
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: IkcU+JSAAoThoe0Re/CrWgyqW23iq+ZlggfeBcVISBY=
Subject key identifier: EC:FC:01:31:42:71:A2:35:B0:AC:FB:C6:03:D6:9B:40:6C:B6:70:16
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 019F9090FFD614EC9F46B7DC524181D411B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 0DEF
Signing time: Thu 23 Jul 2026 20:00:49 +0000
Manifest this update: Thu 23 Jul 2026 20:00:49 +0000
Manifest next update: Fri 24 Jul 2026 20:00:49 +0000
Files and hashes: 1: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: AvuAbheoLXXzaHRXQkhpK6aXc5a7Fv0HuyExYvMsfMc=)
2: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (hash: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:ff:d6:14:ec:9f:46:b7:dc:52:41:81:d4:11:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Jul 23 20:00:49 2026 GMT
Not After : Jul 24 20:00:49 2026 GMT
Subject: CN=ecfc01314271a235b0acfbc603d69b406cb67016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:38:96:23:86:74:0d:15:ac:3a:c4:06:e2:
19:30:4d:cd:97:a6:ec:e4:7a:e7:4e:71:89:3b:08:
40:d2:48:da:02:a9:ed:aa:ac:ad:6b:cb:23:4d:32:
1a:59:94:09:9e:6f:a6:aa:a2:eb:bf:0a:74:1f:1e:
73:d7:c3:74:b3:c8:e8:db:76:1b:8a:54:27:d5:50:
04:e6:27:34:28:bb:b8:00:ce:06:19:d1:2a:50:ab:
ae:47:53:fb:f9:a9:db:7a:6e:ad:91:a0:56:1c:d4:
7f:25:ac:a8:03:2b:d0:a3:4d:31:e0:17:ed:2d:df:
c7:61:f4:a4:35:29:ec:1c:52:17:2a:86:a4:30:1b:
a2:b5:d7:10:be:cc:dd:9a:96:c3:ac:cc:1e:31:0c:
34:e4:87:73:49:6e:7e:5a:32:eb:4d:f5:b3:81:ed:
f6:5f:83:ea:44:94:17:6e:13:5b:c0:5e:d2:c4:57:
d9:ea:ea:6b:7a:51:c8:19:7d:80:69:03:79:16:05:
85:3f:e6:72:76:2e:93:a6:e7:b3:7f:f8:8d:a4:91:
6f:7f:f8:e4:9a:cb:12:11:9a:02:57:20:91:a8:d5:
f7:0b:a1:ba:72:f7:81:04:25:90:d2:d1:02:1e:15:
16:02:d7:7e:fe:4d:03:33:ed:90:29:b0:ed:22:34:
c7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FC:01:31:42:71:A2:35:B0:AC:FB:C6:03:D6:9B:40:6C:B6:70:16
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8f:3c:74:df:8f:c3:ff:9c:f3:97:84:69:fb:97:7e:d8:0e:
ec:53:97:e4:86:a2:73:e6:c9:0a:a0:0e:8e:4d:3f:73:eb:9d:
21:1a:1e:97:2a:8d:fd:4c:89:2f:a8:62:a6:89:a2:bf:44:62:
dc:c9:16:bd:89:f6:37:54:13:c9:65:4d:f7:51:72:f2:29:b4:
98:5b:41:f7:c5:47:bc:b9:fb:9b:63:73:8e:1e:a9:2b:34:4d:
df:79:d8:d2:2e:49:09:e3:3e:ec:e7:cc:08:db:55:f8:ad:bd:
7c:79:9b:12:70:00:9d:be:58:5b:26:29:99:4a:a5:8d:19:65:
d2:75:c4:43:81:98:99:4a:f1:26:26:d9:07:c2:d5:5a:8a:5b:
19:42:4d:08:e4:64:f2:40:db:06:7d:e8:a0:5b:d7:7b:6d:c8:
dc:e9:a0:94:4a:89:67:0e:c4:0a:2e:23:5c:38:ec:2a:f1:6f:
72:af:a7:a4:93:31:b3:8c:82:eb:22:53:aa:a9:53:6c:c8:03:
e4:84:d1:a4:7b:7b:7e:52:7f:28:43:fa:4d:70:5c:2f:29:f1:
b7:d9:d9:45:02:41:70:ef:2e:ca:9b:77:1a:1a:c1:36:5b:f7:
6d:c5:05:b7:f3:6c:3d:c3:76:3c:9d:32:3c:3e:e7:4e:d2:29:
bb:1a:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:52 2026 by rpki-client