Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier: Jtoa9LljB9VhXZEaYMY8ObYZ59spveHSBobs1u39hyE=
Subject key identifier: 70:15:0D:47:B8:A5:2C:A4:2C:7B:AE:59:04:45:40:27:48:02:A1:2F
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial: 019CACB4CE877BC565ED9896123FDEFDECA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:00:56 +0000
Manifest this update: Mon 02 Mar 2026 04:00:56 +0000
Manifest next update: Tue 03 Mar 2026 04:00:56 +0000
Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: 8E5qcCXlgq7Q8P/A16/dAPK3pFzlPt3noaJdjKNgrPg=)
2: DyBrkSK4a6M3RlwftQhSDaHeKfM.roa (hash: h4xKh81GTCFolaSYT7/bVgNQm45KFUeIOt1K9PqX3Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ce:87:7b:c5:65:ed:98:96:12:3f:de:fd:ec:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Validity
Not Before: Mar 2 04:00:56 2026 GMT
Not After : Mar 3 04:00:56 2026 GMT
Subject: CN=70150d47b8a52ca42c7bae59044540274802a12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:ff:83:46:4e:94:78:6c:fc:26:83:b1:04:
65:4d:06:f2:94:1c:d6:b1:ac:34:bc:ae:f2:ae:18:
c9:35:a0:e3:28:3f:a1:d9:4a:5a:20:e8:59:08:4f:
e8:bc:c2:3b:0b:e4:2c:fd:56:7b:1a:17:b0:37:08:
d6:c0:8e:4e:89:02:01:0c:41:dd:0a:4e:64:a9:79:
8b:68:fe:1a:27:73:48:65:23:0d:09:7b:ea:3b:68:
c8:3f:b8:10:18:b9:54:40:c4:e3:f8:d6:d6:0d:36:
5e:9d:6f:c2:3d:73:47:80:02:16:be:68:79:72:39:
81:c1:63:6d:7a:2d:c5:37:92:6e:c3:7c:c5:82:56:
95:1c:08:8a:0a:88:37:db:e3:44:61:01:84:7a:b7:
33:ae:4f:fc:72:0e:a8:e3:6a:29:65:ce:d6:22:b1:
e8:ba:d2:5f:ec:34:57:98:8e:aa:9f:ce:a4:ab:62:
95:f6:ec:d6:5f:67:bc:6e:bc:8c:6c:ed:ca:97:21:
15:e1:a0:30:dc:70:9e:96:d8:76:4f:8a:32:de:48:
4f:8a:be:08:88:09:76:04:46:13:31:a7:f4:fa:a2:
67:ad:b3:92:bc:05:75:be:9b:0d:c1:04:35:4d:1f:
cc:76:12:a8:cd:50:6c:a8:b3:3e:2a:22:cf:cf:e0:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:15:0D:47:B8:A5:2C:A4:2C:7B:AE:59:04:45:40:27:48:02:A1:2F
X509v3 Authority Key Identifier:
keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:33:3f:25:8b:1a:5b:79:8d:c4:78:2b:29:14:76:98:31:98:
58:21:2a:fa:bb:82:ed:25:b2:cc:3e:6a:64:61:87:92:68:a6:
4e:c7:ce:69:01:23:6d:8b:da:eb:ef:bc:33:ca:01:0b:db:eb:
a8:01:67:31:09:d5:83:85:07:8c:b3:1e:4c:6a:6e:a7:ba:19:
f9:82:1c:4b:84:94:5b:eb:99:8b:99:a4:61:ad:2d:7e:de:23:
77:c7:cc:7f:81:36:d5:5a:f8:56:0f:b6:79:c7:af:f9:1e:fa:
d9:2f:7d:4e:b5:35:1e:4e:4f:bb:55:69:97:a2:d8:26:3a:44:
bb:e9:95:44:10:01:62:16:ba:d6:71:ff:be:e2:48:a2:f9:ce:
5f:86:74:d0:25:51:63:81:d5:ed:3c:27:68:f5:10:5b:d5:4f:
72:3a:cb:7e:d8:14:35:b8:c4:ee:b3:3e:20:5c:1e:cc:8a:86:
64:60:ad:55:1b:6a:60:ad:b2:ae:bb:5c:bc:ac:3b:30:25:33:
10:75:78:b8:bf:73:bb:d6:e4:28:53:2b:1e:8a:8b:1c:ca:f9:
8a:4c:8e:51:40:e4:b4:58:df:51:7c:9d:00:02:d1:0b:f3:a9:
7b:37:e5:22:3a:88:8a:4f:ae:ec:28:21:5e:d7:eb:c5:c2:04:
02:dc:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:39 2026 by rpki-client