Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: tT6iw/MCXqVvlhE76uYrvM2mkOFi63ktDo+uZsN+67E=
Subject key identifier: 02:52:E7:04:9D:D1:D7:99:C4:8F:1A:37:71:3A:9D:9F:89:81:BE:E6
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 019DCDF5055C0674705486D8CBA2FDA8FAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 07F3
Signing time: Mon 27 Apr 2026 08:01:19 +0000
Manifest this update: Mon 27 Apr 2026 08:01:19 +0000
Manifest next update: Tue 28 Apr 2026 08:01:19 +0000
Files and hashes: 1: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: uO+HVMkhs5LHRmWP2XrVWKOjUk9mXURowkVE89xiAeM=)
2: SiLu5OANnXtEnRetQfH1ZWFpQsU.roa (hash: jrPIIfPO8oeco1J59fYkCNOB0H2CsAYo7rB8pSDwKoQ=)
3: xSjE3bBtLI3wIGUSIDiGA4kRZAc.roa (hash: 6Zk3im3xm++UnI7UtsvKNEmT06CmLqVZWX5pAS6VO04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:05:5c:06:74:70:54:86:d8:cb:a2:fd:a8:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Apr 27 08:01:19 2026 GMT
Not After : Apr 28 08:01:19 2026 GMT
Subject: CN=0252e7049dd1d799c48f1a37713a9d9f8981bee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:47:d7:02:f3:2f:5a:32:d3:dc:32:94:59:
99:a3:3f:fb:e8:d2:47:d5:bd:0f:11:24:ea:b3:d5:
b4:22:31:18:d8:91:ad:6d:e2:20:2b:12:2f:45:44:
43:26:b6:66:cc:5c:44:ed:39:2a:45:4e:fc:ac:23:
9e:2f:51:18:a0:28:2b:42:5a:fc:b2:bb:5e:91:dd:
92:08:67:55:46:61:0c:4b:d8:c7:2b:49:e4:99:0b:
77:9f:81:df:85:93:7c:2a:65:52:2c:1d:a3:3f:de:
86:87:69:f5:20:2c:16:55:11:ae:94:d3:fa:bf:70:
3c:94:e9:a3:66:94:24:f8:23:52:c8:e4:eb:e1:e7:
80:0d:fd:8e:9d:48:f9:aa:75:05:c5:f0:4a:4e:f6:
ec:e5:5e:5f:c8:a1:8b:7b:06:98:0f:82:7e:53:3f:
98:34:ba:b6:81:66:b8:d8:38:ab:7d:0e:a4:99:a7:
25:99:18:16:fd:c2:29:28:06:91:8a:a5:58:3a:16:
0f:af:7c:ef:ab:08:7e:a1:5d:b2:94:c2:e6:fe:f2:
3a:2e:06:fe:d5:89:81:92:f9:04:9e:c8:16:97:60:
9b:59:fe:7a:4b:0f:a3:27:ec:ae:84:fb:11:8e:aa:
b0:e1:3b:35:6b:dc:83:c5:c2:d3:68:14:94:df:f0:
24:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:52:E7:04:9D:D1:D7:99:C4:8F:1A:37:71:3A:9D:9F:89:81:BE:E6
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1d:d7:ad:0e:00:d3:b4:bb:92:dc:a6:74:a2:3d:22:02:eb:
12:f2:79:d0:00:db:d2:4b:a5:6c:a8:36:2c:cf:02:71:ae:3e:
67:b8:ad:be:8a:68:43:63:97:21:4d:a3:4b:e5:f6:50:78:47:
f6:69:f5:64:38:e8:81:8b:fa:f5:3d:34:0b:b1:7b:41:48:40:
3e:dd:8a:1d:ad:dd:27:d3:18:b6:5c:1b:14:09:32:c8:16:b9:
2b:87:d2:4f:72:8d:d5:53:94:9f:cf:f2:1d:d4:84:81:65:f3:
e9:be:86:0d:e3:55:9e:16:94:ed:10:96:9d:99:fb:83:47:1e:
c7:22:1f:98:ba:a0:70:35:62:88:00:9e:29:fe:50:ee:bf:d9:
1a:26:70:57:cf:b5:2d:84:0a:f2:60:8c:7a:20:66:a3:06:ee:
8c:69:16:a6:61:93:5a:d2:32:ef:05:4c:c4:d9:31:7a:2b:bf:
81:de:d0:11:88:bb:36:7a:1f:31:03:a6:a1:11:3f:63:e5:80:
bb:5c:f2:cf:1f:7f:95:4a:3e:e1:e5:f2:61:96:f7:90:bd:e6:
20:82:3d:12:d7:18:2c:5e:f0:9a:ec:96:e0:8c:2f:5c:b4:08:
1c:d9:78:01:a8:9c:36:db:69:5b:1e:af:ad:f2:41:0c:61:b6:
77:96:b9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:30:56 2026 by rpki-client