Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
File: EVGkgRFI99BZj1_wIdrdOhDl8pw.mft (raw, json)
Hash identifier: k54J1fxYHXEseYAsuU/adZnl+p5Fb3kbcPP0tfh3IoQ=
Subject key identifier: 7D:51:78:EE:40:FC:85:E7:38:07:E5:6C:90:A2:45:60:A7:45:C4:E0
Authority key identifier: 11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
Certificate issuer: /CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Certificate serial: 019D38D381ECB72A15C9DAA2E70EB9BCF33B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:18 +0000
Manifest this update: Sun 29 Mar 2026 09:01:18 +0000
Manifest next update: Mon 30 Mar 2026 09:01:18 +0000
Files and hashes: 1: EVGkgRFI99BZj1_wIdrdOhDl8pw.crl (hash: gRBhLTru5FpSZdJraFAeQf/A04cSOM4cKG+EieKpZx0=)
2: KQTIjNE7caGv_nviIPZ5cZuy8Q8.roa (hash: cSvFuOqXXAj2/wAYTIAfYAtvVPOOu2ZhX591QT1TiQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:81:ec:b7:2a:15:c9:da:a2:e7:0e:b9:bc:f3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Validity
Not Before: Mar 29 09:01:18 2026 GMT
Not After : Mar 30 09:01:18 2026 GMT
Subject: CN=7d5178ee40fc85e73807e56c90a24560a745c4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:f1:95:a0:11:37:92:cb:a6:ce:60:b8:c2:
46:41:7b:23:2e:02:cc:62:57:c5:aa:44:72:ae:18:
3a:03:f3:1f:6d:e6:94:86:0b:5a:5f:47:12:2a:40:
70:06:5a:b5:5c:99:5c:18:9e:07:11:2d:eb:76:23:
b3:c5:4f:c6:80:1a:25:8b:46:2c:b5:6b:4c:f2:d9:
86:2c:80:15:14:31:b7:9d:5b:c9:10:d6:6b:91:fa:
29:25:74:89:89:91:20:ef:83:82:a6:99:49:d1:3a:
34:0a:f5:e0:c7:0d:c7:45:5a:a3:43:46:a2:c3:fe:
e9:53:b7:36:7f:8f:a7:5d:eb:2f:0a:97:00:8d:0a:
a6:10:a9:ce:42:f1:48:be:b7:01:3b:1c:14:f3:ce:
a1:af:61:84:87:87:da:58:cc:29:f7:0d:97:05:b4:
ae:ed:e5:0a:3a:90:28:7e:f8:79:f7:a3:69:c5:18:
6b:fc:54:64:74:c5:61:63:1b:4e:e9:4e:86:29:92:
67:02:b6:fa:8b:54:39:3f:33:ec:95:bb:a4:5a:79:
08:3e:21:b5:79:5e:dc:ce:e7:94:84:de:e5:52:5f:
82:26:be:5f:5f:88:08:0d:24:97:9e:52:08:62:e4:
9d:d7:51:75:f6:34:46:05:41:31:25:1e:72:98:11:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:51:78:EE:40:FC:85:E7:38:07:E5:6C:90:A2:45:60:A7:45:C4:E0
X509v3 Authority Key Identifier:
keyid:11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a0:9e:ff:1d:38:8d:1e:e3:2b:88:8b:d2:ae:8e:b5:aa:c5:
e6:8f:63:fe:33:59:18:97:c2:fb:16:88:1f:ce:91:63:8b:47:
0a:36:02:75:38:f8:ed:be:96:69:eb:fa:fc:38:79:80:77:f8:
b7:54:5d:74:ca:74:fa:4c:0c:eb:5e:30:8a:31:7a:d6:f8:c0:
86:67:0f:2f:47:00:be:36:b9:b4:c2:5d:f6:62:4c:c2:33:91:
31:e1:b2:da:f2:56:66:89:58:6b:5d:5f:ed:e0:32:b5:41:96:
a4:cf:90:9e:df:9b:02:29:32:2f:fa:be:54:9d:a4:3d:5a:da:
d7:e7:f3:a7:8f:5a:95:6b:5e:11:bc:7a:08:ad:d0:9b:d6:3e:
2a:d4:06:ad:e2:9b:8e:38:45:51:5a:ab:dc:ab:24:ae:e0:a1:
b1:92:f9:79:74:aa:eb:f4:8d:6d:13:9c:93:85:cd:17:09:94:
96:eb:e2:01:af:29:41:36:d1:f3:14:80:5b:1b:f4:a5:a2:86:
76:d1:07:4b:a1:03:3e:d1:2d:2f:4f:8a:06:f3:df:d8:cc:e9:
f3:53:7e:8c:f6:26:50:4b:e5:58:a1:fb:9a:57:9d:93:27:10:
ed:93:66:65:42:97:6c:68:b9:d8:f6:70:11:c6:47:d8:b1:ba:
6b:a2:a9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:15:20 2026 by rpki-client