Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
File: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft (raw, json)
Hash identifier: OKTThxQumpzzgfGXH7VFvnvZ7QPd7PIV3auDbbQSKnQ=
Subject key identifier: 66:BE:56:44:4D:3C:B4:C8:1D:FB:0E:AB:E6:04:D9:67:6F:98:A1:58
Authority key identifier: 12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
Certificate issuer: /CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Certificate serial: 019D2A3B70E931CC131697254AD0BAF10A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
Manifest number: 0F67
Signing time: Thu 26 Mar 2026 13:00:31 +0000
Manifest this update: Thu 26 Mar 2026 13:00:31 +0000
Manifest next update: Fri 27 Mar 2026 13:00:31 +0000
Files and hashes: 1: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl (hash: Uc32o0oZTF49PliYO2OwQz/kAJVrEXGL2ihe9vaYYhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:70:e9:31:cc:13:16:97:25:4a:d0:ba:f1:0a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Validity
Not Before: Mar 26 13:00:31 2026 GMT
Not After : Mar 27 13:00:31 2026 GMT
Subject: CN=66be56444d3cb4c81dfb0eabe604d9676f98a158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:f2:1d:55:fb:9c:24:ec:47:e9:e3:86:ee:
f1:5d:76:2e:85:d5:51:4e:63:86:fb:d1:28:65:9c:
6b:b7:6c:88:ac:e3:97:46:4d:0b:55:f8:1b:b7:61:
c8:94:eb:5f:f7:d1:cb:a2:f8:ca:4f:2c:5a:49:78:
52:f4:a7:b3:0d:f3:b0:22:c9:19:22:5e:1f:b9:6d:
70:12:72:f3:27:90:47:d7:7f:c6:04:b7:da:81:45:
eb:1b:36:05:6f:f8:2e:6c:0b:d3:46:94:83:9d:1a:
f4:a1:b6:41:0b:e1:ab:29:33:20:52:44:9f:4d:cf:
0a:f8:f8:0c:86:ff:b5:41:4e:3d:2a:df:94:e7:22:
1d:55:c9:b9:48:52:8d:45:8c:2f:60:13:93:a6:c0:
90:d9:e2:de:5b:f5:ca:0e:5e:78:1d:55:28:d1:b3:
1b:92:74:ae:19:36:a6:8e:ff:d6:19:27:94:f8:25:
1b:5a:ef:00:2d:97:d0:74:09:00:dc:cf:01:6a:b3:
f1:12:38:8c:fc:6a:5c:48:61:f3:78:78:c3:93:c6:
06:43:9a:1d:7c:5d:b3:ff:fb:db:3e:36:b5:64:a7:
d1:f5:72:e6:cb:8d:6f:53:33:92:b0:76:26:b2:94:
88:8d:72:b3:b6:99:e6:55:47:71:da:af:21:80:16:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BE:56:44:4D:3C:B4:C8:1D:FB:0E:AB:E6:04:D9:67:6F:98:A1:58
X509v3 Authority Key Identifier:
keyid:12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:20:38:9b:b3:51:5a:0a:e5:b9:71:4a:97:da:08:4e:a5:f1:
2a:ac:30:47:0b:fe:b8:ce:64:ea:f4:df:98:dc:d4:da:e3:9b:
35:4c:36:73:c6:3b:c4:4d:64:1c:63:86:a4:d5:12:0d:23:a7:
1d:5e:c2:44:8a:9b:0a:d8:07:d1:73:cb:ec:0e:ee:21:9b:0c:
2b:f4:31:80:97:6f:09:83:ef:50:29:c7:6e:4c:a7:5d:a2:a3:
54:a0:70:69:a8:38:43:be:34:2c:79:b3:5b:e6:db:37:3a:78:
b0:5f:40:e5:a7:b2:1a:0e:a1:a9:17:2e:f2:07:d7:b2:3a:fd:
80:6f:52:0d:d6:db:a9:46:3e:65:04:37:5b:01:32:09:20:f4:
60:a6:b3:3d:89:ba:c5:0a:cd:a4:32:2f:0e:56:ed:73:c2:af:
a6:e3:6a:18:c4:ff:16:74:79:08:cf:35:77:65:52:f2:85:46:
82:7b:c3:12:4f:5e:4e:ad:e5:27:52:92:98:7e:37:32:8d:f0:
0f:f5:ce:d0:5b:f0:c4:a5:13:55:97:5d:e4:e4:c2:39:78:5f:
60:e3:fe:57:85:8c:4a:74:91:41:3f:7a:97:07:7d:1f:e9:4f:
00:0a:c9:eb:b9:0d:5d:e3:85:b6:ec:dd:af:2b:72:bd:19:d6:
5e:13:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:09:47 2026 by rpki-client