
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier: uuwMlqCTuLvbM8snWVS57ontR7JTBQjZ0orj4oCARvU=
Subject key identifier: 74:C2:EC:DD:D7:C4:B3:D2:83:FB:E9:81:5A:7E:F7:15:7C:3A:CB:65
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial: 01A0E81C1B34E55CC8DCD4131C5FAAA9EABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number: 1A78
Signing time: Mon 28 Sep 2026 13:02:31 +0000
Manifest this update: Mon 28 Sep 2026 13:02:31 +0000
Manifest next update: Tue 29 Sep 2026 13:02:31 +0000
Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: i2S8EJTIfP4J9Xnkc3MABQ+aXVtPSHYnRCwY1CpS1Ik=)
2: DyBrkSK4a6M3RlwftQhSDaHeKfM.roa (hash: h4xKh81GTCFolaSYT7/bVgNQm45KFUeIOt1K9PqX3Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:1b:34:e5:5c:c8:dc:d4:13:1c:5f:aa:a9:ea:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Validity
Not Before: Sep 28 13:02:31 2026 GMT
Not After : Sep 29 13:02:31 2026 GMT
Subject: CN=74c2ecddd7c4b3d283fbe9815a7ef7157c3acb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:65:ab:74:06:48:4f:11:2a:85:86:19:4c:0e:
10:15:e0:94:f0:0a:ea:52:2e:df:82:5e:4c:ab:d8:
2a:a0:04:5f:39:b1:a6:81:79:82:9c:d1:a3:04:c6:
0f:af:61:0a:40:0c:84:cc:b8:c4:59:3f:70:51:02:
a1:2b:3f:8d:a8:da:54:15:63:aa:f4:f4:c4:cf:ba:
e4:9b:5a:55:f3:02:39:62:97:82:54:fe:00:01:70:
81:e1:98:e6:5b:10:d0:79:fa:61:19:f3:9c:02:67:
49:75:4c:fb:5b:17:78:8c:b3:4b:bd:da:ad:ed:31:
5f:0f:2e:a0:32:2f:37:d6:57:d2:5e:87:51:09:f3:
9d:f0:a6:b5:b0:26:01:4e:60:f2:fb:90:5f:dc:5e:
a7:17:13:db:8d:6d:6e:d7:57:e7:88:67:a5:e8:44:
16:3e:c2:f8:8b:e3:33:85:18:1c:c3:63:ec:fd:24:
0a:b4:12:e9:c5:de:f3:3c:b6:6d:0c:f5:60:d4:58:
1f:6d:aa:a7:bb:bc:c2:84:4a:1d:b6:32:94:19:b8:
d1:86:e3:be:5a:9e:e0:8f:8a:30:7e:82:d1:5b:f1:
7c:0d:8d:ca:ee:8b:f4:e1:d5:59:d2:ee:97:c3:ad:
d2:d2:cc:f9:32:7c:f5:cd:df:39:20:10:ce:81:4d:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C2:EC:DD:D7:C4:B3:D2:83:FB:E9:81:5A:7E:F7:15:7C:3A:CB:65
X509v3 Authority Key Identifier:
keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c0:10:e7:f0:d7:84:f3:c4:8c:30:13:c4:a2:be:f0:f9:ab:
11:fe:85:50:3d:df:25:13:72:63:9f:90:89:70:2b:70:2c:76:
85:b3:de:3c:e6:2a:63:39:56:a8:aa:2d:d6:92:ef:e4:3c:9e:
3b:59:a4:34:44:e1:c4:f0:04:c9:94:37:4c:5a:b0:73:77:80:
65:7e:9b:2a:87:16:53:8d:ab:cb:72:3b:c9:97:86:63:68:27:
09:d0:bb:4d:b8:4e:c3:5a:4d:9d:ac:38:e7:68:12:99:96:d2:
a7:3b:13:de:82:3c:66:fe:9e:27:d8:10:65:13:c8:65:e4:44:
d5:b3:7a:db:63:e6:6b:b9:4a:cc:46:3f:aa:48:e0:d7:2b:3a:
9b:e9:f0:00:50:09:0c:60:67:aa:ec:3b:79:b1:0f:8e:38:42:
c1:63:fa:32:a0:5f:a2:8d:df:13:a0:60:cc:80:27:ac:8d:63:
5d:88:e7:22:87:0e:ce:b2:17:f8:01:21:28:a2:da:01:b6:c7:
18:d2:fd:c9:e6:e3:07:a3:b9:c9:3e:20:d0:e4:38:b5:c4:b1:
e4:9d:6d:f2:1a:7e:5d:1e:3e:a3:c1:c5:66:41:5f:1b:2c:1d:
5c:50:d9:43:2d:f6:59:c7:f9:1b:39:9b:9d:0a:d7:65:df:09:
93:01:64:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:00:00 2026 by rpki-client