Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: vPyBv6zppKTRkoaKzygRHk6e2drBYO9dU29ZKbbRTWY=
Subject key identifier: 6B:CC:FE:A7:76:47:06:BC:E8:F5:7A:51:68:C6:4C:CC:DC:CE:ED:A3
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 019D27E0773D54EB672C93E0AAAFE8616045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 079D
Signing time: Thu 26 Mar 2026 02:01:55 +0000
Manifest this update: Thu 26 Mar 2026 02:01:55 +0000
Manifest next update: Fri 27 Mar 2026 02:01:55 +0000
Files and hashes: 1: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: 5weIlscdbE3RKH2rygqalUti7BA60K/CaGQloMaoqKs=)
2: SiLu5OANnXtEnRetQfH1ZWFpQsU.roa (hash: jrPIIfPO8oeco1J59fYkCNOB0H2CsAYo7rB8pSDwKoQ=)
3: xSjE3bBtLI3wIGUSIDiGA4kRZAc.roa (hash: 6Zk3im3xm++UnI7UtsvKNEmT06CmLqVZWX5pAS6VO04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:77:3d:54:eb:67:2c:93:e0:aa:af:e8:61:60:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Mar 26 02:01:55 2026 GMT
Not After : Mar 27 02:01:55 2026 GMT
Subject: CN=6bccfea7764706bce8f57a5168c64cccdcceeda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:cc:87:ec:9e:be:33:f3:5b:2f:5e:be:8a:
68:3a:54:83:3d:65:06:5d:09:4b:be:f2:bb:2f:a2:
78:a6:59:02:c4:30:07:6f:0b:27:84:88:e5:9b:a2:
66:d5:28:9a:ed:fd:30:8b:f0:9b:d8:1a:23:ea:c3:
67:d7:48:11:d2:e0:ba:b8:54:a0:62:61:6c:a0:e0:
f7:57:23:92:08:18:01:36:43:15:c7:f3:2e:40:53:
e1:69:64:ae:af:90:04:51:d1:93:91:77:cd:0b:23:
e1:20:e4:2e:0f:fd:1f:89:3f:53:3a:13:42:07:32:
2a:71:0a:0c:01:2f:98:46:c3:9e:23:05:d0:c7:92:
3d:a9:4c:2f:d7:88:b0:f8:f5:86:50:4c:36:e6:dd:
b3:4d:63:87:91:a9:0a:5e:89:91:d6:75:48:12:35:
eb:9b:fe:28:50:82:a5:60:ae:5c:f3:f0:9c:28:bd:
bf:3b:11:b4:7b:fc:5d:ae:e0:70:59:90:ad:b4:97:
31:ca:c9:1d:a5:bb:06:8d:aa:33:ba:4d:83:5f:e1:
01:89:cf:82:e1:ee:3f:5f:03:59:1f:c8:f3:0d:7a:
c8:df:55:e8:d6:f3:cb:69:79:ee:51:18:3d:49:9f:
74:49:5f:66:f6:8d:22:64:37:e5:1f:49:e9:4b:c3:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CC:FE:A7:76:47:06:BC:E8:F5:7A:51:68:C6:4C:CC:DC:CE:ED:A3
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:37:14:23:ec:bb:07:a4:9c:dc:bf:f1:d8:29:05:0d:36:5d:
63:86:e7:7e:c3:2f:14:89:34:c8:79:44:87:6a:cd:31:33:e3:
0e:29:72:18:ad:74:19:a4:d0:59:37:bb:a4:e1:81:08:99:9b:
50:8b:0d:0c:e9:a5:7c:8d:1f:ae:a2:40:80:0b:71:32:0a:16:
0f:64:73:1f:dd:7f:29:52:39:90:fb:8f:0d:ec:44:b8:ec:77:
b7:05:e6:ea:68:59:87:19:26:92:0d:24:77:04:72:91:d2:43:
36:8a:fd:39:20:eb:c5:0b:23:3c:a0:90:f7:5c:21:a5:63:44:
8d:e9:e4:80:d2:a0:90:04:a3:ad:9b:c0:e9:f8:34:04:d3:c0:
a5:7c:06:ce:5a:a7:50:32:50:5d:25:e1:83:21:4f:e9:24:d3:
82:b1:58:c3:1b:cb:86:4b:6d:86:f5:c8:b7:0a:da:01:d8:fb:
eb:27:f4:63:01:b8:74:ed:c2:3d:1d:bb:4e:06:ce:5a:95:e1:
57:e8:3a:f6:74:c7:fd:a6:65:6c:db:8b:75:2a:5c:53:ac:e2:
e5:6e:3d:ab:00:cf:e1:70:51:bf:ea:cf:1e:11:8d:a2:65:24:
00:7e:c2:04:a4:fe:bf:30:6b:58:8b:6a:a2:81:7d:34:82:68:
c3:21:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:04 2026 by rpki-client