Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier: a+IzNcx8C7TwqE2ewVe9Pi+mSWZzd2kRCWhw3DSl144=
Subject key identifier: 34:96:00:CB:D2:04:9D:93:48:FD:E3:89:2A:91:16:34:D8:86:A9:17
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 019CAC7E0B2CDAD32B97075681CDEA4E99B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number: 0582
Signing time: Mon 02 Mar 2026 03:01:07 +0000
Manifest this update: Mon 02 Mar 2026 03:01:07 +0000
Manifest next update: Tue 03 Mar 2026 03:01:07 +0000
Files and hashes: 1: LFUS6tQiGpmjI6ItUVw2MpTAETI.roa (hash: FEu4LPnIRepU4N89SAmjCCbg/lOypjW1gLoZTKRnXmE=)
2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: zp5oVB2OOOE9eHMCHPb6FqWVkuMoeTPmZDaAHg8C62A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:0b:2c:da:d3:2b:97:07:56:81:cd:ea:4e:99:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: Mar 2 03:01:07 2026 GMT
Not After : Mar 3 03:01:07 2026 GMT
Subject: CN=349600cbd2049d9348fde3892a911634d886a917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:d3:cb:a0:4e:a0:1a:93:a0:c7:44:33:e1:
e5:24:71:8a:4c:7a:4b:5a:2e:e1:a7:42:f3:e6:97:
58:2e:f9:5e:9f:dc:13:80:fe:69:41:00:df:e4:6d:
db:31:9c:7c:51:1f:38:0f:34:6a:2e:9d:40:ee:60:
51:9c:4b:88:7c:07:81:a2:d0:61:da:3b:5d:8c:76:
17:2d:5c:f0:bd:9f:c5:d0:98:4d:76:89:c1:da:8d:
3c:84:cd:c3:51:c7:28:aa:7b:f8:4b:40:f7:6b:1d:
39:1b:c9:08:4d:1f:23:58:15:44:21:ac:f2:46:b0:
7d:35:25:f9:62:f4:c7:c2:fd:77:da:80:35:44:8a:
78:31:1d:32:ff:72:92:90:f2:8a:10:b7:1c:35:1f:
b7:02:44:14:d6:95:70:9f:f8:24:4b:d3:b9:52:2a:
43:3b:b2:1d:dc:71:ee:21:2c:64:43:06:d9:cb:c8:
62:d2:f0:a5:0c:41:c7:2a:4f:1c:30:f7:da:c8:9d:
f0:97:1c:58:63:a8:83:ea:45:30:2b:49:ff:e0:de:
2d:f9:ec:41:04:a4:bd:a4:3d:dd:53:64:7a:9f:fd:
ee:13:ce:cf:ea:7a:85:9e:61:c7:cd:8d:ad:34:42:
a6:76:28:0c:ef:0e:04:fd:8b:f0:f7:03:73:3b:77:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:00:CB:D2:04:9D:93:48:FD:E3:89:2A:91:16:34:D8:86:A9:17
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:70:7a:6f:4d:55:60:cf:2d:1d:d1:a9:9e:57:4b:8c:1c:94:
55:5f:b8:a9:a0:3f:9f:ba:61:29:93:be:ce:b9:7d:0a:44:1c:
91:5a:90:61:56:9e:5e:f5:a2:54:67:23:d6:3b:18:95:85:7b:
29:19:f9:aa:02:1a:a7:f2:48:08:9d:0f:b1:33:08:7f:82:07:
06:ff:cd:be:fc:fe:48:d0:42:a5:78:f4:96:86:f3:39:eb:d9:
6f:46:b1:39:14:ba:64:30:82:e7:c0:c9:23:e1:07:59:1e:f5:
f8:de:df:8e:c2:53:87:98:03:42:47:cc:f8:1a:92:13:86:91:
55:77:97:99:04:e3:28:45:3b:0d:79:5f:ec:a7:1c:38:c8:aa:
78:d4:b7:3c:a1:e6:35:c2:31:57:d8:1d:8f:eb:56:9b:71:58:
2a:09:4b:a9:f2:18:82:e8:16:4b:ac:8c:a3:55:c1:48:f0:d1:
1c:74:2a:96:c0:04:ad:31:37:d9:7f:61:03:4d:77:c6:b0:21:
5d:e3:7e:cc:b9:ab:d8:ff:e2:cd:6f:df:80:fb:5a:76:91:0a:
f0:a2:9d:6c:10:fe:db:27:22:9b:01:bf:7c:c8:9c:7f:ae:47:
71:11:e8:68:a2:fc:bc:85:28:d2:d5:d6:56:0f:2b:35:5b:4c:
c8:09:d6:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfgss2tMrlwdWgc3qTpm2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjFhN2JmNzQyODVkYjJlODIwOTFmYmY0NjNhMmVlZjZl
M2E1NzgwHhcNMjYwMzAyMDMwMTA3WhcNMjYwMzAzMDMwMTA3WjAzMTEwLwYDVQQD
EygzNDk2MDBjYmQyMDQ5ZDkzNDhmZGUzODkyYTkxMTYzNGQ4ODZhOTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdzTy6BOoBqToMdEM+HlJHGKTHpL
Wi7hp0Lz5pdYLvlen9wTgP5pQQDf5G3bMZx8UR84DzRqLp1A7mBRnEuIfAeBotBh
2jtdjHYXLVzwvZ/F0JhNdonB2o08hM3DUccoqnv4S0D3ax05G8kITR8jWBVEIazy
RrB9NSX5YvTHwv132oA1RIp4MR0y/3KSkPKKELccNR+3AkQU1pVwn/gkS9O5UipD
O7Id3HHuISxkQwbZy8hi0vClDEHHKk8cMPfayJ3wlxxYY6iD6kUwK0n/4N4t+exB
BKS9pD3dU2R6n/3uE87P6nqFnmHHzY2tNEKmdigM7w4E/Yvw9wNzO3efewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSWAMvSBJ2TSP3jiSqRFjTYhqkXMB8GA1UdIwQY
MBaAFHrxp790KF2y6CCR+/Rjou7246V4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wNTg0MzUtYTFjNi00NDM2LTk1YTIt
YjcxMTRiNjlmODRjLzEvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wNTg0MzUtYTFjNi00NDM2LTk1YTItYjcxMTRiNjlmODRj
LzEvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHB6b01V
YM8tHdGpnldLjByUVV+4qaA/n7phKZO+zrl9CkQckVqQYVaeXvWiVGcj1jsYlYV7
KRn5qgIap/JICJ0PsTMIf4IHBv/Nvvz+SNBCpXj0lobzOevZb0axORS6ZDCC58DJ
I+EHWR71+N7fjsJTh5gDQkfM+BqSE4aRVXeXmQTjKEU7DXlf7KccOMiqeNS3PKHm
NcIxV9gdj+tWm3FYKglLqfIYgugWS6yMo1XBSPDRHHQqlsAErTE32X9hA013xrAh
XeN+zLmr2P/izW/fgPtadpEK8KKdbBD+2ycimwG/fMicf65HcRHoaKL8vIUo0tXW
Vg8rNVtMyAnWeQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:54 2026 by rpki-client