Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
File: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft (raw, json)
Hash identifier: YYP/dem0339mpCqMknhh2EK/0lLK9jzVZ9DBvV70hWI=
Subject key identifier: F2:C4:58:46:23:2D:64:B6:C3:AA:60:1D:7E:08:14:D9:B0:B8:33:39
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Certificate issuer: /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial: 01A0E92E3389E7C1A04805213C62C91FF7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
Manifest number: 0D4C
Signing time: Mon 28 Sep 2026 18:01:54 +0000
Manifest this update: Mon 28 Sep 2026 18:01:54 +0000
Manifest next update: Tue 29 Sep 2026 18:01:54 +0000
Files and hashes: 1: 6ItjAY2vqbDsPfEN7PlB_byd1yQ.roa (hash: 67Rx+JVBn8qMfeiQxadB9O8Is1LQ2PXvAawWWlcCFMo=)
2: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl (hash: zJX4+7JELEA0pkmMAmaIVMOGiOup/PZMgsc/C2FV+hk=)
3: NVmR8SLnsWJmOtHmQD77L3ydy_g.roa (hash: gul58bNSNA/dLY883axm3ey7Q1DEI9GtKpYlNW7IBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:33:89:e7:c1:a0:48:05:21:3c:62:c9:1f:f7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Validity
Not Before: Sep 28 18:01:54 2026 GMT
Not After : Sep 29 18:01:54 2026 GMT
Subject: CN=f2c45846232d64b6c3aa601d7e0814d9b0b83339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:5f:d8:ef:6a:ef:8b:e0:fb:7f:6f:c7:d7:
b8:29:cd:4b:3a:41:88:07:29:6b:2d:a9:2b:dd:b2:
37:b8:0e:4b:51:18:1a:7c:bd:80:cb:91:89:63:80:
18:60:92:a6:97:d7:3e:09:0d:81:2c:8e:04:d4:0e:
09:96:0a:1d:a9:0c:7e:47:8f:e5:f3:a4:10:92:e8:
4e:14:e0:61:0b:21:0e:89:df:d1:e2:a7:8a:99:01:
98:44:f3:af:95:64:36:b2:bd:85:58:0c:78:f5:c4:
1e:d9:80:60:7d:13:87:4a:85:b1:53:d9:4d:c2:e3:
7d:06:7d:4e:74:2e:76:a4:d7:a8:43:a9:72:28:16:
5d:33:5b:c3:11:33:30:c5:4c:af:34:d0:9d:66:d6:
d4:87:15:d5:6b:15:10:3f:fb:85:9d:0e:f5:4a:3a:
0f:54:6d:f2:b6:8b:7b:a4:24:e0:02:ae:87:3a:07:
62:f0:a0:b5:20:7a:9f:da:68:95:8b:d9:4f:ca:8a:
6c:64:11:53:d1:af:b4:81:21:51:81:07:61:d6:e3:
ea:63:5e:74:79:56:4e:04:b4:08:b5:56:2d:e3:ab:
f5:ab:10:82:53:67:38:d4:8e:c4:7e:66:8b:e7:b5:
cf:ae:ab:57:1c:36:f5:dd:71:97:8f:75:48:04:c9:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C4:58:46:23:2D:64:B6:C3:AA:60:1D:7E:08:14:D9:B0:B8:33:39
X509v3 Authority Key Identifier:
keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ee:1f:14:1e:e0:3c:f6:85:83:4f:0f:9f:91:c3:fe:7a:5d:
94:95:92:64:ca:74:f8:df:5b:26:e6:89:f5:c5:05:8f:dc:b0:
9d:f1:d1:a1:86:9a:26:ed:53:ce:bc:33:5d:34:36:d3:ea:b8:
4a:51:92:f7:f9:54:cd:5d:0b:5f:98:aa:f1:5d:47:04:7b:6f:
90:e9:dd:93:c6:2e:f6:3e:53:e7:7b:85:1a:10:ef:b1:f3:e4:
b7:59:c6:29:2a:37:32:0c:65:57:a9:16:2a:cd:98:9c:da:02:
af:d7:fa:d0:05:64:bb:3e:27:b7:46:a9:c7:68:d1:3b:c9:df:
14:d6:1e:82:89:c0:75:3d:06:95:da:6e:1d:d5:6e:18:b5:0b:
e3:68:07:0e:84:1b:b8:95:cc:c2:5c:29:b5:a9:59:75:c5:80:
17:be:21:05:45:dc:93:3b:ec:a0:29:58:9d:e3:6d:f7:6f:89:
42:32:78:ae:ba:22:02:3d:ab:0c:2a:b3:17:3e:64:6e:7a:8d:
bd:f0:c1:ee:5d:d1:59:e6:d1:66:b5:11:61:8f:86:60:8a:e7:
37:04:c0:22:ac:98:81:fe:58:6f:33:13:de:a8:33:18:5a:33:
16:e3:9c:d9:16:e6:35:13:ba:c5:39:a6:df:6e:20:a7:36:98:
22:c5:f5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:09:38 2026 by rpki-client