Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: CX3HIGPZvQPxFANoloIGmJdFEg83rKjhVDqzIDdx0uI=
Subject key identifier: 3B:3B:C8:67:0C:B1:7D:76:42:66:F3:A0:35:D7:53:0C:0F:4B:3B:11
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 019D37C0E2219A09D1BA00AF9149025FAF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:01:20 +0000
Manifest this update: Sun 29 Mar 2026 04:01:20 +0000
Manifest next update: Mon 30 Mar 2026 04:01:20 +0000
Files and hashes: 1: SSZdn02qDEwwqUSfTnOV3zXUcLo.roa (hash: y3a3/hKTKamWecmVmVYjV0+wFS3yke4xPMfZhOZPAII=)
2: WiOXXkvgTsUMJh2SB31kcxISa0I.roa (hash: Ug6Us7ZSr7Hic6TNnmKhB5WDJGEDtwfaBPHgJG/vxFQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: nUsLjyjf3P+cMlUxE+9YB5+X8XSTVfHZypNYxE+RMPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e2:21:9a:09:d1:ba:00:af:91:49:02:5f:af:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Mar 29 04:01:20 2026 GMT
Not After : Mar 30 04:01:20 2026 GMT
Subject: CN=3b3bc8670cb17d764266f3a035d7530c0f4b3b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:2d:0c:2b:4c:cc:72:c6:a4:f6:bf:58:5e:
99:e1:e2:7a:e2:f6:bd:ff:40:c5:4c:b8:d3:0e:cb:
7a:60:3d:31:01:dd:07:c9:88:8f:00:5c:0b:20:56:
69:25:de:d6:05:87:5f:d4:6b:ca:73:0b:4d:3e:ff:
91:d0:14:66:74:31:1f:20:20:52:03:e0:8c:12:13:
5e:a4:ba:ba:d6:50:71:71:d9:80:58:d5:1b:22:5e:
9c:96:d1:4a:cb:dc:b0:61:46:68:d4:93:2e:29:68:
0a:c8:0d:37:4d:0d:a2:c8:7d:8d:78:e0:ed:3e:ee:
48:c7:58:42:c5:6c:c7:e9:06:f0:17:29:f6:6a:29:
1c:70:a0:bc:96:b6:87:f0:30:8a:5b:b3:7c:c5:e0:
e3:c7:59:00:5e:e4:97:d5:6f:22:ea:cd:8c:74:aa:
76:07:7e:8f:a4:b1:8a:d1:88:d1:3d:5c:b2:7b:00:
b0:db:46:09:9c:ff:44:23:dc:1e:b3:e9:18:24:8c:
7e:5c:44:dc:41:73:a0:3a:35:3c:3f:74:db:0c:b3:
8b:6c:66:de:ff:24:75:28:22:f4:28:97:d3:c3:1a:
01:64:a5:94:c2:d3:88:6d:bd:23:84:37:ed:0e:d6:
76:35:95:ee:09:29:2e:27:f2:86:bb:20:78:8d:da:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:C8:67:0C:B1:7D:76:42:66:F3:A0:35:D7:53:0C:0F:4B:3B:11
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ad:3b:63:e0:b5:7c:ab:b7:fe:03:af:73:44:56:46:0a:64:
50:c6:c7:c3:75:c4:42:ea:6d:68:95:5b:a8:ad:96:d2:1d:35:
52:49:24:2a:dc:27:f9:91:18:e8:1c:2c:ee:46:0d:cc:90:60:
2a:4f:d6:ec:05:c6:5b:56:d8:36:b1:a5:72:af:c5:19:1b:8f:
94:ba:64:01:df:2e:85:3e:20:41:80:6e:ac:00:06:a8:e7:6f:
62:84:06:7c:0e:3b:d1:a5:db:0e:f9:f8:91:40:77:bc:26:75:
40:9e:9f:47:16:6e:da:3c:e7:68:25:44:73:ac:17:ab:18:88:
a3:3a:f2:61:11:10:8b:53:ab:34:d4:99:8e:27:e4:86:97:a9:
f2:e8:74:28:98:c0:ab:a5:ee:48:2a:73:ec:ad:b1:4a:f8:c4:
71:59:cc:25:53:9b:b7:e5:67:67:16:d2:78:21:4c:fe:d4:f3:
e2:db:09:03:42:df:5f:89:a5:d8:f0:76:27:ec:a3:58:34:bc:
71:4c:09:17:e0:79:31:41:0e:40:c7:8f:83:01:13:6f:31:7b:
df:da:c6:54:89:d7:bf:f1:96:a9:b2:e0:15:38:63:4c:3a:ad:
11:5d:95:62:aa:45:ba:bf:09:49:b1:66:f1:7c:9b:09:12:3b:
99:e2:03:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:21 2026 by rpki-client