
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
File: TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft (raw, json)
Hash identifier: 5qA94QOow4/Pj+qSQbwPk5Kom9epmOFI4arLlIqrYJI=
Subject key identifier: 06:20:C9:4C:47:1E:AA:06:D8:A4:FE:B0:78:9B:B3:CF:66:EC:25:6F
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Certificate issuer: /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial: 019CAB6B49087299DA48D36367C079FBC416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:01:00 +0000
Manifest this update: Sun 01 Mar 2026 22:01:00 +0000
Manifest next update: Mon 02 Mar 2026 22:01:00 +0000
Files and hashes: 1: HvD-KyEebZg0h4HW06zJm6RwnGU.roa (hash: VtrmuoyXYF78h8UEa9MliL+Xy0F2Gl7FRj7/hpHAjYA=)
2: TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl (hash: y+OnnSp065ALqzFPuXZD1lzwTukr3AYBkH6+NrCy8Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:49:08:72:99:da:48:d3:63:67:c0:79:fb:c4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Validity
Not Before: Mar 1 22:01:00 2026 GMT
Not After : Mar 2 22:01:00 2026 GMT
Subject: CN=0620c94c471eaa06d8a4feb0789bb3cf66ec256f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:eb:97:20:de:a1:df:32:f6:8c:a7:e8:1e:
57:76:dd:40:32:54:1d:3e:a0:f1:cf:4f:30:a9:ce:
47:da:de:86:5a:a6:85:be:24:d4:63:3e:79:80:62:
09:2b:2d:43:23:e9:d6:a3:78:56:ec:ab:46:76:dd:
60:95:bc:fe:c1:1b:1a:cc:94:a3:b8:f5:8d:bc:3e:
76:d1:d5:3f:e2:bc:90:8d:95:f9:0f:5a:7b:52:5a:
10:b2:b2:2c:af:03:cc:ee:df:6e:ea:0a:ad:a9:d7:
25:7d:3f:7f:73:51:f8:3a:5c:a7:7a:51:c1:1f:14:
8d:e0:82:75:ef:a3:65:fc:9e:15:ab:4a:05:64:42:
9b:36:7e:9d:08:ef:a7:bb:65:8f:69:65:23:9d:b1:
8f:3f:1c:4d:19:7b:90:e7:ba:97:09:01:3c:e2:2f:
42:6d:0c:f4:96:da:d3:73:0f:bb:ce:57:f2:ef:04:
72:4b:58:84:23:7b:13:27:03:87:79:c5:00:a6:42:
da:cf:a8:e9:2a:83:bd:af:ce:b8:14:8f:d5:f1:45:
21:a2:b2:45:db:f6:a4:f8:8a:d8:d5:d3:8c:01:89:
f5:2e:5a:f9:7c:e5:e8:ad:ff:b2:7d:01:22:2a:0e:
9f:d1:bc:c4:c8:12:33:4b:ad:82:5d:f7:a2:93:11:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:20:C9:4C:47:1E:AA:06:D8:A4:FE:B0:78:9B:B3:CF:66:EC:25:6F
X509v3 Authority Key Identifier:
keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:57:16:b3:31:0c:4e:bf:99:a3:8c:76:75:77:14:2d:6a:9a:
6e:bd:cc:97:24:dc:43:42:15:c3:9b:b1:dc:8a:4e:7f:f6:32:
99:8a:91:9a:1a:5a:5b:0e:9c:97:e7:6a:b1:27:d6:1d:9a:38:
18:56:7c:3c:6a:22:64:fc:5e:92:fb:d3:55:85:95:c2:c8:fe:
c6:0a:4d:cf:07:c2:3d:c8:00:dc:af:ec:7f:a0:fe:91:eb:56:
66:ee:47:5e:d7:97:3f:4b:e5:ec:3d:8a:33:c7:c2:a7:53:23:
2c:26:d7:62:4c:4d:41:b9:36:87:9c:c3:b5:72:50:78:bb:a0:
a1:95:76:67:0f:fe:06:00:d1:64:4d:da:56:62:9d:3b:d9:b7:
30:d9:2d:8b:04:1e:74:2f:69:8d:6b:1f:52:74:39:85:00:ae:
8e:e2:23:59:44:17:24:a7:7a:1a:4b:6c:0a:ec:43:2e:12:a4:
66:8f:32:7f:3d:83:86:84:97:7d:a5:b8:e8:b8:fb:ee:0a:b3:
0f:61:10:c0:c1:26:a2:8d:8a:8d:b7:c3:14:b0:96:72:cf:7d:
f7:97:63:7d:a0:0c:50:f1:ad:d7:0c:21:f6:03:55:64:62:34:
a5:73:37:bc:4a:6b:71:c4:bf:ea:74:39:b9:67:20:30:d2:db:
d0:bc:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:33 2026 by rpki-client