Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.mft
File: 70j9hHzH_IIkciES7fij4GdNnFk.mft (raw, json)
Hash identifier: s1wwhJfhOzVtRafm/D1VvdVVHxH6vcYjjKmAmD1+PXw=
Subject key identifier: 77:6E:90:CD:D8:BC:59:47:F0:CE:23:0A:1E:5D:91:C3:97:32:17:EA
Authority key identifier: EF:48:FD:84:7C:C7:FC:82:24:72:21:12:ED:F8:A3:E0:67:4D:9C:59
Certificate issuer: /CN=ef48fd847cc7fc8224722112edf8a3e0674d9c59
Certificate serial: 019F8F7F5506BCEE932C4FCDBAEC8478B461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70j9hHzH_IIkciES7fij4GdNnFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:54 +0000
Manifest this update: Thu 23 Jul 2026 15:01:54 +0000
Manifest next update: Fri 24 Jul 2026 15:01:54 +0000
Files and hashes: 1: 70j9hHzH_IIkciES7fij4GdNnFk.crl (hash: FON/rKPC6pCm1rNZYN0i0rg2CRZpnVdgwRHPF1hepZk=)
2: LQc7fYojJgzWlrEmCIeGuS-vbEs.roa (hash: O5mcfT9HPPgkRGxxvUjGl6E4bI5HZSLCf0z5Kwq7Vw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/70j9hHzH_IIkciES7fij4GdNnFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:55:06:bc:ee:93:2c:4f:cd:ba:ec:84:78:b4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef48fd847cc7fc8224722112edf8a3e0674d9c59
Validity
Not Before: Jul 23 15:01:54 2026 GMT
Not After : Jul 24 15:01:54 2026 GMT
Subject: CN=776e90cdd8bc5947f0ce230a1e5d91c3973217ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f1:da:0b:6d:e9:97:8c:86:d7:ac:1a:65:02:
cf:a8:a9:82:1d:30:47:40:20:c5:e9:b7:a1:a4:97:
06:42:ca:89:9d:6e:f1:31:09:c5:9c:0b:60:88:6d:
40:e8:35:35:f7:df:30:d5:e3:9b:73:a6:c7:55:8a:
cc:e0:20:70:c5:3a:bf:d4:7e:e4:d3:ea:3b:79:4e:
1c:6c:a5:00:08:15:ee:3b:3d:af:68:fb:64:05:a9:
e5:12:7e:ff:9c:9d:84:8c:39:e0:16:64:61:17:f2:
1b:47:a2:29:fc:0d:50:26:c0:68:6c:f2:96:71:d8:
98:27:72:ef:b6:65:34:88:51:0f:c1:22:0f:52:8c:
64:2f:46:b2:61:5c:bc:8e:f3:dc:e4:0c:24:77:70:
5a:33:cb:1e:22:3d:39:69:55:f3:62:75:b1:bc:4a:
87:54:ba:92:7d:87:cd:97:3a:1a:d2:5e:4c:23:74:
c3:cd:9d:6b:9d:08:b1:81:0a:ae:3a:f3:32:36:8e:
ed:f0:29:2c:c6:2f:e7:c8:49:97:5c:ba:82:36:e9:
af:11:e1:27:28:8d:33:1c:0d:a5:a9:c6:65:65:ed:
f3:a5:6d:1a:c7:cb:79:63:47:4d:66:fb:65:d3:a9:
d9:ae:07:d7:e1:84:38:f0:3c:94:9d:7f:6e:81:13:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6E:90:CD:D8:BC:59:47:F0:CE:23:0A:1E:5D:91:C3:97:32:17:EA
X509v3 Authority Key Identifier:
keyid:EF:48:FD:84:7C:C7:FC:82:24:72:21:12:ED:F8:A3:E0:67:4D:9C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70j9hHzH_IIkciES7fij4GdNnFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b0:c1:87:d4:37:f8:62:4d:29:5e:cc:f8:51:1d:70:5b:40:
e6:9c:79:18:0c:c6:ba:8a:e0:22:99:31:e0:e1:e5:84:5e:05:
ed:a0:69:aa:0d:fb:6b:b0:e2:9d:56:7d:9b:c1:c6:83:84:db:
d3:a3:da:68:b3:9b:82:ad:a8:e1:fa:85:d1:88:7b:69:78:1d:
a9:81:c9:39:a5:4b:d4:17:4f:02:c6:72:0d:0d:2e:e4:d3:95:
17:7e:04:1d:4b:96:1d:d1:6c:87:40:38:52:87:a0:bf:d2:5c:
a0:64:ca:c8:73:69:b8:65:fb:82:ef:06:44:6d:08:ad:94:f5:
f0:ad:1c:02:8c:e1:86:92:5d:3d:a4:5e:9d:6a:25:e1:24:be:
27:55:ae:b7:ba:60:ad:e7:05:5d:41:49:f1:dc:5d:23:9f:1e:
90:d3:6c:4b:04:33:76:3e:e6:5a:31:d6:56:6c:d6:11:10:86:
b6:b6:ec:22:72:da:91:34:9c:af:6f:af:51:ea:01:e2:e0:26:
6d:cb:00:00:8f:20:dc:10:54:48:0c:1d:03:76:c7:3b:a8:e1:
13:3b:42:d6:75:ca:5b:09:67:56:72:2f:41:20:ca:f1:a5:c4:
29:19:57:d8:7b:8e:32:53:6b:55:3e:45:c8:70:93:19:45:2d:
26:8c:97:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:27 2026 by rpki-client