Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: ImAvIzq2JJHtcyUSUJGC3DEnDE7BvjLwj3f8pQfleac=
Subject key identifier: DB:E3:46:34:7D:25:47:97:8B:12:00:9A:33:A0:4C:06:0F:F9:82:45
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 019CAAC667DAF089EF0D41B10D1172087A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:00:55 +0000
Manifest this update: Sun 01 Mar 2026 19:00:55 +0000
Manifest next update: Mon 02 Mar 2026 19:00:55 +0000
Files and hashes: 1: SSZdn02qDEwwqUSfTnOV3zXUcLo.roa (hash: y3a3/hKTKamWecmVmVYjV0+wFS3yke4xPMfZhOZPAII=)
2: WiOXXkvgTsUMJh2SB31kcxISa0I.roa (hash: Ug6Us7ZSr7Hic6TNnmKhB5WDJGEDtwfaBPHgJG/vxFQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: u2dEilB1aVK2tiN8MR5QCEVSBi7wtCWc37noFndMEsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:67:da:f0:89:ef:0d:41:b1:0d:11:72:08:7a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Mar 1 19:00:55 2026 GMT
Not After : Mar 2 19:00:55 2026 GMT
Subject: CN=dbe346347d2547978b12009a33a04c060ff98245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ba:8c:83:ae:53:9a:e5:f6:e6:5a:cd:45:c8:
de:dd:a0:15:24:88:be:1b:64:e3:75:6c:f3:10:de:
e3:05:a8:3c:30:38:16:45:38:e7:17:4c:23:68:0a:
f0:13:29:5f:7c:82:d3:d7:70:42:9c:05:91:da:d8:
4f:2a:98:48:c2:24:ab:e7:f0:47:55:64:43:f1:04:
43:e8:99:a6:9d:44:f7:58:1a:cf:ca:c1:dc:94:ec:
11:32:c3:eb:c1:69:77:df:bd:04:a8:58:38:6a:32:
48:1a:57:51:78:4e:1c:91:4b:2c:d8:52:56:e0:a3:
3d:1b:12:9c:93:71:9b:83:3b:b9:7c:fd:01:d9:f4:
6d:14:ee:b9:60:d1:6d:ac:1f:a0:42:6a:75:6d:9a:
7f:8e:02:48:59:66:2b:9c:37:0d:96:41:5b:2d:07:
06:40:68:91:6f:dc:75:87:d6:e9:9a:58:ea:cb:0d:
08:6c:e7:1c:c5:2b:a3:04:b6:44:ee:56:19:c7:f4:
cb:1a:4a:00:bf:c6:95:82:69:72:44:30:44:29:9b:
dc:db:af:5b:85:de:8c:0b:3b:17:34:b0:f0:3d:e3:
ee:4e:ea:24:03:75:e7:16:1d:3a:98:d7:c5:3c:f5:
66:d3:60:31:3f:dd:d5:88:0b:54:c1:18:3c:fa:2b:
8a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E3:46:34:7D:25:47:97:8B:12:00:9A:33:A0:4C:06:0F:F9:82:45
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:78:8e:ea:be:15:f4:6d:ec:ec:4c:be:30:91:de:26:75:44:
e8:85:60:db:63:c6:8b:95:0f:ad:64:c4:7e:53:ca:fe:55:50:
4e:3b:e2:d7:80:02:67:18:c0:b0:68:42:c1:a3:e4:fa:57:a9:
6f:e9:66:d2:ce:7b:b9:cf:77:63:d1:93:37:e1:4f:f0:06:0d:
d9:d4:7c:57:dc:82:3f:9d:61:26:68:06:b6:f9:11:06:dc:bf:
0f:53:48:b6:07:15:15:82:0a:c4:62:a3:f0:29:a5:1a:34:05:
f6:aa:19:59:00:b9:12:99:a4:1e:e0:75:14:9d:c8:8d:08:05:
fa:68:9f:dc:60:0e:a7:0f:95:1a:cc:0c:9d:b6:dc:d9:28:6f:
22:e8:a0:2d:94:2a:3d:3a:8e:02:f1:33:4f:7f:e5:a4:1f:c7:
64:8c:93:e5:b7:b2:14:55:84:ee:9d:a5:68:00:6f:ef:7f:93:
be:4b:0a:f2:b1:4b:52:b9:49:af:ca:a9:3a:1c:24:13:e2:66:
a9:ed:7c:1e:1f:8d:42:5e:d8:c0:9b:09:cd:c8:b2:25:17:a9:
f6:27:14:b7:f7:49:7b:55:65:a9:b1:87:d8:07:5b:56:22:86:
69:4b:d7:09:4c:19:50:d0:82:fc:53:5e:3a:95:86:bb:f1:f9:
1c:81:5b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:46 2026 by rpki-client