Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: unHk1ZXEqKypcxM52pOMKfZl+KyiLtxuxebu4IQSVAg=
Subject key identifier: 74:37:00:92:38:9E:F1:39:11:A4:2F:18:3C:87:C8:61:D5:2D:BF:F4
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 01A0DB726DE14E775CACBA2F0976249A1DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 02:01:44 +0000
Manifest this update: Sat 26 Sep 2026 02:01:44 +0000
Manifest next update: Sun 27 Sep 2026 02:01:44 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: pnyGM4gd2kF8EJkO5gWZ9jeoyF0.roa (hash: 6XnmhOJq3GAmn5wQEuoQfthOvhyAwUf459ZiJFQdrrM=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: tIXJwsySijhiHMqYtXpsPvNyuesuNCr8U+ccJ3Qf9sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:6d:e1:4e:77:5c:ac:ba:2f:09:76:24:9a:1d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Sep 26 02:01:44 2026 GMT
Not After : Sep 27 02:01:44 2026 GMT
Subject: CN=74370092389ef13911a42f183c87c861d52dbff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:79:55:60:bd:1b:5e:c0:0b:84:28:fb:dd:
a1:c4:3a:49:ce:8e:c2:74:b9:65:eb:ea:0b:49:8a:
da:48:86:8a:f3:81:65:7e:74:85:64:ab:fa:4a:56:
75:e2:2e:e6:95:3b:c4:dc:69:0e:70:25:76:e1:f2:
25:84:31:a3:26:49:94:cc:bb:6f:13:c9:9f:bf:e5:
00:d6:e0:47:85:00:9d:bc:3b:86:69:74:3d:80:f1:
6f:3a:8b:44:53:54:34:2d:59:2c:f6:f7:3c:c5:23:
27:12:7d:c4:c8:9d:b6:a0:9b:b6:01:0e:a3:63:78:
d9:c5:a5:92:23:c9:25:d7:87:7b:b1:95:c2:9b:3c:
60:58:cb:03:a6:3f:49:58:33:d5:e5:0f:e3:1e:d7:
cb:ff:24:70:8f:5d:74:50:77:df:5e:38:6c:c0:19:
c0:8b:64:76:2b:ce:7d:09:c3:d0:29:34:ec:05:15:
70:0c:95:3d:aa:1c:08:f6:02:d7:b7:35:f5:7c:35:
0e:dd:db:69:46:65:ea:98:dc:d8:6a:af:34:19:d8:
39:eb:7b:8f:08:97:07:1b:02:f8:b4:0f:22:03:22:
48:12:9f:a2:86:6b:85:c1:5f:58:95:2d:d0:78:b9:
3e:67:d3:64:ae:6f:02:4c:07:82:cd:2d:36:bf:df:
2f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:37:00:92:38:9E:F1:39:11:A4:2F:18:3C:87:C8:61:D5:2D:BF:F4
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c7:25:b0:8d:48:e6:ea:df:fc:b8:1e:c8:7c:fc:ae:8b:a0:
5e:27:46:4c:cb:96:27:e8:bd:ec:1d:76:a2:ec:ca:74:90:81:
e3:0b:42:2a:e1:aa:15:bb:95:be:dd:a5:ab:47:18:70:2d:ac:
40:87:09:e5:3e:39:e6:f7:3f:11:b2:44:38:2f:15:64:b2:e4:
92:e9:09:81:e1:b9:1a:93:0e:18:4c:39:11:35:62:a1:b9:ab:
fc:b3:37:58:1f:5c:8f:a5:40:95:d6:08:78:ac:78:d9:a0:d2:
3d:a9:02:32:bf:99:9b:6a:a2:45:80:d9:cd:c6:bf:77:3d:24:
ec:6b:77:f8:e8:ab:31:39:47:1f:3e:32:50:ed:13:85:c4:42:
48:2a:f1:61:63:c3:12:45:c7:7b:0d:c4:68:89:e5:6a:b8:9b:
32:b4:c0:df:a1:13:c9:50:d2:cc:fb:43:a2:7e:35:21:ed:f9:
09:4e:3c:c8:12:d8:da:0d:cc:14:0b:8d:8c:47:e4:46:34:34:
9d:93:71:ec:fc:74:08:2a:e0:d2:c4:a7:61:5f:3e:f6:d0:53:
8c:e3:81:52:33:53:eb:b2:b9:aa:8d:c7:16:9d:29:d4:3b:1a:
43:8e:85:49:6e:47:78:63:d6:d6:ca:d3:06:48:71:72:78:93:
08:ed:fa:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbcm3hTndcrLovCXYkmh2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGVmNGE4ZWQzNzExYjZhY2Q2OGMwZjQ4ZjYyMTgzMWZk
NWFhYWUwHhcNMjYwOTI2MDIwMTQ0WhcNMjYwOTI3MDIwMTQ0WjAzMTEwLwYDVQQD
Eyg3NDM3MDA5MjM4OWVmMTM5MTFhNDJmMTgzYzg3Yzg2MWQ1MmRiZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV55VWC9G17AC4Qo+92hxDpJzo7C
dLll6+oLSYraSIaK84FlfnSFZKv6SlZ14i7mlTvE3GkOcCV24fIlhDGjJkmUzLtv
E8mfv+UA1uBHhQCdvDuGaXQ9gPFvOotEU1Q0LVks9vc8xSMnEn3EyJ22oJu2AQ6j
Y3jZxaWSI8kl14d7sZXCmzxgWMsDpj9JWDPV5Q/jHtfL/yRwj110UHffXjhswBnA
i2R2K859CcPQKTTsBRVwDJU9qhwI9gLXtzX1fDUO3dtpRmXqmNzYaq80Gdg563uP
CJcHGwL4tA8iAyJIEp+ihmuFwV9YlS3QeLk+Z9Nkrm8CTAeCzS02v98vSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQ3AJI4nvE5EaQvGDyHyGHVLb/0MB8GA1UdIwQY
MBaAFK9O9KjtNxG2rNaMD0j2IYMf1aquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDkt
Y2I5YzU4ZjUxMGNiLzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDktY2I5YzU4ZjUxMGNi
LzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8clsI1I
5urf/LgeyHz8rougXidGTMuWJ+i97B12ouzKdJCB4wtCKuGqFbuVvt2lq0cYcC2s
QIcJ5T455vc/EbJEOC8VZLLkkukJgeG5GpMOGEw5ETViobmr/LM3WB9cj6VAldYI
eKx42aDSPakCMr+Zm2qiRYDZzca/dz0k7Gt3+OirMTlHHz4yUO0ThcRCSCrxYWPD
EkXHew3EaInlaribMrTA36ETyVDSzPtDon41Ie35CU48yBLY2g3MFAuNjEfkRjQ0
nZNx7Px0CCrg0sSnYV8+9tBTjOOBUjNT67K5qo3HFp0p1DsaQ46FSW5HeGPW1srT
BkhxcniTCO36ag==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:37:09 2026 by rpki-client