Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier: DiGd3taB/VIbKiqCu/R7Bv7zKtQt/I2onlMIYlt5y60=
Subject key identifier: CD:97:7B:B0:88:43:72:E7:38:E3:8B:CB:48:A0:86:5E:B5:CB:EE:25
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 019F9022B81D5ABB2F9EF46EB70B883AD1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number: 0701
Signing time: Thu 23 Jul 2026 18:00:22 +0000
Manifest this update: Thu 23 Jul 2026 18:00:22 +0000
Manifest next update: Fri 24 Jul 2026 18:00:22 +0000
Files and hashes: 1: LFUS6tQiGpmjI6ItUVw2MpTAETI.roa (hash: FEu4LPnIRepU4N89SAmjCCbg/lOypjW1gLoZTKRnXmE=)
2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: QZD4wHj2WZ/DNhIVEsde1YMEPPKoqpYxeui15cNZk/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:b8:1d:5a:bb:2f:9e:f4:6e:b7:0b:88:3a:d1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: Jul 23 18:00:22 2026 GMT
Not After : Jul 24 18:00:22 2026 GMT
Subject: CN=cd977bb0884372e738e38bcb48a0865eb5cbee25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:b4:ad:14:5e:a3:fc:8b:d6:a1:c1:34:6c:
91:39:c7:fe:dd:2d:1b:88:ae:6d:d9:b0:ea:33:3a:
94:27:83:38:42:d3:1d:0b:2d:35:88:9b:79:18:9c:
80:c4:e4:56:7d:4f:06:a9:0e:1d:b4:77:2e:e2:83:
47:98:29:c9:14:22:dc:83:96:73:ca:32:98:02:fb:
0a:38:b3:77:b5:77:4d:20:71:6f:56:49:ca:1b:11:
e3:10:48:c6:28:c2:0f:9f:4a:7f:77:5e:f4:4c:0d:
32:4a:10:d0:e9:0b:f4:10:ef:0f:e4:b7:db:30:f1:
25:2c:16:6b:c9:be:46:df:96:c3:54:5f:d6:f8:17:
de:83:05:d0:d8:a1:bc:d6:b2:34:5d:f6:d2:59:ff:
2a:6a:d8:25:bd:dd:f6:98:d0:60:f6:17:74:ed:a4:
69:7c:70:9c:06:89:1e:af:a3:62:17:81:04:3c:5f:
9c:1d:63:82:2c:2c:2a:ff:83:e3:25:cf:35:55:61:
3a:7d:19:9b:cb:88:d6:95:4a:03:81:91:96:1d:e2:
ba:01:53:02:bd:fc:68:e9:23:93:a1:23:e4:3c:37:
a7:0f:58:32:9d:83:c5:31:44:89:57:55:9c:c8:dd:
c0:65:31:cb:54:77:ca:df:c4:9b:ee:53:e7:de:cd:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:97:7B:B0:88:43:72:E7:38:E3:8B:CB:48:A0:86:5E:B5:CB:EE:25
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:93:7b:bd:bf:d2:a8:2e:11:3c:71:d2:fd:52:31:6d:8b:52:
f6:00:9e:29:ff:39:2f:3c:99:33:e0:31:1a:25:c7:a8:85:1d:
64:f8:43:1d:37:62:75:69:28:c5:a4:30:4a:13:24:e6:dc:4f:
47:4a:f1:29:01:93:af:43:c6:2d:8e:27:a4:1e:e5:75:46:4f:
4a:4e:b3:cc:67:32:f9:11:7c:58:f7:9b:d2:20:1e:72:32:3c:
4c:b8:27:b0:6c:d9:fc:55:64:9f:83:03:66:e9:d7:88:93:9a:
dd:43:9b:c1:44:13:c2:13:96:e8:45:6f:50:f3:25:4f:ba:f3:
74:90:c3:ca:42:13:7c:36:12:7d:35:65:7f:27:b0:96:49:44:
de:52:8d:26:ba:cc:1f:3e:cb:26:54:0e:3a:a6:fc:eb:38:3e:
67:de:10:41:8f:b3:4f:3e:68:0e:16:e0:8e:08:27:57:e6:89:
db:37:83:25:41:fa:d3:66:5f:96:64:16:22:11:b2:f1:a1:94:
80:7b:b8:0f:57:11:09:1e:a7:e6:9e:7e:b2:19:f6:28:01:cf:
54:40:4b:1d:cc:4a:23:6b:4c:68:77:b9:24:d2:3a:d4:e4:22:
08:cd:d7:04:db:84:94:10:b3:e1:b4:91:73:bd:fd:7e:ce:3e:
b8:43:da:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:42:57 2026 by rpki-client