Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: 4X3rLHbyhSHXDHCGVMVfTqGP55OD+bhygpo3IiIp6YU=
Subject key identifier: 7E:0E:54:02:23:24:D6:7F:A7:19:6A:57:EF:63:3D:E1:86:14:3F:5A
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 019E1F7E8F365625F18FCDF3059FB2F65006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 04:00:48 +0000
Manifest this update: Wed 13 May 2026 04:00:48 +0000
Manifest next update: Thu 14 May 2026 04:00:48 +0000
Files and hashes: 1: SSZdn02qDEwwqUSfTnOV3zXUcLo.roa (hash: y3a3/hKTKamWecmVmVYjV0+wFS3yke4xPMfZhOZPAII=)
2: WiOXXkvgTsUMJh2SB31kcxISa0I.roa (hash: Ug6Us7ZSr7Hic6TNnmKhB5WDJGEDtwfaBPHgJG/vxFQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: SgOYr6VpJ1I6tBp3wZKiX+UQhBviQeGuMtFpN8wuUQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:8f:36:56:25:f1:8f:cd:f3:05:9f:b2:f6:50:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: May 13 04:00:48 2026 GMT
Not After : May 14 04:00:48 2026 GMT
Subject: CN=7e0e54022324d67fa7196a57ef633de186143f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:4f:68:27:4f:15:0f:76:f7:57:56:62:9e:
6e:c7:00:c3:ec:15:17:57:3c:3e:d0:68:f3:90:3b:
c8:c8:6c:70:48:34:12:be:d2:64:45:2d:91:f6:7f:
a6:68:2d:5f:a5:e0:23:d9:6d:b7:63:f6:45:e0:25:
9a:26:54:1f:16:0f:dc:6f:a1:b6:74:fc:e3:f6:b2:
9a:5b:ec:a1:27:ad:4f:1e:f1:42:6f:31:bc:e7:26:
97:4c:0f:eb:c9:d5:62:25:c5:79:33:0c:bd:1f:a0:
95:5d:7b:64:14:a6:cd:68:c5:41:f1:bf:f9:a0:40:
fe:84:a4:60:55:33:08:2e:9f:d0:e1:3b:f3:b0:16:
46:eb:c8:95:95:00:14:6c:08:89:ba:ca:68:74:a4:
ae:b0:9d:28:32:5d:12:da:de:33:50:7e:4a:85:7c:
ff:2e:15:f1:b3:48:05:37:81:df:44:73:7d:71:f3:
f6:86:b6:37:2f:3d:af:e7:a3:e2:0f:a0:a7:bb:6c:
83:0a:7b:12:f4:fe:a4:ee:d1:e3:5e:9a:47:dd:d7:
c4:62:09:34:5e:6e:46:c3:c5:c3:33:9f:35:c2:a9:
fe:f0:e2:6f:72:d0:3a:67:3f:8f:16:e2:f6:b8:22:
e2:ce:b2:c9:ae:c6:27:b2:ca:5f:17:82:c3:4d:ee:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0E:54:02:23:24:D6:7F:A7:19:6A:57:EF:63:3D:E1:86:14:3F:5A
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:53:a2:a8:b7:d9:46:eb:3e:81:e7:da:27:2c:c2:53:f4:4e:
ba:69:13:0d:9f:89:09:11:de:30:55:9f:fa:86:4a:4f:5f:e6:
85:c9:8b:a2:0d:13:f9:9a:5f:63:c9:de:e6:1d:8f:53:50:89:
12:61:9c:ad:a2:15:c5:a9:05:9f:20:97:c5:f8:e7:de:d8:e8:
3a:51:c1:d0:72:d4:1c:bb:e5:b3:2f:2a:5c:01:b9:df:83:4a:
60:0e:4e:de:fd:b5:19:bc:1d:98:dd:68:65:fd:1b:66:08:d0:
fd:4f:12:7a:1f:35:8b:e0:60:6a:b9:82:e8:ef:27:d7:1a:0e:
c3:a7:9b:61:4c:56:5b:5b:5c:ce:92:20:61:2f:76:f7:1c:a5:
7d:af:e0:f3:e3:94:ee:78:85:97:c6:84:d6:c0:60:6b:73:d9:
66:61:31:cc:3f:4e:0e:de:35:5b:fd:65:17:7a:8f:3d:96:3d:
d1:54:bf:1a:72:9b:ce:01:25:29:4f:8f:7f:17:3d:e2:51:77:
bc:14:8d:7f:b6:06:76:5a:d2:38:b2:1f:26:02:8b:82:e9:8f:
f5:63:0c:ad:c8:35:bc:00:cf:51:0d:7a:2d:fb:5e:f8:f8:3c:
42:95:69:16:19:54:a2:90:61:4c:77:f8:93:9c:4d:76:39:01:
90:cb:84:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:22:21 2026 by rpki-client