Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: Rs62Ubc8yXk8SHwEr5ndAMlY/16p0faVIxEz6AEiTP4=
Subject key identifier: DA:17:71:A9:8A:8E:DF:50:E8:BF:5C:5A:B5:8C:8B:A8:E7:52:20:DC
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 019D265F06E867A1EC8E3F5D1FACB7C5C9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:00:54 +0000
Manifest this update: Wed 25 Mar 2026 19:00:54 +0000
Manifest next update: Thu 26 Mar 2026 19:00:54 +0000
Files and hashes: 1: SSZdn02qDEwwqUSfTnOV3zXUcLo.roa (hash: y3a3/hKTKamWecmVmVYjV0+wFS3yke4xPMfZhOZPAII=)
2: WiOXXkvgTsUMJh2SB31kcxISa0I.roa (hash: Ug6Us7ZSr7Hic6TNnmKhB5WDJGEDtwfaBPHgJG/vxFQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: lmrkZ844dKbF6gf54a392OPVA92wIsyNtV3/fXfZbNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:06:e8:67:a1:ec:8e:3f:5d:1f:ac:b7:c5:c9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Mar 25 19:00:54 2026 GMT
Not After : Mar 26 19:00:54 2026 GMT
Subject: CN=da1771a98a8edf50e8bf5c5ab58c8ba8e75220dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:d5:40:1e:04:8b:bd:d8:2e:6c:b1:b7:61:
32:39:19:3e:ae:ac:44:0d:22:f2:93:c8:45:57:93:
bc:9d:e0:e9:00:51:d0:92:20:d1:ff:d2:dc:71:55:
66:55:c8:6b:43:f0:e3:75:de:0f:9a:1f:c6:37:66:
ef:cc:c1:ba:9a:a1:17:fb:31:db:b3:5f:62:06:34:
40:a2:4c:5f:6c:c6:1f:0f:26:28:ad:56:4f:3a:51:
b8:6f:2c:35:76:f8:6c:4b:86:6d:2e:cb:94:5b:89:
f0:ae:1e:12:87:48:41:a1:80:41:1f:b6:5a:0c:82:
cc:df:1b:e0:38:b3:f8:2e:8c:5f:f7:68:b0:ad:77:
39:05:36:28:ec:df:52:b4:75:92:d5:97:53:91:6f:
96:52:91:6c:d9:38:ee:6e:e8:58:49:d9:51:93:ff:
98:36:ee:75:fc:dd:1f:d6:4f:9f:95:ca:ac:1a:e5:
b4:06:79:9a:22:e0:ea:b6:e9:0c:e3:41:7d:6e:31:
51:cf:86:fa:5a:9b:55:a1:f3:0c:ae:70:49:74:ea:
99:01:7a:f2:63:ea:f8:86:23:0d:55:05:8e:75:e6:
5c:e3:25:a5:d7:2c:8e:8f:c3:0e:e0:2b:88:cf:cc:
4d:a4:ff:9c:4c:55:32:76:77:41:ff:33:a8:b4:c0:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:17:71:A9:8A:8E:DF:50:E8:BF:5C:5A:B5:8C:8B:A8:E7:52:20:DC
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ff:b7:ee:4a:29:6d:c4:f8:56:bb:39:28:b1:45:1b:fa:82:
23:ab:d2:47:a0:6f:a4:75:d3:72:62:ed:db:5c:2a:d4:46:f9:
30:07:1b:08:97:80:06:a3:49:2f:4a:c6:df:89:a2:7d:02:bf:
cf:5a:95:4d:bb:a7:a3:dd:ca:d8:3d:33:7a:fd:f4:39:72:5c:
ac:ae:ab:28:b7:1f:22:6a:b2:6b:0a:9b:2e:5e:69:f2:ef:a4:
0f:dc:d0:8f:e2:60:ea:61:a8:9f:22:b2:ea:4b:2e:87:9b:fc:
c8:63:2c:58:f8:d4:c0:b5:8f:62:47:01:51:5c:06:59:28:82:
38:62:43:92:70:9f:09:c9:b5:4c:1c:34:25:14:a8:83:b9:fb:
97:eb:f4:15:65:b0:95:25:1d:11:e0:94:99:2b:92:7d:42:3c:
02:29:8a:5b:01:5a:17:0f:14:c1:28:0f:ba:d7:58:6d:17:76:
ef:ce:c3:86:2e:8c:a0:73:48:0e:c3:b9:c1:4f:53:80:76:33:
85:a7:ff:22:7e:54:89:7b:99:32:2f:89:d3:c7:35:af:cd:f0:
35:a8:6a:44:1c:17:b9:27:42:e1:a8:66:b9:f5:b3:0c:83:17:
44:e3:d2:c4:19:f6:f8:12:6e:8d:82:e3:61:b6:ce:3d:3a:59:
14:3f:b6:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXwboZ6Hsjj9dH6y3xcnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjY3NzllNjJiNDYxMjg4N2ZlNmY4ZDRlOWMwZTM3MzFm
NmUxMDgwHhcNMjYwMzI1MTkwMDU0WhcNMjYwMzI2MTkwMDU0WjAzMTEwLwYDVQQD
EyhkYTE3NzFhOThhOGVkZjUwZThiZjVjNWFiNThjOGJhOGU3NTIyMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14LVQB4Ei73YLmyxt2EyORk+rqxE
DSLyk8hFV5O8neDpAFHQkiDR/9LccVVmVchrQ/Djdd4Pmh/GN2bvzMG6mqEX+zHb
s19iBjRAokxfbMYfDyYorVZPOlG4byw1dvhsS4ZtLsuUW4nwrh4Sh0hBoYBBH7Za
DILM3xvgOLP4Loxf92iwrXc5BTYo7N9StHWS1ZdTkW+WUpFs2TjubuhYSdlRk/+Y
Nu51/N0f1k+flcqsGuW0BnmaIuDqtukM40F9bjFRz4b6WptVofMMrnBJdOqZAXry
Y+r4hiMNVQWOdeZc4yWl1yyOj8MO4CuIz8xNpP+cTFUydndB/zOotMBkIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoXcamKjt9Q6L9cWrWMi6jnUiDcMB8GA1UdIwQY
MBaAFHr2d55itGEoh/5vjU6cDjcx9uEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMGIxMjQtODdmMi00YzdhLWJjMGUt
NzkwNzc1Yzc3OWM1LzEvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zMGIxMjQtODdmMi00YzdhLWJjMGUtNzkwNzc1Yzc3OWM1
LzEvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeP+37kop
bcT4Vrs5KLFFG/qCI6vSR6BvpHXTcmLt21wq1Eb5MAcbCJeABqNJL0rG34mifQK/
z1qVTbuno93K2D0zev30OXJcrK6rKLcfImqyawqbLl5p8u+kD9zQj+Jg6mGonyKy
6ksuh5v8yGMsWPjUwLWPYkcBUVwGWSiCOGJDknCfCcm1TBw0JRSog7n7l+v0FWWw
lSUdEeCUmSuSfUI8AimKWwFaFw8UwSgPutdYbRd2787Dhi6MoHNIDsO5wU9TgHYz
haf/In5UiXuZMi+J08c1r83wNahqRBwXuSdC4ahmufWzDIMXROPSxBn2+BJujYLj
YbbOPTpZFD+2RQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:01 2026 by rpki-client