Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier: /aWtbx1LhucShn4ubVtGfxByOtOKOeJAasxB7vYHwjI=
Subject key identifier: 6D:40:8D:F1:59:1F:EC:F5:A8:BB:33:60:64:DC:60:45:BA:93:4B:95
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 019D2816BF816B3EF053174D1D89346C9084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number: 05C2
Signing time: Thu 26 Mar 2026 03:01:12 +0000
Manifest this update: Thu 26 Mar 2026 03:01:12 +0000
Manifest next update: Fri 27 Mar 2026 03:01:12 +0000
Files and hashes: 1: LFUS6tQiGpmjI6ItUVw2MpTAETI.roa (hash: FEu4LPnIRepU4N89SAmjCCbg/lOypjW1gLoZTKRnXmE=)
2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: UxmeWRxDewVT8NmVlpLqq2TdV1FK4NUWH8OCuYfPHes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:bf:81:6b:3e:f0:53:17:4d:1d:89:34:6c:90:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: Mar 26 03:01:12 2026 GMT
Not After : Mar 27 03:01:12 2026 GMT
Subject: CN=6d408df1591fecf5a8bb336064dc6045ba934b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:f5:ee:46:ba:5a:83:71:a1:dc:fe:f8:ef:
07:15:fb:2c:f0:0c:f9:30:71:09:71:07:7f:96:17:
49:4c:f8:e7:7e:7d:1f:95:d9:ed:de:b3:80:b6:96:
a5:38:b3:26:82:ad:36:c3:5c:cb:d5:a0:a5:b3:e1:
64:78:25:33:82:3e:4d:73:96:89:c8:1f:3f:66:8d:
45:ec:d9:21:fd:a8:95:c4:d8:86:37:92:c4:94:df:
29:63:63:7e:9d:de:4c:48:b3:ec:2d:fd:e3:4d:49:
93:06:1b:52:2a:51:92:33:56:29:80:1c:6a:4c:d7:
08:fb:87:6d:19:4e:1f:2d:13:d7:13:4a:98:88:28:
d5:3b:15:94:4a:86:ba:17:b8:1b:e3:f2:13:60:7d:
e5:07:20:4c:98:18:37:f6:13:d2:28:3e:51:90:89:
48:87:c6:06:81:cd:9b:24:2c:fe:ca:80:96:b1:1a:
15:d7:89:f9:b4:91:1e:2b:19:9f:11:d5:fd:0c:fc:
e6:58:f0:1e:ff:bf:0d:2f:db:fc:4c:af:89:8a:dc:
6c:ea:f4:4e:6d:8c:8a:69:97:81:a0:60:3b:6d:ec:
14:fe:18:85:5d:f1:7a:53:fb:3d:86:f8:be:0d:2b:
3f:c3:3a:f4:e1:84:ee:72:75:b1:19:29:53:81:ea:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:40:8D:F1:59:1F:EC:F5:A8:BB:33:60:64:DC:60:45:BA:93:4B:95
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e5:7b:7b:ad:3a:74:c6:f5:ee:0f:bc:84:4e:9a:ce:a4:da:
a5:33:8d:f9:94:c1:cb:c9:3a:64:c2:75:73:64:b5:45:d3:94:
c9:fe:12:3a:a7:44:3e:b5:35:42:de:89:21:2a:d9:76:cb:ac:
d9:87:a3:3a:6d:b0:c9:ab:37:e2:28:a5:ce:66:21:d1:4f:b2:
be:a7:1a:37:38:01:54:01:a0:94:d5:07:03:a7:38:c4:a5:05:
02:ce:27:d1:7a:bb:da:59:80:83:85:0e:05:7b:a7:05:00:d8:
4e:6f:32:e5:85:53:40:e5:70:94:1c:10:ec:8d:63:6c:aa:e8:
62:aa:8b:3f:68:22:ea:43:aa:ab:72:3d:3b:6e:fd:c1:2e:2d:
c0:36:ac:bf:d4:8e:b9:07:de:74:1c:6b:3d:c7:72:f5:14:76:
d7:46:d8:da:ed:8e:c5:71:97:83:60:78:e5:fa:21:7a:9d:01:
11:3c:51:78:3b:1e:8d:66:b7:e5:c0:b5:59:c4:23:4f:26:8f:
f2:f1:5d:3d:17:0f:d5:ff:77:72:a8:9d:72:a9:6a:3b:8f:72:
6a:e6:26:5f:41:ba:b5:20:1f:49:1f:e5:73:85:2d:78:c8:93:
be:c4:a4:a9:61:ab:fd:3e:21:d7:51:9c:99:a1:c2:d8:88:49:
e5:82:6a:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFr+Baz7wUxdNHYk0bJCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjFhN2JmNzQyODVkYjJlODIwOTFmYmY0NjNhMmVlZjZl
M2E1NzgwHhcNMjYwMzI2MDMwMTEyWhcNMjYwMzI3MDMwMTEyWjAzMTEwLwYDVQQD
Eyg2ZDQwOGRmMTU5MWZlY2Y1YThiYjMzNjA2NGRjNjA0NWJhOTM0Yjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbr17ka6WoNxodz++O8HFfss8Az5
MHEJcQd/lhdJTPjnfn0fldnt3rOAtpalOLMmgq02w1zL1aCls+FkeCUzgj5Nc5aJ
yB8/Zo1F7Nkh/aiVxNiGN5LElN8pY2N+nd5MSLPsLf3jTUmTBhtSKlGSM1YpgBxq
TNcI+4dtGU4fLRPXE0qYiCjVOxWUSoa6F7gb4/ITYH3lByBMmBg39hPSKD5RkIlI
h8YGgc2bJCz+yoCWsRoV14n5tJEeKxmfEdX9DPzmWPAe/78NL9v8TK+Jitxs6vRO
bYyKaZeBoGA7bewU/hiFXfF6U/s9hvi+DSs/wzr04YTucnWxGSlTgeoTWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1AjfFZH+z1qLszYGTcYEW6k0uVMB8GA1UdIwQY
MBaAFHrxp790KF2y6CCR+/Rjou7246V4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wNTg0MzUtYTFjNi00NDM2LTk1YTIt
YjcxMTRiNjlmODRjLzEvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wNTg0MzUtYTFjNi00NDM2LTk1YTItYjcxMTRiNjlmODRj
LzEvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+V7e606
dMb17g+8hE6azqTapTON+ZTBy8k6ZMJ1c2S1RdOUyf4SOqdEPrU1Qt6JISrZdsus
2YejOm2wyas34iilzmYh0U+yvqcaNzgBVAGglNUHA6c4xKUFAs4n0Xq72lmAg4UO
BXunBQDYTm8y5YVTQOVwlBwQ7I1jbKroYqqLP2gi6kOqq3I9O279wS4twDasv9SO
uQfedBxrPcdy9RR210bY2u2OxXGXg2B45fohep0BETxReDsejWa35cC1WcQjTyaP
8vFdPRcP1f93cqidcqlqO49yauYmX0G6tSAfSR/lc4UteMiTvsSkqWGr/T4h11Gc
maHC2IhJ5YJqXA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:28 2026 by rpki-client