Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: ogZ+i1rvbXoSOUF0kGKQ/GYwnyhCiDgyQrv1xG2XEew=
Subject key identifier: 3A:54:AE:C3:51:26:4C:4A:89:F3:4F:35:86:35:B7:AC:E1:06:23:90
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 019D9A3E942D88C3E692F09EBB16E7D0BB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:01:25 +0000
Manifest this update: Fri 17 Apr 2026 07:01:25 +0000
Manifest next update: Sat 18 Apr 2026 07:01:25 +0000
Files and hashes: 1: SSZdn02qDEwwqUSfTnOV3zXUcLo.roa (hash: y3a3/hKTKamWecmVmVYjV0+wFS3yke4xPMfZhOZPAII=)
2: WiOXXkvgTsUMJh2SB31kcxISa0I.roa (hash: Ug6Us7ZSr7Hic6TNnmKhB5WDJGEDtwfaBPHgJG/vxFQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: rr4s9c0oyBsKtdZXnQUFMMu4uZT3NxRKIxrf+yeoiaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:94:2d:88:c3:e6:92:f0:9e:bb:16:e7:d0:bb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Apr 17 07:01:25 2026 GMT
Not After : Apr 18 07:01:25 2026 GMT
Subject: CN=3a54aec351264c4a89f34f358635b7ace1062390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:c3:74:36:85:cc:a4:6f:c4:95:80:e0:71:
ac:65:79:2b:8b:37:b1:50:8b:be:28:34:06:2a:a7:
eb:d6:ed:08:41:a9:59:3b:b9:0f:0c:8c:f4:3c:76:
76:48:b8:52:e4:d1:ed:ee:2f:a1:ea:88:64:11:13:
59:a7:da:a5:e4:07:6f:f7:db:af:d6:38:ed:b7:d7:
44:a3:94:82:22:9f:6b:16:c2:7f:d0:c3:3c:fd:7c:
a0:d0:7f:7b:13:fc:55:b4:17:58:be:ce:42:59:5a:
08:81:f1:56:29:81:3f:61:26:90:f5:f0:9e:09:02:
00:f6:40:e3:91:d5:fa:42:ff:ea:dd:db:dd:88:f1:
9e:7a:9b:00:25:fb:bf:69:c2:85:03:e9:0f:28:06:
6a:17:59:05:6e:01:95:96:b0:de:58:0d:29:95:0a:
e6:d1:50:43:33:a1:91:fd:bd:24:80:a2:40:e1:a1:
7e:6e:16:4f:4b:05:27:14:21:ba:a7:c4:a5:e6:a3:
45:3c:95:7b:07:11:a4:e3:5d:d2:11:fd:99:ef:7b:
19:55:dc:50:c9:b7:32:80:13:4a:49:88:56:3a:f8:
ce:8e:3c:f1:73:ee:ef:b6:55:fb:c5:1e:e1:4e:8f:
16:c3:be:b6:15:d1:ce:2a:3f:0a:a8:23:91:ef:28:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:54:AE:C3:51:26:4C:4A:89:F3:4F:35:86:35:B7:AC:E1:06:23:90
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:40:5a:e1:b0:55:98:e6:19:6f:35:e7:b2:87:38:86:b0:ea:
ca:c3:cc:36:3c:61:b2:04:3d:8e:80:bd:63:31:c7:cf:c2:38:
38:9e:23:45:dc:cb:ea:93:bb:a4:55:df:95:83:16:b0:b1:77:
b4:cb:31:7c:fe:b5:71:19:94:23:59:9a:63:cd:a3:f7:22:4c:
c9:ce:6c:1e:be:bb:c2:a1:e5:59:1e:b1:ff:91:36:db:55:1c:
75:51:97:5a:08:08:e4:ab:31:8b:9b:b1:bc:18:08:87:35:8c:
eb:f0:71:ca:05:20:77:46:88:80:a0:51:84:c7:98:7d:aa:a9:
0c:a8:78:21:69:02:dc:bc:fb:98:90:62:2d:d1:7c:a8:63:b8:
92:2d:a4:a7:ff:a4:dd:96:f5:1a:b6:07:91:62:be:83:3a:a7:
06:c2:ed:f8:67:58:c7:f0:47:a0:d7:36:1f:78:02:d8:aa:a5:
14:ca:05:cd:78:4c:86:a2:87:8d:e3:e8:14:71:ef:7e:36:c5:
9a:f9:b5:54:de:a3:cf:30:7c:7b:90:53:7b:96:15:3a:43:0f:
25:48:24:8b:23:be:ec:dd:85:4e:c5:60:43:d4:1f:27:dd:b1:
60:31:e5:7a:0d:44:96:3a:37:59:7d:9f:d0:bd:20:df:0c:c3:
73:a2:a2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:14 2026 by rpki-client