Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier: OPW6xawGzNXxYSc6bWH91cgmRk+u60XcoM01EeOF458=
Subject key identifier: 1D:8C:F7:E2:00:42:01:40:5F:F4:AC:FF:8C:C7:32:47:E6:6F:D2:01
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial: 01A1562F673F604963E4BBB4D035054D6F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number: 1AB3
Signing time: Mon 19 Oct 2026 22:01:49 +0000
Manifest this update: Mon 19 Oct 2026 22:01:49 +0000
Manifest next update: Tue 20 Oct 2026 22:01:49 +0000
Files and hashes: 1: SSZdn02qDEwwqUSfTnOV3zXUcLo.roa (hash: y3a3/hKTKamWecmVmVYjV0+wFS3yke4xPMfZhOZPAII=)
2: WiOXXkvgTsUMJh2SB31kcxISa0I.roa (hash: Ug6Us7ZSr7Hic6TNnmKhB5WDJGEDtwfaBPHgJG/vxFQ=)
3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: qAifSXc6SSusvi4q+XtN99c7TZuXFgj7/pz9PrdQAE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:2f:67:3f:60:49:63:e4:bb:b4:d0:35:05:4d:6f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Validity
Not Before: Oct 19 22:01:49 2026 GMT
Not After : Oct 20 22:01:49 2026 GMT
Subject: CN=1d8cf7e2004201405ff4acff8cc73247e66fd201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:63:74:f4:cc:c5:50:8f:41:c4:1a:d7:b3:
5b:f7:98:56:63:6d:76:a5:db:d0:d3:cd:d6:53:5e:
14:c6:2e:6a:73:8e:15:e8:e4:c6:9b:07:b2:3f:28:
b7:e8:69:9f:61:6b:92:f8:14:60:ac:cc:dc:4a:b0:
2b:08:4a:b0:f5:bb:e8:8a:11:6e:25:09:3f:c4:26:
b6:9c:df:cb:1d:cf:3c:e0:b4:3e:e8:30:f2:88:bd:
d9:b5:60:66:bb:6d:da:2b:43:55:3b:21:e9:10:d2:
40:66:e2:26:52:83:31:7b:6e:9a:00:aa:e6:de:62:
cf:25:e8:92:85:d5:f3:fc:f0:16:88:79:19:f1:25:
0d:c4:f8:52:f4:fc:41:a0:3e:28:43:14:d3:c9:62:
c0:33:b6:b0:1d:5d:98:ed:46:02:9e:cd:89:ae:3f:
af:c6:63:a7:f9:af:29:bf:f1:e9:f6:6b:0f:18:a3:
2b:71:4a:26:14:6a:46:a5:41:64:5d:91:e6:52:ac:
43:8d:13:68:38:87:fc:a8:dc:6f:68:b2:59:5e:51:
18:7c:7a:81:0c:a7:6d:33:65:8c:f9:6d:8b:fe:4b:
08:74:6f:d1:f9:95:ed:2f:bf:85:f9:11:54:d0:4b:
62:d5:5e:ec:a1:f0:44:ce:d4:a6:90:e7:48:30:0b:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8C:F7:E2:00:42:01:40:5F:F4:AC:FF:8C:C7:32:47:E6:6F:D2:01
X509v3 Authority Key Identifier:
keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:07:49:f4:09:8e:4c:27:a7:e4:7e:29:81:cb:96:eb:5a:
7e:85:41:55:e5:d8:95:5c:01:b2:ea:24:35:c6:67:df:f4:cb:
0c:e9:a2:6f:96:37:ef:0f:ab:fe:0a:19:d1:78:b8:7d:0f:29:
8c:ad:54:1b:18:a0:e6:65:0b:87:23:68:fe:e8:ce:81:46:a7:
d6:00:4e:18:3d:d0:3c:09:17:e8:a5:4f:1a:ed:62:6d:4b:ee:
69:df:25:da:e2:d5:2c:0c:09:c6:cc:77:41:1b:b1:09:c5:c4:
dc:f6:52:2e:54:5e:13:89:a1:22:d9:3d:9e:0b:b9:3f:5e:40:
1a:b5:30:0c:05:23:05:6f:fc:c2:63:1c:6c:51:72:b4:4a:e2:
be:cb:0d:cd:85:ca:e7:79:e5:28:a7:af:98:8e:e0:22:2d:f0:
34:51:6a:30:71:08:2f:d8:e5:e5:53:24:00:ee:47:ee:60:2b:
2b:44:c7:08:b8:17:4b:0b:06:e8:63:9c:af:a1:3c:0a:29:02:
8b:c5:3a:49:e4:f0:66:bf:da:3e:df:a3:1d:ad:8a:cf:19:12:
cf:8c:82:bc:b9:45:1a:ce:4a:4a:a8:c0:27:d7:c8:00:9c:f5:
8b:21:1b:ad:2f:4d:1e:8c:1e:9d:cb:1f:c2:0e:c0:d9:75:9b:
73:31:43:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:54:28 2026 by rpki-client