Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
File: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft (raw, json)
Hash identifier: bc+yUT1kUWl06383O8wh5OSqvxH3Yyc6ZpL9I6ulNdc=
Subject key identifier: 0C:66:26:1B:AF:CD:C3:88:9D:12:CB:97:92:84:93:F4:F7:82:94:BF
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Certificate issuer: /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial: 019D2771BA4FCF0A52F808DA5CD468968E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
Manifest number: 0B5A
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: 6ItjAY2vqbDsPfEN7PlB_byd1yQ.roa (hash: 67Rx+JVBn8qMfeiQxadB9O8Is1LQ2PXvAawWWlcCFMo=)
2: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl (hash: bv4sFDav7jtxTBGwPu4AgW8pEGh8GVc2cwy6YLXfybw=)
3: NVmR8SLnsWJmOtHmQD77L3ydy_g.roa (hash: gul58bNSNA/dLY883axm3ey7Q1DEI9GtKpYlNW7IBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ba:4f:cf:0a:52:f8:08:da:5c:d4:68:96:8e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=0c66261bafcdc3889d12cb97928493f4f78294bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:da:95:4b:36:0e:78:3c:88:32:9a:39:bc:
ff:49:eb:6f:b6:80:ce:be:ca:11:99:1e:3f:f0:bd:
9d:9a:f3:96:70:6c:51:b4:6c:fc:06:c1:e3:54:3f:
9a:5f:07:ac:46:82:79:34:03:96:bf:86:4c:5c:78:
af:fa:d1:5e:69:24:eb:7c:05:67:36:65:19:72:22:
f8:48:ce:26:1e:1b:7c:0a:8c:f5:a4:ab:2f:26:f4:
8b:b9:d8:0d:e4:2e:17:b0:84:b9:e6:eb:8f:dd:fe:
00:b5:e1:d5:43:ea:15:ab:9a:85:4b:a6:b2:f5:24:
ce:a2:77:7f:66:57:d4:98:3c:c4:11:ce:a3:bf:78:
35:2b:90:27:4f:de:bc:67:4c:55:1f:b9:43:d4:5a:
c0:18:bf:9e:16:e4:a2:65:ab:6b:29:76:77:bb:ec:
2e:80:19:bc:ff:1e:dd:a0:08:c8:aa:37:cd:51:ee:
b2:ff:53:9d:71:46:36:d0:07:58:10:a0:65:3c:b4:
ae:aa:d5:30:f0:a2:27:a9:a8:1e:47:50:a5:59:3b:
58:b7:a4:1b:ec:0d:ed:43:3f:7f:4c:3f:05:d3:64:
00:23:f4:47:68:c2:ee:f9:ed:95:64:00:fe:3d:63:
f7:02:da:73:eb:fc:bd:87:35:bf:60:f7:f0:67:c4:
01:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:66:26:1B:AF:CD:C3:88:9D:12:CB:97:92:84:93:F4:F7:82:94:BF
X509v3 Authority Key Identifier:
keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2c:17:03:df:90:46:9c:88:d1:48:90:37:7c:e8:55:7c:bf:
0e:fa:0b:fc:14:9a:4a:51:b4:00:99:23:89:70:a7:c9:46:a2:
2e:d2:cc:a9:2e:56:16:47:8f:60:dc:04:94:21:c4:eb:01:9b:
76:17:f7:22:ad:3e:f9:48:9c:60:19:75:64:a4:8f:0d:90:b6:
8d:7b:f0:5c:93:60:12:10:d5:60:7c:fc:4e:c0:18:3c:44:73:
02:a4:32:04:2f:7a:d6:f7:da:3d:7a:c2:83:0e:55:c9:ec:9a:
ad:83:72:b4:64:01:99:e1:73:04:d4:a5:be:0d:1f:5c:63:61:
c8:67:06:5d:39:46:a9:11:a1:07:c7:92:42:b9:26:3a:22:92:
20:9c:08:7a:ef:82:59:cc:14:b0:79:21:c3:d3:7b:af:80:a6:
8e:33:19:5d:66:e8:b3:e7:7d:5e:d2:5a:00:84:1d:71:46:71:
c4:e1:5f:58:8a:eb:8d:bf:42:8f:a3:5c:08:63:f5:df:28:fa:
9d:90:bf:2b:e6:ee:6f:b1:1c:9e:fb:89:6f:8d:32:8d:d3:28:
a9:97:60:16:b0:df:31:95:1b:37:02:91:4e:ee:e1:20:40:27:
44:75:ce:a7:f8:93:1a:cf:ae:f4:07:2d:00:9b:f7:7c:78:0a:
bf:87:36:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncbpPzwpS+AjaXNRolo4YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZmFkZmUyOTFkZWZjNTZmOTQ3OWUyZTdkMjFiNTM5N2Nm
YTJiNjQwHhcNMjYwMzI2MDAwMDU3WhcNMjYwMzI3MDAwMDU3WjAzMTEwLwYDVQQD
EygwYzY2MjYxYmFmY2RjMzg4OWQxMmNiOTc5Mjg0OTNmNGY3ODI5NGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTnalUs2Dng8iDKaObz/SetvtoDO
vsoRmR4/8L2dmvOWcGxRtGz8BsHjVD+aXwesRoJ5NAOWv4ZMXHiv+tFeaSTrfAVn
NmUZciL4SM4mHht8Coz1pKsvJvSLudgN5C4XsIS55uuP3f4AteHVQ+oVq5qFS6ay
9STOond/ZlfUmDzEEc6jv3g1K5AnT968Z0xVH7lD1FrAGL+eFuSiZatrKXZ3u+wu
gBm8/x7doAjIqjfNUe6y/1OdcUY20AdYEKBlPLSuqtUw8KInqageR1ClWTtYt6Qb
7A3tQz9/TD8F02QAI/RHaMLu+e2VZAD+PWP3Atpz6/y9hzW/YPfwZ8QBCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxmJhuvzcOInRLLl5KEk/T3gpS/MB8GA1UdIwQY
MBaAFBL63+KR3vxW+UeeLn0htTl8+itkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXZyZjRwSGVfRmI1UjU0dWZTRzFPWHo2SzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84MWRlMDctODQ4MS00ZDgzLTgyZTkt
YTM0NzE3NzQxNTdiLzEvRXZyZjRwSGVfRmI1UjU0dWZTRzFPWHo2SzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84MWRlMDctODQ4MS00ZDgzLTgyZTktYTM0NzE3NzQxNTdi
LzEvRXZyZjRwSGVfRmI1UjU0dWZTRzFPWHo2SzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliwXA9+Q
RpyI0UiQN3zoVXy/DvoL/BSaSlG0AJkjiXCnyUaiLtLMqS5WFkePYNwElCHE6wGb
dhf3Iq0++UicYBl1ZKSPDZC2jXvwXJNgEhDVYHz8TsAYPERzAqQyBC961vfaPXrC
gw5VyeyarYNytGQBmeFzBNSlvg0fXGNhyGcGXTlGqRGhB8eSQrkmOiKSIJwIeu+C
WcwUsHkhw9N7r4CmjjMZXWbos+d9XtJaAIQdcUZxxOFfWIrrjb9Cj6NcCGP13yj6
nZC/K+bub7EcnvuJb40yjdMoqZdgFrDfMZUbNwKRTu7hIEAnRHXOp/iTGs+u9Act
AJv3fHgKv4c2rQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:11 2026 by rpki-client