
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
File: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft (raw, json)
Hash identifier: uV96JITWueYqBNvXNKmccn0pU92jpG0ZSI2WoMcH0oY=
Subject key identifier: 8D:65:8B:E6:A2:FA:63:A7:BE:A1:DF:8B:83:D4:A0:86:29:89:AB:C9
Authority key identifier: 12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
Certificate issuer: /CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Certificate serial: 019CAAC6474E4F0A860CB6200C76BFB48BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
Manifest number: 0F25
Signing time: Sun 01 Mar 2026 19:00:46 +0000
Manifest this update: Sun 01 Mar 2026 19:00:46 +0000
Manifest next update: Mon 02 Mar 2026 19:00:46 +0000
Files and hashes: 1: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl (hash: +VOzU1wAdDPirgmoVqvxVKcrofQmLBvpzwi/uxjpRbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:47:4e:4f:0a:86:0c:b6:20:0c:76:bf:b4:8b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Validity
Not Before: Mar 1 19:00:46 2026 GMT
Not After : Mar 2 19:00:46 2026 GMT
Subject: CN=8d658be6a2fa63a7bea1df8b83d4a0862989abc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:a3:81:c5:4c:57:45:78:40:05:fb:fc:91:
34:77:4d:43:de:b2:5b:fa:ef:97:6b:9b:48:aa:8c:
6b:32:65:db:4e:3f:6c:43:cc:7a:fa:d5:4e:a0:75:
da:b9:f5:62:39:bf:d0:9f:d6:a7:35:70:84:2e:98:
dd:9a:09:75:f0:00:ff:1d:4a:63:a3:fa:85:57:11:
7b:27:35:9c:0d:3a:fb:05:e1:a8:65:75:b5:33:10:
7c:8f:24:e2:95:0d:09:9a:2e:07:79:9c:e3:10:d8:
d5:2e:b8:a2:31:5b:0d:63:45:49:36:ba:91:f9:4d:
31:0b:3b:d5:ea:d9:fd:a8:ed:ac:84:82:47:b5:2c:
3d:5b:bc:fa:2f:6b:1f:5e:1d:70:3e:48:92:39:97:
57:ef:a5:b9:2f:ce:c8:c8:0b:1d:7d:5a:4d:10:0c:
c0:d5:84:23:d5:b6:fc:c3:44:f4:cb:b4:45:0b:c1:
18:72:28:8e:f4:31:69:34:a4:bd:f7:6d:d3:e7:d8:
8d:04:10:79:83:32:2b:bf:fa:6b:99:f3:ca:8d:fb:
91:0f:85:01:9d:07:67:a0:0d:24:e0:37:c0:83:01:
9c:69:2f:f8:ad:23:b4:ff:4b:11:b6:52:ae:75:ac:
ef:25:6b:e2:a0:d5:f2:1e:47:d0:6c:6e:99:bb:73:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:65:8B:E6:A2:FA:63:A7:BE:A1:DF:8B:83:D4:A0:86:29:89:AB:C9
X509v3 Authority Key Identifier:
keyid:12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:26:6b:9b:80:fa:75:2a:b3:9d:87:e7:8e:fe:57:b9:7b:91:
52:b2:c3:67:1c:8b:4a:6b:b7:05:e9:e1:39:98:37:bd:e1:d9:
39:3e:18:3e:72:12:f0:23:02:ea:17:41:11:56:6c:57:2b:68:
56:a4:98:c8:38:48:fb:48:e5:3f:90:3a:17:5f:68:be:d2:e8:
8a:9e:a0:0e:f8:88:29:14:f0:33:bd:83:88:a3:6d:17:32:ac:
05:45:af:2f:b2:a1:2d:f8:c7:a0:0d:a3:1b:56:cc:c8:4d:87:
5c:51:2c:41:34:37:5b:57:c3:7d:4c:2a:ca:fc:43:ed:7e:e6:
bc:06:0e:97:b8:a4:eb:25:4b:11:74:5f:30:b7:f8:08:9c:1c:
21:a9:a3:25:99:5e:ec:51:84:f6:40:88:51:b9:49:9e:c5:ba:
66:84:05:d7:20:c0:7e:60:01:34:f5:cb:cb:79:87:40:46:46:
91:03:ff:3c:1e:3b:b1:3d:32:3f:db:43:fc:23:41:bb:46:80:
29:a2:cb:10:3a:2a:55:c1:ba:2c:f3:57:2d:e5:65:eb:18:18:
36:0e:85:68:c0:83:e5:6d:55:82:67:e3:7d:d5:a6:a5:22:e8:
cf:2a:25:d3:77:b1:fe:c6:d1:33:02:82:c3:91:47:a0:9d:43:
43:96:13:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:53 2026 by rpki-client