Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier: lh7pN+NebUiAzRuroSsNSXA/C1w3Cvggsh1StSun9m8=
Subject key identifier: DD:D2:22:F4:E8:AD:70:71:AB:FD:60:2F:B1:A6:C0:16:C6:13:57:4D
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 019E1F482727D81ECC0C9DAA087BB0823388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number: 0642
Signing time: Wed 13 May 2026 03:01:22 +0000
Manifest this update: Wed 13 May 2026 03:01:22 +0000
Manifest next update: Thu 14 May 2026 03:01:22 +0000
Files and hashes: 1: LFUS6tQiGpmjI6ItUVw2MpTAETI.roa (hash: FEu4LPnIRepU4N89SAmjCCbg/lOypjW1gLoZTKRnXmE=)
2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: kpN0zTyGusYvYBF+OtwqwDH9H0fqpOCRAlcFlpgOayc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:27:27:d8:1e:cc:0c:9d:aa:08:7b:b0:82:33:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: May 13 03:01:22 2026 GMT
Not After : May 14 03:01:22 2026 GMT
Subject: CN=ddd222f4e8ad7071abfd602fb1a6c016c613574d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:48:f0:9a:55:39:81:d3:07:57:4f:d1:9a:
23:51:bb:2e:fb:eb:09:36:68:55:31:53:19:76:b6:
93:8f:b5:cc:ff:9c:80:fd:5e:f2:55:76:5f:5c:85:
87:4f:3d:4a:8c:33:d8:7d:91:01:58:0f:6d:aa:99:
c9:7f:93:20:77:f1:70:9d:d6:48:c0:6f:2d:e8:e8:
9a:62:a7:57:43:b9:f2:9b:3e:df:8d:36:a2:61:1a:
23:71:15:d4:b6:c9:ab:96:e9:51:59:7b:20:40:e3:
d8:7e:a7:7a:19:9f:96:9b:02:bf:47:7d:f5:f3:e8:
d4:5e:68:ec:f7:98:15:aa:31:da:35:be:5b:14:f6:
2f:03:6c:0c:ce:3f:28:36:5d:3f:89:78:1c:3b:75:
9d:1c:6d:39:04:5d:ae:fa:80:55:51:1f:56:7d:54:
42:2e:10:a0:40:9e:45:cd:04:3f:fb:fc:61:f4:ed:
0b:7a:ca:10:c0:77:83:45:0d:fe:ef:1f:7d:b8:8c:
bd:a6:2f:e9:d9:8f:2f:e0:eb:63:ad:cb:de:5e:46:
c5:2c:b8:24:47:40:e7:2a:6f:c8:70:1e:52:44:3d:
75:2c:88:30:6a:71:2f:ca:19:91:bf:17:76:8c:8e:
a4:6d:e7:23:a1:44:4f:fd:e0:01:e6:ed:02:d3:3b:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D2:22:F4:E8:AD:70:71:AB:FD:60:2F:B1:A6:C0:16:C6:13:57:4D
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a4:bc:aa:1a:c2:44:fc:45:7a:e2:cc:89:f9:9f:4f:d5:55:
1e:ff:b1:f8:e2:96:69:ad:58:45:8d:f9:52:d4:f2:c1:03:3c:
e6:63:7e:62:24:ac:bc:46:b8:55:f3:b7:9a:8f:dc:0a:59:f1:
03:8d:5a:d9:2f:b2:69:0f:92:0a:a1:ec:6d:d9:18:24:15:74:
14:9a:5f:91:e0:d3:31:2d:4c:54:44:14:3d:57:b3:f4:59:58:
c6:b2:1e:7f:ad:7e:57:e3:3b:02:21:5a:e3:31:2c:71:79:1f:
d1:43:c5:2b:da:fa:5b:30:1c:87:1f:55:ef:e3:34:d9:61:c8:
2d:b2:f2:38:9f:b1:13:30:ff:26:2a:06:53:fe:26:a9:54:47:
7e:bc:26:8e:97:32:e6:57:8b:42:fb:e4:dd:54:0e:d7:a8:9b:
9b:93:f8:e8:e6:a7:5b:3a:bc:71:03:82:e7:c9:e4:63:3e:fe:
3a:44:ff:af:ce:6b:b8:7e:3b:3c:c8:0c:90:76:21:97:83:d7:
9c:a4:d8:4f:ee:48:c8:2c:de:f9:f8:b2:10:0f:a6:a1:4b:1e:
43:da:36:9c:31:85:f0:3c:e7:98:18:53:9e:9f:2e:7c:5b:eb:
d2:6b:50:28:f1:ce:29:56:ae:8d:36:dc:9e:9c:c4:00:9d:c7:
68:8f:95:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:28 2026 by rpki-client