
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier: LtnOzXS67Nyvd2HyuoCsmRXmQdXXt1FQdi5WKNbl3sE=
Subject key identifier: 61:0A:F4:EE:28:24:B4:D8:21:AD:17:8A:67:BE:57:DE:B6:1F:87:94
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 019DA3AF3B10552124F3D35B0848DE789EC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number: 0602
Signing time: Sun 19 Apr 2026 03:01:03 +0000
Manifest this update: Sun 19 Apr 2026 03:01:03 +0000
Manifest next update: Mon 20 Apr 2026 03:01:03 +0000
Files and hashes: 1: LFUS6tQiGpmjI6ItUVw2MpTAETI.roa (hash: FEu4LPnIRepU4N89SAmjCCbg/lOypjW1gLoZTKRnXmE=)
2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: 3nqntNB7+vR5WbfT1aRUxHP/jEFwQ4pF0s0MAwiHYi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:3b:10:55:21:24:f3:d3:5b:08:48:de:78:9e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: Apr 19 03:01:03 2026 GMT
Not After : Apr 20 03:01:03 2026 GMT
Subject: CN=610af4ee2824b4d821ad178a67be57deb61f8794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:cd:77:2c:2b:fe:58:b3:55:8a:6d:38:27:
6a:7f:c4:5b:30:63:a9:38:08:0a:93:d9:bb:6b:38:
37:c6:2c:ee:8b:4b:ba:c5:74:16:ea:61:98:45:47:
8a:85:b9:73:a8:50:b1:cb:90:ee:6e:e2:e4:52:39:
ec:32:75:6c:89:67:5d:e4:a7:f1:e4:41:b2:8a:b8:
e2:79:3a:a1:d7:69:45:b4:a4:a2:1f:24:18:ba:f8:
71:2a:fe:35:e0:78:aa:e3:66:31:8e:4d:77:f5:14:
99:a8:2e:f2:9e:0a:e0:5d:7c:ce:6f:4d:fd:57:b3:
0e:b7:0e:e2:7d:dd:47:2d:0b:d7:72:4a:0f:d5:61:
6f:57:48:a6:85:03:57:f7:65:ad:98:05:05:61:3a:
77:52:c0:0d:c5:7c:1c:98:4a:ca:82:50:8a:3b:1c:
59:57:fd:4b:5f:99:7c:05:52:bb:d1:0c:78:d2:7e:
ed:9b:0f:1d:3d:42:ca:5f:c0:94:b2:92:8e:77:a5:
ac:41:8e:4c:6e:b0:27:93:37:ef:2f:41:7b:84:46:
48:1e:a1:00:0b:05:57:51:a3:09:ed:f6:cf:c7:fe:
ea:66:00:3e:fa:3e:81:96:44:b8:f8:f6:b6:04:9a:
d8:12:89:dc:25:3d:fd:01:ba:e6:cb:8e:31:82:99:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0A:F4:EE:28:24:B4:D8:21:AD:17:8A:67:BE:57:DE:B6:1F:87:94
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b3:d0:11:bc:14:9c:3d:84:9a:2b:dd:36:fa:d4:cb:36:3a:
ef:37:4e:d8:67:ad:05:ac:dc:9e:ed:61:ff:42:b0:e0:ee:35:
17:00:8c:9b:ec:08:76:4c:41:8c:b6:1a:86:58:40:ad:3c:ff:
f4:df:74:84:58:d0:63:51:6a:57:60:19:17:99:13:dd:43:fd:
5c:a5:85:aa:4c:c7:98:b4:76:b7:0b:40:ac:93:48:4a:e2:b4:
10:bc:60:bd:20:8e:96:6f:6f:50:ee:67:3a:31:a0:fb:89:6c:
04:a5:be:15:c0:db:91:93:17:ba:f3:f4:f3:a1:f7:e9:5d:a4:
92:4e:0f:9e:a1:d6:be:86:60:eb:56:77:2a:f6:cf:cf:87:f5:
e2:89:7f:1d:63:27:65:55:0b:ba:60:d7:67:ab:72:fd:53:75:
73:3e:d6:f1:99:f2:0b:eb:75:dc:30:8c:4d:80:83:ed:77:36:
b8:f2:44:0a:7c:52:94:60:c7:7a:4c:ec:fc:b9:8a:ac:33:d7:
de:00:90:99:3b:62:12:30:f3:18:b6:23:b4:8d:fa:2f:37:2d:
44:4f:c9:b9:fe:8c:3b:d5:4b:78:10:12:a0:54:bc:ff:64:43:
78:1b:88:6c:48:bb:4a:33:cc:e2:f8:f6:17:24:fb:f6:fd:dd:
71:0b:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:53 2026 by rpki-client