Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
File: EvG7YR8rejeAD0nGwSXF7pi3GcU.mft (raw, json)
Hash identifier: nhhEeGxue/bCU0CbZ+wDK4TRsMM9qMtIohHM7FGNU24=
Subject key identifier: D3:DB:E0:F5:77:0F:7A:E3:49:A9:92:D0:E9:3F:54:C5:E4:78:CA:1F
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 019DA30A861B0CDA6C20A26E1A125BCEE9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 00:01:09 +0000
Manifest this update: Sun 19 Apr 2026 00:01:09 +0000
Manifest next update: Mon 20 Apr 2026 00:01:09 +0000
Files and hashes: 1: EvG7YR8rejeAD0nGwSXF7pi3GcU.crl (hash: hWMMprd0Vddf8Gs6SR1ez9bASDIRcf15gAyNsgNCrNM=)
2: Gir9LgWhSsgb94bpGNkPB7r934A.roa (hash: zl0DQvpHmGpSWRKUmaqnyadARVbCFs8/XgE/RWzBDNE=)
3: _l9-hJoHuce5rW5n5s2OtXCkFGg.roa (hash: MWBDyPAG0DyRDxAR/5EOYWfQTvK9o2NmF5/llYDGgE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:86:1b:0c:da:6c:20:a2:6e:1a:12:5b:ce:e9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Apr 19 00:01:09 2026 GMT
Not After : Apr 20 00:01:09 2026 GMT
Subject: CN=d3dbe0f5770f7ae349a992d0e93f54c5e478ca1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:9b:74:d2:77:c9:a8:0f:22:2e:b8:6f:0f:
f1:31:da:9e:93:4d:51:28:a1:f2:82:07:59:b8:c1:
a7:63:e1:78:9f:b9:3c:e7:85:5f:c1:7a:f5:16:ad:
17:45:50:6c:df:86:44:fb:5b:d2:44:a2:c9:b9:47:
b5:c9:76:a9:25:0b:21:de:6f:4f:9e:4f:52:f6:ae:
ec:65:5c:9a:af:9c:2d:d8:c1:62:cc:9b:06:70:63:
d8:5a:32:50:20:cd:5e:72:52:4d:3c:6c:17:7a:32:
f3:d5:54:7c:36:6f:d9:62:9a:3b:95:fd:fd:4b:9f:
e7:52:40:fe:14:90:51:58:c0:34:ca:f1:c2:a7:0a:
32:5d:53:3a:f1:83:26:23:0d:fc:41:e0:c9:34:cb:
18:b9:1d:e0:ab:27:be:a2:88:eb:58:14:b6:6c:38:
5e:91:93:7c:0b:5f:b5:07:a1:91:d4:a4:4d:ca:c6:
1a:7a:2f:ad:06:c2:5e:8e:a5:f4:76:75:c0:56:38:
f4:27:c1:81:c7:05:89:61:d0:6a:02:25:1a:6f:df:
0b:57:29:1e:6c:10:dd:c2:91:fa:5d:93:7b:12:55:
ec:09:aa:a6:d1:28:34:8c:c4:ca:58:cb:e0:77:84:
c2:10:18:39:fc:16:eb:38:f5:a3:77:63:8d:11:37:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DB:E0:F5:77:0F:7A:E3:49:A9:92:D0:E9:3F:54:C5:E4:78:CA:1F
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ec:e4:e5:32:70:f6:8c:94:09:24:1f:50:91:fa:76:9b:d6:
00:f1:9a:d0:cf:1f:c4:7b:14:e0:ef:89:17:70:83:92:4a:8e:
c5:fa:62:49:dd:e3:f5:e7:c9:16:03:54:1d:a6:f2:5e:32:0a:
6e:99:92:9a:d4:e3:68:10:14:3d:2f:ee:e9:94:b6:b2:cf:ea:
41:a7:a8:9a:26:df:c7:92:29:67:c1:c6:03:1f:ba:30:05:a1:
e4:5b:d1:02:6f:5d:4f:55:af:ae:2c:5b:4d:f8:95:aa:13:45:
4e:7c:68:90:9d:7a:f2:5a:b4:70:4f:c0:56:aa:86:43:26:e7:
e5:5e:6c:cd:87:2a:91:bb:47:55:ca:34:a5:0f:22:e7:68:4f:
15:6e:78:9b:ce:8c:4c:81:c3:e1:cf:29:46:55:bb:2c:49:58:
42:81:0e:8b:ab:23:fc:69:a2:92:62:66:e3:a7:fd:90:bf:67:
3c:17:8c:33:a5:2f:db:27:d8:05:f4:db:7e:3d:bf:a6:41:e7:
a0:58:4f:a6:70:02:e5:ea:ab:d9:15:83:85:72:02:b3:6d:9c:
33:00:e4:16:97:6a:60:99:b3:eb:b3:c9:59:d1:71:44:fc:f0:
f6:c6:d9:fd:4c:a3:62:5a:ac:43:c1:b0:bd:63:06:4b:db:97:
17:4e:a4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:06 2026 by rpki-client