Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: DunsZ4yrjzNkEq8WrHpNzsMlrZhVoTQM3KyJ99w/D7k=
Subject key identifier: 0F:49:CB:FC:B3:E5:15:99:E0:53:9D:1E:6F:63:DB:D6:0A:59:A0:EC
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 01A0024B27869C0865A93F8B9B02B5DBEE33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 22:01:14 +0000
Manifest this update: Fri 14 Aug 2026 22:01:14 +0000
Manifest next update: Sat 15 Aug 2026 22:01:14 +0000
Files and hashes: 1: SSZdn02qDEwwqUSfTnOV3zXUcLo.roa (hash: y3a3/hKTKamWecmVmVYjV0+wFS3yke4xPMfZhOZPAII=)
2: WiOXXkvgTsUMJh2SB31kcxISa0I.roa (hash: Ug6Us7ZSr7Hic6TNnmKhB5WDJGEDtwfaBPHgJG/vxFQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: dgl5hGGHQ4ceIvOdwGRTzNpR0zi+7xaQWh5JAEum7dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:27:86:9c:08:65:a9:3f:8b:9b:02:b5:db:ee:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Aug 14 22:01:14 2026 GMT
Not After : Aug 15 22:01:14 2026 GMT
Subject: CN=0f49cbfcb3e51599e0539d1e6f63dbd60a59a0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c7:c6:ce:23:c3:ae:0e:ca:0e:82:8e:04:5a:
75:a2:e0:18:08:04:a2:9a:91:d8:5b:14:cd:2e:81:
4a:96:a9:1b:9f:e6:c4:f9:4f:08:d1:a8:17:e3:77:
2a:4e:6f:ff:99:60:5d:49:0a:6b:ac:39:ff:51:80:
8b:f3:a4:ca:36:a8:66:1e:21:fa:ad:3d:9d:a2:2f:
75:68:c3:0c:c3:8b:78:63:d1:05:a3:10:1a:32:94:
4f:60:21:cd:91:3d:e7:da:d7:c7:14:0a:69:16:11:
15:39:28:44:7b:b3:bc:c9:8b:8f:25:24:c6:b9:54:
0e:63:6a:cc:c7:eb:3c:95:6e:dd:72:ff:a4:e0:25:
18:55:bd:89:78:6d:40:5e:3c:ca:f4:73:cd:3b:1c:
bb:3e:67:a1:67:7e:eb:ed:a5:87:e8:97:f9:08:e2:
ab:5d:7a:ae:67:18:31:22:01:44:86:73:09:40:20:
8f:4e:a9:0e:61:57:1a:e3:b1:67:2a:fc:da:74:9c:
f0:5b:18:26:4a:18:8d:54:f2:ef:21:57:5c:e7:ff:
a7:d3:df:1c:58:35:49:6a:15:98:28:ed:af:b9:30:
a1:e7:04:00:64:98:69:82:0c:fa:4d:80:d5:f9:8c:
89:86:9d:f8:06:91:1a:8c:01:12:87:a6:14:54:2a:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:49:CB:FC:B3:E5:15:99:E0:53:9D:1E:6F:63:DB:D6:0A:59:A0:EC
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a3:cc:be:7c:42:ad:70:ce:73:e0:41:80:7c:ac:d5:ec:3d:
a5:5c:ae:2a:41:28:16:b8:b9:c4:16:81:b7:c7:2c:8d:66:67:
15:fe:c7:5e:14:bd:ce:2f:b0:a3:66:99:1f:e3:a9:d5:7f:c1:
f1:81:98:06:84:90:0d:1a:7e:c7:1b:7f:5a:a2:44:28:c0:55:
1d:7d:6e:ad:4e:36:86:55:a5:37:dc:81:50:a8:e7:f3:98:ee:
cd:61:d6:d8:96:29:e0:0c:bc:0f:48:9f:c2:37:e2:e1:bf:4e:
ed:5f:26:03:ef:88:e8:e6:e4:61:52:b9:52:80:6f:70:96:c4:
9b:57:13:2b:1f:a0:85:41:da:b5:32:19:c2:8d:21:71:a7:83:
5f:c8:78:28:7d:71:2e:0a:94:b8:54:97:22:8a:91:fb:86:92:
e3:70:db:0f:97:e7:f2:91:cc:9f:f9:c4:dd:75:4c:34:67:05:
c0:a4:2a:b8:ba:7c:6d:7a:78:13:3c:c9:a1:9f:30:74:70:42:
46:3a:f3:b9:0e:26:78:59:69:77:7c:4f:61:de:3f:46:4b:5e:
9e:2c:22:e0:8a:c0:96:8a:61:58:ad:25:71:5c:fe:94:b1:e4:
49:db:63:97:ff:2e:a8:1c:47:ad:53:02:2a:f9:85:67:52:31:
3a:5e:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:27 2026 by rpki-client