Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier: tfzNgRIcc+yctHt04zskHabmNCVx5Qn0PWoFNSrEPKA=
Subject key identifier: E4:AA:2A:11:7E:5A:EA:64:08:E3:0E:9A:1A:F2:A7:B4:A3:CF:82:1D
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial: 019D9C2D7DE6DBED3DA04D0D0ECE68C84D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 16:02:00 +0000
Manifest this update: Fri 17 Apr 2026 16:02:00 +0000
Manifest next update: Sat 18 Apr 2026 16:02:00 +0000
Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: tODKEUh4RZ6d92LXvLeFF4sBJqBzrvD5uzYBx3qdjRA=)
2: DyBrkSK4a6M3RlwftQhSDaHeKfM.roa (hash: h4xKh81GTCFolaSYT7/bVgNQm45KFUeIOt1K9PqX3Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:7d:e6:db:ed:3d:a0:4d:0d:0e:ce:68:c8:4d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Validity
Not Before: Apr 17 16:02:00 2026 GMT
Not After : Apr 18 16:02:00 2026 GMT
Subject: CN=e4aa2a117e5aea6408e30e9a1af2a7b4a3cf821d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:3b:a0:11:b0:b1:52:2a:80:9a:8c:1a:cf:
8f:21:02:dd:40:ff:fa:d8:5e:2a:3d:db:7b:47:f2:
47:fd:ab:5c:ab:1e:01:37:88:11:bc:be:e6:bf:0d:
28:e9:c3:55:ac:8c:83:b3:c9:cf:92:09:99:c4:88:
dd:60:85:a9:c6:5c:37:49:16:7b:3b:5e:65:83:b2:
88:84:3a:89:66:e2:ae:bb:1a:2a:9f:a9:a2:d6:7f:
66:7c:e4:12:e3:5d:db:bb:a7:98:85:15:bc:2e:dc:
92:9f:e6:b3:53:b3:33:bb:2d:67:13:ff:81:96:43:
87:27:99:57:3c:e2:81:35:82:b0:fb:f3:58:ed:b8:
9f:ce:61:33:9c:51:65:0d:18:02:0c:01:9f:b6:e6:
8a:16:e8:cf:a2:b2:9d:73:c0:e9:91:5a:f7:44:41:
88:7d:ab:3a:4b:76:71:e7:26:60:26:4d:fb:ae:8e:
15:97:52:00:04:02:f6:e6:dd:61:eb:43:8a:ef:ea:
bb:8a:50:cf:0d:f2:ab:74:30:ae:f1:ec:0d:59:b8:
5d:73:14:50:df:56:84:8d:fa:5e:0c:66:dd:5d:9b:
0d:91:a7:96:be:59:54:16:03:c0:69:b7:a8:3c:dd:
c9:07:b5:93:5e:81:dd:38:32:8c:4e:3f:b5:66:b1:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AA:2A:11:7E:5A:EA:64:08:E3:0E:9A:1A:F2:A7:B4:A3:CF:82:1D
X509v3 Authority Key Identifier:
keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:16:98:8a:61:11:af:14:89:71:f1:b0:25:d6:dd:59:86:c5:
6b:c1:df:88:09:82:fa:5f:23:99:78:42:96:d0:24:21:a0:1e:
13:58:ef:f3:4d:49:0f:0b:01:28:8d:f7:ed:ce:b1:2d:c6:d3:
32:9d:74:78:0d:c4:e8:f1:e2:3a:a4:2a:b6:7e:b4:e3:64:28:
27:4f:bc:aa:d6:9e:5a:a4:3e:c6:ad:93:9f:18:a0:c5:65:0e:
8c:88:54:43:46:f1:cb:fc:a6:55:b7:b4:0e:46:87:c7:d6:1e:
1a:75:2e:06:52:eb:dc:fb:ee:d5:ae:0b:f6:9f:5b:99:15:7c:
06:9b:39:45:09:ed:88:c5:c5:b2:94:d5:1b:cf:28:29:fb:b2:
7f:97:8f:b9:00:53:b8:9a:0e:aa:33:36:ff:36:55:00:b8:a6:
dc:36:73:13:1e:62:2f:6b:1c:e3:1c:97:e8:37:f5:46:26:0a:
7d:9b:46:52:75:2f:88:8e:7a:ab:c9:cc:c8:68:7f:6a:1b:cc:
ac:b1:f3:23:f1:ef:dc:8d:10:77:13:26:2e:e5:a0:5a:5f:fb:
72:2a:84:d1:a0:06:6d:28:09:e9:21:17:fe:08:9e:7a:4b:3c:
3f:20:7f:7f:cc:6e:42:44:54:fb:2f:c9:f0:31:7f:33:6b:f3:
ad:b1:3d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:51 2026 by rpki-client