Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
File: EvG7YR8rejeAD0nGwSXF7pi3GcU.mft (raw, json)
Hash identifier: N5v3DzzxlUXrTG38vLm6bj5zeWD4dMCBzOa3PqYf7Gg=
Subject key identifier: 97:32:FF:DB:04:41:F8:92:26:33:16:6E:6D:DE:FA:C3:0F:91:2B:07
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 019F11F832C29BE8D104DFB6B0E9B407DEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 06:01:46 +0000
Manifest this update: Mon 29 Jun 2026 06:01:46 +0000
Manifest next update: Tue 30 Jun 2026 06:01:46 +0000
Files and hashes: 1: EvG7YR8rejeAD0nGwSXF7pi3GcU.crl (hash: FY5c9Fb+XY+zjqEwziI2CjEpG2lJVEu1x3XV7Wv3ne0=)
2: Gir9LgWhSsgb94bpGNkPB7r934A.roa (hash: zl0DQvpHmGpSWRKUmaqnyadARVbCFs8/XgE/RWzBDNE=)
3: _l9-hJoHuce5rW5n5s2OtXCkFGg.roa (hash: MWBDyPAG0DyRDxAR/5EOYWfQTvK9o2NmF5/llYDGgE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:32:c2:9b:e8:d1:04:df:b6:b0:e9:b4:07:de:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Jun 29 06:01:46 2026 GMT
Not After : Jun 30 06:01:46 2026 GMT
Subject: CN=9732ffdb0441f8922633166e6ddefac30f912b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:5d:f9:0b:e7:64:42:58:12:aa:8a:4d:83:
06:58:e3:55:33:43:ab:39:7c:79:ac:49:bc:59:a9:
50:3a:ba:99:67:f9:f1:a6:66:c7:bd:12:37:13:f2:
f5:0e:5e:75:09:e5:26:00:2b:25:ce:a5:ad:7b:02:
38:70:65:d6:93:02:c5:15:37:7f:cf:2b:90:e4:6a:
37:f4:7d:e7:79:98:01:df:50:6b:07:7f:1b:09:af:
ad:b2:d0:b4:dc:ff:7e:aa:c2:dd:d7:8d:03:c2:ed:
1a:29:aa:82:86:e5:b5:31:d6:e1:cf:8c:40:07:fb:
51:e7:e0:5b:0b:02:eb:b4:69:59:eb:bf:7a:8b:ac:
e4:da:2e:73:37:b0:95:0c:55:6b:11:40:7e:36:8b:
0a:eb:d6:55:01:03:ce:e4:ed:03:94:ec:2d:aa:aa:
00:47:a0:62:45:7a:03:e2:2e:b7:d9:c0:4e:ac:ad:
01:e7:d6:32:05:21:03:af:89:ab:97:a4:37:7f:16:
ad:40:29:5c:80:e9:6f:77:a3:cb:34:25:f7:78:5f:
b7:11:99:c2:95:df:eb:14:43:3a:7f:68:de:1e:05:
6d:40:52:57:17:83:ab:41:1a:0e:77:23:00:92:c7:
e9:89:bd:45:c9:ff:ba:e1:d2:50:c7:b6:f8:79:d8:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:32:FF:DB:04:41:F8:92:26:33:16:6E:6D:DE:FA:C3:0F:91:2B:07
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cf:71:04:3d:57:ad:f0:a3:16:26:91:53:8c:9d:70:7a:38:
c5:5e:7b:92:c6:8c:1e:51:e4:eb:4d:cc:ce:21:6c:d2:11:dd:
be:92:74:61:ef:75:72:24:6e:eb:ca:43:bc:2d:ab:a7:6e:3a:
6c:19:fb:99:4f:d1:05:79:a3:17:63:a3:5f:6e:7e:4d:03:7d:
b4:cd:cb:97:23:7c:79:b8:22:6a:31:eb:fb:51:7b:c4:c0:50:
d2:e0:48:39:cb:31:58:13:91:b7:f6:cc:df:79:ed:24:34:f9:
d0:23:37:28:47:fb:b8:ea:c0:c7:b6:62:82:e6:61:c4:fd:e5:
87:7c:1b:38:0d:e8:40:5e:ed:91:de:65:0b:f4:40:6f:9d:9f:
d7:56:41:1d:a8:c8:88:b5:a1:85:77:95:93:3a:29:ae:5e:91:
68:c8:04:86:36:dd:6c:6b:95:c6:ab:d3:ea:ba:0b:e3:af:b7:
d6:61:23:49:b5:b0:72:bf:51:9c:22:02:c0:57:66:a4:e3:91:
03:d3:21:eb:8d:40:6d:9c:0f:bf:f8:60:d2:9d:fc:93:e3:c9:
16:e4:7d:71:b5:f4:36:6b:f2:a3:95:69:a2:26:8d:64:0d:a6:
ec:1c:ed:c2:ee:3e:a6:be:02:03:67:3e:4c:cc:01:e5:f6:61:
a8:3d:84:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:09:54 2026 by rpki-client