Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
File: EvG7YR8rejeAD0nGwSXF7pi3GcU.mft (raw, json)
Hash identifier: CvF2qJMR9tPVwwFGS+68pmXpFVxw1Vg1RCqFIE7gSD8=
Subject key identifier: 86:9E:B5:89:84:0A:1B:9F:8A:65:F7:22:00:F0:71:16:40:55:83:DA
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 019E2A3935D0286D62D1AEE04F2D7504FE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
Manifest number: 190D
Signing time: Fri 15 May 2026 06:00:52 +0000
Manifest this update: Fri 15 May 2026 06:00:52 +0000
Manifest next update: Sat 16 May 2026 06:00:52 +0000
Files and hashes: 1: EvG7YR8rejeAD0nGwSXF7pi3GcU.crl (hash: EbnD1VjUTanE34uaujxiSI7UdtL81FwIUux3GSpnb/c=)
2: Gir9LgWhSsgb94bpGNkPB7r934A.roa (hash: zl0DQvpHmGpSWRKUmaqnyadARVbCFs8/XgE/RWzBDNE=)
3: _l9-hJoHuce5rW5n5s2OtXCkFGg.roa (hash: MWBDyPAG0DyRDxAR/5EOYWfQTvK9o2NmF5/llYDGgE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:35:d0:28:6d:62:d1:ae:e0:4f:2d:75:04:fe:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: May 15 06:00:52 2026 GMT
Not After : May 16 06:00:52 2026 GMT
Subject: CN=869eb589840a1b9f8a65f72200f07116405583da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:03:20:94:67:5b:56:3c:9d:28:c4:3c:b4:
c3:16:05:85:f5:ef:df:58:b8:9c:60:9c:88:d9:6b:
4b:57:29:69:49:61:3e:90:1d:df:a1:80:67:9e:c7:
5f:19:56:32:e7:70:84:15:d0:a2:27:38:c7:d2:fe:
10:d1:b5:16:46:a0:6d:2a:61:bb:38:67:76:80:1d:
48:5a:2f:d0:24:c5:c9:b4:29:87:da:d4:4d:1f:13:
ff:44:c0:ad:a1:a5:34:f9:b4:55:3f:8d:e9:6a:75:
d8:ff:da:42:1a:04:be:a0:e5:12:a5:ef:a9:f5:63:
6b:5f:fc:6d:af:3b:50:ae:ea:33:9a:24:85:1f:e6:
ff:3d:bd:d7:79:3e:f0:92:6b:89:25:53:a2:29:86:
a7:bc:f9:c4:01:73:8a:6c:06:5d:b4:4d:7a:75:7c:
1d:76:a4:ee:c6:e3:68:3f:64:0e:e8:43:f6:32:1c:
2d:db:4a:02:05:d2:2d:7c:dd:b2:5f:42:52:a7:13:
44:39:f5:84:84:fe:b2:07:54:dd:fe:1b:fd:56:be:
e0:2f:2e:71:a8:77:78:ad:25:5b:ce:39:02:95:77:
dd:60:79:76:f9:71:71:24:61:82:8f:bf:f6:7a:a2:
aa:b5:74:e0:d2:6e:fc:b4:51:cc:64:34:79:71:66:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9E:B5:89:84:0A:1B:9F:8A:65:F7:22:00:F0:71:16:40:55:83:DA
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6c:9f:59:f2:19:bd:f5:58:a6:a3:35:f5:9c:36:d5:b9:b9:
b3:ab:c1:65:05:c6:15:8f:c0:57:42:69:ec:0f:2a:2d:5b:8c:
09:11:ab:92:54:28:3b:2e:9d:ee:21:7e:3f:17:c7:02:40:7f:
7d:7e:9f:26:b5:fd:fd:73:20:80:3c:cf:1a:37:1f:10:73:af:
74:bf:c0:22:d8:a7:33:4a:a8:24:05:5c:84:d4:dc:00:d4:d7:
37:58:79:5d:38:e4:ac:66:21:31:ee:9e:05:47:ce:a6:fe:a0:
2d:32:93:70:6a:8b:9b:27:b8:f4:ee:96:c0:a8:b7:3f:dd:1f:
eb:58:48:41:34:90:b5:c1:4e:fc:d5:8c:8d:3a:9e:9e:f4:e1:
d3:02:6c:20:06:cc:2c:6f:72:2e:c4:65:e3:2f:c5:54:57:02:
a6:45:42:2b:fc:c7:b7:b2:f3:ce:67:05:c4:9a:f2:d0:ac:28:
43:8b:1c:0d:5a:64:11:be:e4:d3:1c:4c:cc:4c:1a:4d:01:25:
34:5d:2c:72:4f:0f:08:5b:c3:db:f2:9a:a4:4e:91:bf:cb:74:
b1:7a:f7:0a:83:89:c3:bd:fc:7a:ad:58:54:32:fb:a2:d1:e0:
68:68:aa:ce:8b:5d:fe:d2:67:2d:76:c0:31:e3:9b:92:95:73:
91:1e:ac:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:07:10 2026 by rpki-client