Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
File: eVATNGyNjyPgEo0waZeYAjfbI3Q.mft (raw, json)
Hash identifier: mkM1DyOiHn74b6Yz5AoOEzNnAb+DS35Hd4GRsvWJakw=
Subject key identifier: 3F:23:CE:38:E4:D2:93:54:94:46:D3:C1:5A:D7:23:43:BC:76:A2:ED
Authority key identifier: 79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
Certificate issuer: /CN=795013346c8d8f23e0128d306997980237db2374
Certificate serial: 019D26CD45EB8379058D5FB92ADEEBDA075D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
Manifest number: 11AF
Signing time: Wed 25 Mar 2026 21:01:20 +0000
Manifest this update: Wed 25 Mar 2026 21:01:20 +0000
Manifest next update: Thu 26 Mar 2026 21:01:20 +0000
Files and hashes: 1: IcCeL6AZfvX_kE4zzUkEMkzVtIU.roa (hash: hklcyioL4dzXSkOdiGlFS+tOjckUBOw0pVZyfqrbXcc=)
2: eVATNGyNjyPgEo0waZeYAjfbI3Q.crl (hash: fbsudtf3cJhFrMEujepwZhwStE7FfsdbzGFTTu+qlU4=)
3: giSS4ZPK0j5rr7alt_LfNHrt9LQ.roa (hash: +OyhRjz3BS+oI1uqsW4itQyM/A5nLmKq2YGALxbFDoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:45:eb:83:79:05:8d:5f:b9:2a:de:eb:da:07:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795013346c8d8f23e0128d306997980237db2374
Validity
Not Before: Mar 25 21:01:20 2026 GMT
Not After : Mar 26 21:01:20 2026 GMT
Subject: CN=3f23ce38e4d293549446d3c15ad72343bc76a2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:21:41:00:1f:a2:f9:4e:43:53:da:7e:7c:98:
27:ca:29:ee:ab:49:1c:45:2a:2d:7f:97:f6:e5:6a:
b8:3d:b5:be:26:6f:a2:f7:d7:17:79:69:be:31:ca:
e0:b1:01:92:a9:78:67:aa:10:70:0c:12:d5:44:fc:
19:11:78:c7:d9:69:0e:6a:2e:a7:2c:02:1a:80:cc:
18:63:2c:9c:53:9f:a6:a6:65:15:1e:34:75:12:04:
4a:29:67:5b:90:4e:d5:d2:28:12:17:f0:8d:8b:a3:
9f:b4:cc:6d:43:cb:f0:58:d9:ff:4f:b6:66:44:08:
38:7c:32:e9:e1:70:4a:4e:1f:99:a2:74:77:c6:10:
48:74:fa:f0:8a:4c:29:ed:6e:b3:00:8b:7a:93:48:
e3:de:6c:e8:58:65:6c:dd:d3:e9:63:db:0c:6e:e9:
39:3b:a5:b6:b4:14:a4:6e:72:c1:a1:c6:15:d1:37:
38:0c:bb:71:24:73:a7:5f:80:ab:16:24:2b:a3:80:
55:18:f6:f0:90:58:73:42:a5:ec:2c:38:69:c7:06:
95:09:84:52:c7:5f:23:ff:73:6d:3e:61:fa:a1:29:
89:82:2a:43:e5:f7:b3:68:91:cd:28:0d:8f:d6:40:
74:d9:25:33:ba:cd:a5:1f:f1:3a:91:74:c6:2d:c0:
1a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:23:CE:38:E4:D2:93:54:94:46:D3:C1:5A:D7:23:43:BC:76:A2:ED
X509v3 Authority Key Identifier:
keyid:79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:15:11:37:99:c7:26:e8:77:98:ee:14:d7:f1:b3:6a:fb:46:
5b:ad:90:b4:22:be:03:72:b8:a3:bf:48:b3:e7:bf:dc:33:bd:
8e:d0:a8:a8:9e:01:aa:62:d7:8d:ec:f6:24:bf:ff:d1:d4:51:
1e:9d:db:55:2c:03:90:1d:18:ed:a7:73:45:26:1a:07:45:c8:
d4:e1:ee:90:35:e0:1b:b8:95:6c:e3:58:a2:4b:4f:43:f4:29:
6c:68:9f:60:52:98:93:0f:48:26:4a:02:7a:8e:ac:1e:fa:2c:
df:e6:88:42:71:9d:91:99:49:58:6c:4d:31:ec:cf:56:12:58:
88:64:88:0e:e6:7d:93:b0:98:1e:94:b7:37:77:16:a8:57:f2:
39:75:e7:0a:63:af:0a:81:38:99:08:3c:ed:af:43:7f:f1:43:
6b:5e:26:c5:d6:28:50:d0:86:99:c3:32:78:1e:d1:00:57:34:
fe:c1:ff:a9:28:39:2b:be:6d:38:68:d8:29:07:2c:91:11:b5:
a4:67:17:b7:6f:84:14:80:3b:85:9f:14:ab:d3:68:b7:92:27:
f8:b9:82:b9:06:e5:56:e4:5e:c4:ad:b3:0d:13:1c:73:7d:62:
5c:f8:66:4c:01:cf:d5:16:2d:7b:f7:da:3c:01:d7:66:05:03:
00:00:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:32 2026 by rpki-client