Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
File: evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft (raw, json)
Hash identifier: xHxRV8GpUJE/ngvfSecMgg0k0sz9qg7wcoQeYSN/qdQ=
Subject key identifier: 06:88:64:6C:E7:0B:18:57:EC:46:29:25:46:46:76:62:0C:F7:6F:05
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Certificate issuer: /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial: 019D3865B52471F5A10F20324A038EAE2566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
Manifest number: 0843
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: V66HJYFriZ5IsLfzQnEEiBV4Qd8.roa (hash: 8XPaW6i45AJEe25djtC6P54qz+Rb4g3K7vpBnD6+9v4=)
2: XASNzZ7eNfFZgvbJT8Q1lC9Tw84.roa (hash: pBgoU7wOpw4nY7mOMS9Fl6YvITNZqmO4sxUzQmgNOCY=)
3: evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl (hash: zHzTquiXSEeC02QPUaPq2MrEAWUfZcIASQ4EFsnGgK4=)
4: x8rtYvoQZMNut6lhRb4aMkAq0js.roa (hash: nUuWeYtzWwss47rmzR4BBXj/AZGrFJGMJoFw56T6Rv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b5:24:71:f5:a1:0f:20:32:4a:03:8e:ae:25:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=0688646ce70b1857ec462925464676620cf76f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:ce:b5:78:dd:ab:d6:5a:31:74:d3:9d:a4:
42:7d:23:fd:a1:53:77:1e:ea:4d:3c:2b:9b:ea:1f:
60:00:91:08:e4:53:1f:47:1e:78:93:d3:18:35:ca:
19:7f:9c:3f:9e:d2:cd:9e:4d:77:1d:f2:9d:6e:4d:
66:c1:8b:73:82:8e:b3:63:2e:e9:93:e5:16:22:f3:
67:d0:6e:26:83:e2:e8:f1:12:9e:4a:6e:4d:01:6e:
04:28:9c:f9:24:0f:fc:c2:4b:34:27:0b:8d:5d:8b:
ac:0a:93:2c:c7:e5:f4:32:9d:64:0e:7d:d9:6d:35:
f3:59:86:66:ae:e7:87:2e:c0:8d:f5:41:0c:db:99:
59:fe:bd:2c:e1:62:ff:17:05:33:a8:12:21:2a:2c:
3b:b7:81:ff:f2:99:ac:16:af:01:5e:9a:63:73:05:
a5:56:8b:e5:00:c2:ea:24:6a:4b:ab:7c:17:28:1d:
69:c8:74:d0:be:c4:01:d4:f0:2e:b5:51:85:54:8c:
d9:c4:14:4b:d5:ad:40:07:a8:30:ce:49:d2:e4:04:
54:f0:e1:b4:10:d5:6f:84:90:4f:b5:7b:6d:0c:e0:
3f:31:77:50:05:a3:35:93:dc:ad:8c:89:9e:72:35:
bd:bd:c2:d0:b2:a8:e9:09:05:9e:2c:19:f0:d5:e5:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:88:64:6C:E7:0B:18:57:EC:46:29:25:46:46:76:62:0C:F7:6F:05
X509v3 Authority Key Identifier:
keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b5:b4:bf:61:4b:d1:b3:65:76:ca:c6:cc:0b:89:c3:93:d4:
3b:79:bf:be:d2:8d:e8:f5:c1:1c:32:de:79:46:4d:63:34:38:
ef:cc:e3:8a:e8:47:16:f9:fd:b6:68:54:f1:50:f6:70:4d:97:
c9:d9:82:19:c7:35:b1:1b:a2:de:66:3e:d4:94:29:2a:36:ba:
7c:d6:b9:8d:ff:fd:62:24:1d:78:32:93:dc:07:36:4a:14:e6:
eb:1c:27:e2:98:75:60:80:95:c9:f2:17:68:2c:88:f6:90:04:
a9:86:0c:87:62:18:08:ab:84:37:d5:5e:a3:51:d3:01:64:14:
12:72:60:6a:bb:53:de:55:8a:2f:2b:56:b1:05:5f:f8:8f:2a:
25:42:58:df:2b:c0:e8:43:42:3a:ee:a9:77:c8:b6:14:e7:a2:
ad:bc:cb:9a:88:17:90:d4:9e:d4:dc:f7:46:1c:ef:74:ef:6c:
85:e6:2e:7f:58:90:6c:ed:43:f5:9f:8b:24:38:96:2c:83:45:
55:13:88:ac:8d:ae:39:11:b7:00:3a:86:d9:41:64:23:b4:01:
bf:5b:04:04:f5:0b:91:92:b8:16:f7:d6:4b:8e:20:02:c2:d2:
b3:d2:55:3c:3f:6e:55:75:f6:4a:df:70:26:9d:b1:cc:b2:62:
25:5f:c5:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZbUkcfWhDyAySgOOriVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZmI1NDQxZDhlZjhlNDFhYTI4ZGQ1MWNkZGU5MjU5NDNh
ZWY3ZmEwHhcNMjYwMzI5MDcwMTIyWhcNMjYwMzMwMDcwMTIyWjAzMTEwLwYDVQQD
EygwNjg4NjQ2Y2U3MGIxODU3ZWM0NjI5MjU0NjQ2NzY2MjBjZjc2ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1HOtXjdq9ZaMXTTnaRCfSP9oVN3
HupNPCub6h9gAJEI5FMfRx54k9MYNcoZf5w/ntLNnk13HfKdbk1mwYtzgo6zYy7p
k+UWIvNn0G4mg+Lo8RKeSm5NAW4EKJz5JA/8wks0JwuNXYusCpMsx+X0Mp1kDn3Z
bTXzWYZmrueHLsCN9UEM25lZ/r0s4WL/FwUzqBIhKiw7t4H/8pmsFq8BXppjcwWl
VovlAMLqJGpLq3wXKB1pyHTQvsQB1PAutVGFVIzZxBRL1a1AB6gwzknS5ARU8OG0
ENVvhJBPtXttDOA/MXdQBaM1k9ytjImecjW9vcLQsqjpCQWeLBnw1eVAOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaIZGznCxhX7EYpJUZGdmIM928FMB8GA1UdIwQY
MBaAFHr7VEHY745BqijdUc3ekllDrvf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTIt
ZDg5NzNhY2FmNDFkLzEvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTItZDg5NzNhY2FmNDFk
LzEvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7W0v2FL
0bNldsrGzAuJw5PUO3m/vtKN6PXBHDLeeUZNYzQ478zjiuhHFvn9tmhU8VD2cE2X
ydmCGcc1sRui3mY+1JQpKja6fNa5jf/9YiQdeDKT3Ac2ShTm6xwn4ph1YICVyfIX
aCyI9pAEqYYMh2IYCKuEN9Veo1HTAWQUEnJgartT3lWKLytWsQVf+I8qJUJY3yvA
6ENCOu6pd8i2FOeirbzLmogXkNSe1Nz3RhzvdO9sheYuf1iQbO1D9Z+LJDiWLINF
VROIrI2uORG3ADqG2UFkI7QBv1sEBPULkZK4FvfWS44gAsLSs9JVPD9uVXX2St9w
Jp2xzLJiJV/FyQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:33 2026 by rpki-client