Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: TZnfDT/vWDyP/xevRbbGgUA57Voz4iXSaAE4nYdce7k=
Subject key identifier: F5:C6:C0:37:59:0F:9B:C7:9B:76:65:FE:42:A2:99:E1:E5:E7:9F:BA
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 01A186088C81A48ADA9E2E147DEC9BB4B7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 09E0
Signing time: Thu 29 Oct 2026 05:01:09 +0000
Manifest this update: Thu 29 Oct 2026 05:01:09 +0000
Manifest next update: Fri 30 Oct 2026 05:01:09 +0000
Files and hashes: 1: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: w0OLgE8bTWfnO5Pxagiq2VuwTiU7bk5UYHfIU6KVnaE=)
2: SiLu5OANnXtEnRetQfH1ZWFpQsU.roa (hash: jrPIIfPO8oeco1J59fYkCNOB0H2CsAYo7rB8pSDwKoQ=)
3: xSjE3bBtLI3wIGUSIDiGA4kRZAc.roa (hash: 6Zk3im3xm++UnI7UtsvKNEmT06CmLqVZWX5pAS6VO04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:08:8c:81:a4:8a:da:9e:2e:14:7d:ec:9b:b4:b7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Oct 29 05:01:09 2026 GMT
Not After : Oct 30 05:01:09 2026 GMT
Subject: CN=f5c6c037590f9bc79b7665fe42a299e1e5e79fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b6:78:38:bd:17:a4:e7:ee:66:87:57:45:45:
90:5d:3b:d8:d7:e9:af:42:b7:53:35:c8:e8:91:fc:
aa:c6:83:f1:e4:6c:40:9a:aa:15:61:53:7c:bc:19:
68:c1:4e:6c:27:f8:3a:7a:ef:5e:13:89:16:e7:87:
ae:62:76:48:f8:3e:44:95:b1:13:a0:2a:7b:d8:16:
f0:f9:48:0d:03:4f:84:bf:d1:34:ac:83:97:b4:0f:
d0:93:3c:40:9f:85:4a:29:c0:0e:4d:42:2f:98:5c:
b9:e4:a1:d2:45:63:2e:20:3f:a8:a3:04:02:71:06:
19:4d:59:18:0e:84:3a:74:2e:04:8e:05:d4:a0:6a:
3b:07:0c:e2:b0:19:c0:84:34:1c:59:79:59:cf:88:
26:09:b0:c2:29:8b:1e:d8:cd:a4:9b:4d:fa:c4:e2:
65:7c:7c:f1:f7:93:02:39:1b:d9:98:b3:ad:37:e4:
1e:55:bf:cf:c4:df:b6:74:33:4f:d7:77:82:a0:a8:
2b:b7:71:cb:f6:c8:68:17:af:96:19:7b:85:b6:d2:
2d:f8:8f:82:fe:88:a9:f5:64:ed:86:f7:99:3f:bf:
ed:19:0a:07:ca:3e:6e:51:a0:68:70:45:44:25:70:
da:36:08:f6:7a:66:30:f3:52:e8:3e:b1:60:3c:90:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:C0:37:59:0F:9B:C7:9B:76:65:FE:42:A2:99:E1:E5:E7:9F:BA
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:41:cf:fb:da:29:0e:4a:16:a4:eb:c4:ee:80:d2:cc:6f:be:
26:17:b8:4b:16:2f:47:40:ab:04:51:81:8c:50:98:98:34:92:
f0:aa:35:4b:a4:48:b4:b7:5f:cc:f4:e7:d9:14:68:0a:cc:e5:
f6:3d:67:f8:64:46:04:e8:9b:31:bd:cd:c9:78:78:72:14:32:
67:35:f5:6d:47:6c:b0:2d:73:77:6d:75:5a:ba:7b:6a:3e:e0:
10:b9:ea:24:88:bd:76:05:47:19:4d:a6:d5:3d:21:29:b0:e7:
80:15:d8:3b:ad:45:63:25:ac:eb:9b:27:9d:8c:ea:e5:11:0a:
20:58:13:40:9f:0a:d2:4a:01:73:f1:d6:8f:79:26:31:de:44:
29:96:c2:c9:c5:74:ad:eb:cd:e0:20:c0:51:48:64:0d:ee:3e:
92:55:91:3b:52:cb:b1:85:a8:76:8b:eb:21:74:c0:bd:86:88:
51:83:4b:f6:6b:83:30:f2:03:51:52:3b:2d:f2:0b:1a:cb:85:
b2:21:70:a0:e8:4b:45:3e:ef:8d:11:55:d4:99:75:50:b0:08:
26:3d:b5:bf:9b:4d:09:e8:a9:8d:f8:28:a8:4e:4d:6d:5d:4d:
60:54:a1:08:24:48:cf:91:20:e8:10:56:77:be:fd:ed:06:b2:
77:33:75:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:43:08 2026 by rpki-client