Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
File: eVATNGyNjyPgEo0waZeYAjfbI3Q.mft (raw, json)
Hash identifier: lfUNIiA3kF0NrBOJrFOcKlo0+wTdmNo3cp7QynpRpLw=
Subject key identifier: D6:67:2D:1F:6E:BF:84:57:3A:7B:53:92:21:51:C1:F1:E9:C2:A5:50
Authority key identifier: 79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
Certificate issuer: /CN=795013346c8d8f23e0128d306997980237db2374
Certificate serial: 019D98BE25565B23CD6F5E59FC3C077F9B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
Manifest number: 11EA
Signing time: Fri 17 Apr 2026 00:01:31 +0000
Manifest this update: Fri 17 Apr 2026 00:01:31 +0000
Manifest next update: Sat 18 Apr 2026 00:01:31 +0000
Files and hashes: 1: IcCeL6AZfvX_kE4zzUkEMkzVtIU.roa (hash: hklcyioL4dzXSkOdiGlFS+tOjckUBOw0pVZyfqrbXcc=)
2: eVATNGyNjyPgEo0waZeYAjfbI3Q.crl (hash: et0x5a3ecwP6h6oKDRIz03aJRLVLdEFJPPzsGJWMWjI=)
3: giSS4ZPK0j5rr7alt_LfNHrt9LQ.roa (hash: +OyhRjz3BS+oI1uqsW4itQyM/A5nLmKq2YGALxbFDoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:be:25:56:5b:23:cd:6f:5e:59:fc:3c:07:7f:9b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795013346c8d8f23e0128d306997980237db2374
Validity
Not Before: Apr 17 00:01:31 2026 GMT
Not After : Apr 18 00:01:31 2026 GMT
Subject: CN=d6672d1f6ebf84573a7b53922151c1f1e9c2a550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:d1:67:45:ef:7a:04:2b:1c:83:f1:f0:ba:
3a:55:f6:df:09:87:77:84:53:f7:c6:cd:09:42:ac:
31:cb:4c:da:8a:66:e9:08:bb:76:2f:71:2d:f2:4d:
d1:08:d3:e5:a7:25:8f:52:e3:e7:1c:cc:0c:d9:e3:
54:31:2d:9a:e6:86:56:af:13:4d:e1:5d:eb:02:dd:
a5:6e:f0:9a:8e:67:99:47:60:d6:72:15:10:6f:d7:
15:9f:c0:b6:76:09:bd:ed:e1:fa:f1:72:66:68:fb:
87:0c:ed:41:30:1e:25:15:d0:7f:72:a6:a3:09:f0:
2c:53:48:0b:7d:99:a5:62:be:ea:c4:95:58:be:2d:
91:b8:5c:e2:09:bf:69:d7:c2:48:4f:1c:ee:ff:9d:
ed:ad:31:46:f3:fd:6b:d0:fa:d1:bd:22:8e:65:89:
6e:16:27:00:e1:62:31:a8:47:01:8f:68:e8:63:cc:
2c:e1:04:67:6d:23:cc:15:f7:f9:1a:20:7c:cc:47:
d9:53:64:ef:c8:7c:ac:76:64:ac:c5:f7:9b:2e:ee:
ba:10:92:51:7d:15:bf:7d:2a:88:0c:9e:97:6b:2a:
90:6a:c3:bf:f0:f2:d7:0a:08:f5:58:d6:98:ff:cf:
84:5f:8f:4f:c3:55:fa:57:a6:dd:10:15:22:0b:a7:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:67:2D:1F:6E:BF:84:57:3A:7B:53:92:21:51:C1:F1:E9:C2:A5:50
X509v3 Authority Key Identifier:
keyid:79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d1:a0:c8:e8:39:c9:ec:cf:52:f3:59:13:a4:38:f0:ec:bd:
2c:8e:a4:0a:92:e8:ac:66:2d:fb:8a:41:04:70:f8:be:9d:6e:
66:ed:e2:05:74:36:86:9f:85:a8:5d:35:94:5e:d4:de:71:9e:
d0:9f:16:e7:a4:9c:9b:d2:b8:04:12:a7:8d:ca:09:39:6e:50:
bb:a4:d6:47:fd:0e:00:ee:6f:c0:37:cc:bd:1b:90:ad:f1:33:
e4:14:07:b1:80:8d:d2:c2:09:14:d5:92:40:b5:19:dc:93:8d:
19:c7:56:d7:ea:96:66:52:ea:03:2a:50:c0:fe:8e:90:97:8f:
ca:99:7f:b7:0c:09:a5:9c:38:91:05:01:b2:16:54:9b:2c:f3:
15:31:ce:a5:e5:53:97:ec:0a:14:15:69:7a:56:11:8c:39:9b:
11:99:8e:06:cb:e5:c4:ba:50:ea:45:fd:9e:ca:67:ce:64:d6:
3e:68:f6:a1:fb:d8:44:d7:ab:81:f7:86:64:22:4d:fc:1d:89:
f8:82:31:74:94:64:b3:04:e6:79:f2:f3:0a:11:54:da:21:4c:
c3:c0:61:98:21:da:1e:e7:9b:96:c2:b4:08:8f:7e:34:d7:39:
8b:bc:ac:75:8a:b2:31:ea:f3:48:7d:74:34:be:d0:14:48:42:
21:b3:a6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:51:56 2026 by rpki-client