ac:d9:f6:e7:f2:25:
ed:d1:5a:24:8e:12:f8:3c:22:ce:9c:f6:1d:3f:ad:
5b:9d:e0:50:1b:00:8c:a5:60:b0:19:f2:ba:6e:0b:
5b:03:e5:86:e2:e2:dd:48:d4:ed:08:f7:59:9c:33:
91:4e:aa:5a:62:75:58:d6:25:0f:ff:54:ed:3c:f7:
09:64:fc:4c:a4:74:ec:cf:e0:d5:af:b4:0d:74:20:
fb:16:93:c7:77:19:7f:ae:d3:83:a3:64:bd:a5:a2:
71:a2:a2:f3:76:2e:d0:b2:2a:c8:5f:f2:33:a2:02:
98:6a:b1:a2:5d:78:49:e1:b4:0c:77:62:52:75:d0:
07:4f:ce:ec:16:ac:7a:38:e4:56:af:b4:7e:f6:2d:
f9:ea:8a:1b:94:b9:c4:af:2a:25:53:52:82:7e:51:
24:ac:1b:02:5e:a6:9b:a5:cd:4f:f2:8c:87:cb:bd:
9a:71:fc:6e:6d:90:8a:1f:2e:05:75:00:e7:f1:52:
d0:c5:34:d6:45:7d:b8:33:3d:40:e1:ef:99:d0:b7:
c2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:40:52:8B:A4:21:9E:E6:7E:09:1C:BA:0C:66:8A:C2:C7:75:A9:40
X509v3 Authority Key Identifier:
keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bd:5f:64:ba:b2:0e:36:5b:4f:cb:95:22:63:04:64:57:0a:
8d:b7:b2:9e:99:02:37:28:32:07:25:75:96:2d:0d:53:11:45:
ac:b6:24:4f:66:a2:2e:46:1d:9f:d0:7f:6a:ee:fd:57:95:36:
10:91:79:a8:39:93:d1:a8:34:b6:51:05:e1:8e:ce:e9:80:9e:
68:46:53:68:1f:c9:b3:f4:27:37:15:b5:89:e7:5d:bd:ef:02:
02:d8:97:7b:2e:b8:10:3c:67:c2:a3:28:be:14:a1:b4:39:f8:
42:b2:c0:b8:c6:fb:5b:1a:39:2d:28:32:24:a4:7b:cb:88:b4:
cf:50:c5:aa:29:89:81:f5:f5:51:c8:82:7e:32:19:dd:01:f8:
0b:06:88:1b:7a:9d:a5:d2:58:5e:54:6b:9c:d7:1b:22:7d:b5:
aa:43:7a:5d:32:60:44:58:67:53:72:dd:97:85:ad:c7:6c:83:
c3:50:19:74:89:e6:55:81:cc:75:f5:73:86:af:02:03:80:eb:
13:48:fa:d9:bb:40:b4:93:da:d3:ff:48:a3:25:17:b2:e3:11:
cb:f3:65:50:2e:f1:f5:ad:ab:4d:52:97:41:ee:3f:09:58:e4:
90:1b:51:ee:a0:d7:0f:e8:ce:37:be:11:98:81:92:fd:44:fe:
d0:f7:38:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plzm7SZnPdgdeiktp0vc9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDQwZTEzY2QyNjExMmNjYjU5NTE3NjBmY2ZiMmQ0OTE2
ZDcxMjcwHhcNMjYwMzI2MTAwMTA5WhcNMjYwMzI3MTAwMTA5WjAzMTEwLwYDVQQD
EygwYTQwNTI4YmE0MjE5ZWU2N2UwOTFjYmEwYzY2OGFjMmM3NzVhOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT+E0SjlOtjNzoG3zOF8UzV6sxdX
ybxQ3M8v316/PIW4jqbw5xOEZ0YtalskBYBezkaJal+s2fbn8iXt0VokjhL4PCLO
nPYdP61bneBQGwCMpWCwGfK6bgtbA+WG4uLdSNTtCPdZnDORTqpaYnVY1iUP/1Tt
PPcJZPxMpHTsz+DVr7QNdCD7FpPHdxl/rtODo2S9paJxoqLzdi7QsirIX/IzogKY
arGiXXhJ4bQMd2JSddAHT87sFqx6OORWr7R+9i356ooblLnEryolU1KCflEkrBsC
Xqabpc1P8oyHy72acfxubZCKHy4FdQDn8VLQxTTWRX24Mz1A4e+Z0LfCMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApAUoukIZ7mfgkcugxmisLHdalAMB8GA1UdIwQY
MBaAFO9EDhPNJhEsy1lRdg/PstSRbXEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDkt
N2E4MzY4MDBlOWY3LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDktN2E4MzY4MDBlOWY3
LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVL1fZLqy
DjZbT8uVImMEZFcKjbeynpkCNygyByV1li0NUxFFrLYkT2aiLkYdn9B/au79V5U2
EJF5qDmT0ag0tlEF4Y7O6YCeaEZTaB/Js/QnNxW1ieddve8CAtiXey64EDxnwqMo
vhShtDn4QrLAuMb7Wxo5LSgyJKR7y4i0z1DFqimJgfX1UciCfjIZ3QH4CwaIG3qd
pdJYXlRrnNcbIn21qkN6XTJgRFhnU3Ldl4Wtx2yDw1AZdInmVYHMdfVzhq8CA4Dr
E0j62btAtJPa0/9IoyUXsuMRy/NlUC7x9a2rTVKXQe4/CVjkkBtR7qDXD+jON74R
mIGS/UT+0Pc4QQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:38 2026 by rpki-client