Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: XmEa0wytizlFvAuoIdvO+CKjibC5lswI13NaydcmZ8Y=
Subject key identifier: 14:53:51:A7:8E:B8:B9:B3:AA:5A:FE:DC:4C:37:3E:B8:CF:D1:E9:56
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 019EB5B2D4EC93B5CEDE3CB367ADAFDFA1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 086B
Signing time: Thu 11 Jun 2026 08:00:56 +0000
Manifest this update: Thu 11 Jun 2026 08:00:56 +0000
Manifest next update: Fri 12 Jun 2026 08:00:56 +0000
Files and hashes: 1: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: 3eaUq2fpIa7UmhqzzjbBTQqcvRxwqV/5Pbg104q5hmM=)
2: SiLu5OANnXtEnRetQfH1ZWFpQsU.roa (hash: jrPIIfPO8oeco1J59fYkCNOB0H2CsAYo7rB8pSDwKoQ=)
3: xSjE3bBtLI3wIGUSIDiGA4kRZAc.roa (hash: 6Zk3im3xm++UnI7UtsvKNEmT06CmLqVZWX5pAS6VO04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b2:d4:ec:93:b5:ce:de:3c:b3:67:ad:af:df:a1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Jun 11 08:00:56 2026 GMT
Not After : Jun 12 08:00:56 2026 GMT
Subject: CN=145351a78eb8b9b3aa5afedc4c373eb8cfd1e956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:1c:be:65:15:b6:cc:86:99:2c:51:0e:cd:
24:8c:57:4a:96:d5:5b:d0:92:2d:a6:d6:80:3c:98:
f8:a3:d4:d4:10:7c:e7:57:f4:dc:9b:08:b3:5a:80:
58:8d:0e:1d:a9:43:56:04:37:cb:04:3d:cd:26:28:
56:35:6e:af:32:1d:81:af:54:69:6f:a7:ee:37:a8:
8d:3d:f5:db:50:08:f9:7d:e2:97:14:30:1c:b7:47:
68:fb:b6:6e:a9:bb:4b:c5:9a:08:ca:de:e2:c9:cf:
65:9b:31:fb:85:33:06:9e:bd:56:59:ee:8c:cf:7b:
e1:8a:2e:aa:f2:d9:55:ad:03:74:00:c4:f0:c6:8c:
ee:f1:d2:91:23:04:52:2f:c0:5a:e6:55:e1:25:6d:
65:2a:7f:89:6b:40:12:b3:21:de:ed:20:54:0a:28:
01:14:c0:aa:7b:7e:b0:24:5c:ee:a2:91:29:ec:43:
93:05:ae:20:8c:37:81:9c:d6:66:86:f0:ef:65:cb:
d9:f7:f4:19:27:78:c4:9c:8d:86:bf:a6:22:ff:f3:
7f:58:21:0a:cc:e2:aa:52:59:85:a4:73:f6:93:f9:
44:fb:eb:49:57:67:69:f4:89:87:16:b8:4a:bb:05:
60:53:ed:f9:bd:45:6f:0e:fe:6a:68:99:a3:b8:48:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:53:51:A7:8E:B8:B9:B3:AA:5A:FE:DC:4C:37:3E:B8:CF:D1:E9:56
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:93:c5:20:2a:9d:f9:0b:d0:6f:2a:c6:ec:7f:13:54:01:8c:
10:90:2f:05:b4:f1:a7:49:1b:6b:68:2c:56:d8:34:6d:da:5c:
f8:b5:5c:79:a0:c8:69:15:5e:d2:43:68:a7:4c:17:dc:d1:56:
61:70:88:c1:db:b2:d2:98:1c:ee:59:b5:3d:9f:02:8e:80:d2:
dc:dd:94:9b:f7:9e:e5:03:46:1d:4a:60:fb:8c:98:8c:04:b8:
99:d0:64:b2:cb:b0:56:f6:05:94:40:80:26:bd:17:29:bb:16:
a2:e8:60:18:b3:ab:5f:b0:fa:f6:0b:4d:83:4c:9b:d3:d1:09:
41:cf:f5:39:bb:5b:52:88:8b:0b:45:6f:00:03:a8:e1:6c:4b:
14:51:23:9b:cc:d5:5a:67:b5:dd:38:54:6d:88:c6:81:b5:ff:
90:e2:4c:7b:3b:a8:44:9e:cf:72:76:90:6e:55:33:9f:4c:c6:
e9:39:94:1c:bf:88:5e:0a:21:ee:a1:c6:7a:e4:35:e5:c5:9d:
0b:76:4f:91:59:a6:f9:6e:78:59:e1:2e:0c:5c:67:70:a0:cd:
0a:ca:68:ff:78:21:6f:6d:7d:fc:ae:f9:e1:82:c8:3f:7a:89:
6f:96:dc:2c:4b:dc:a4:5e:72:d3:23:0b:d7:b7:dc:5f:ff:f4:
52:2d:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:26 2026 by rpki-client