Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
File: EVwEDsl1QyAjbNymTjk5C93jYmo.mft (raw, json)
Hash identifier: dh7yj1RARVptAH+8b2yJPsxvd3rfV8FR7D3RR7Hfxoc=
Subject key identifier: 89:5D:93:D7:A5:5B:BA:81:AC:55:48:01:11:25:6C:32:AF:E7:A7:4E
Authority key identifier: 11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A
Certificate issuer: /CN=115c040ec9754320236cdca64e39390bdde3626a
Certificate serial: 019F130A7DCA3C68E6F86CE94C2A76B3F986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
Manifest number: 0E66
Signing time: Mon 29 Jun 2026 11:01:22 +0000
Manifest this update: Mon 29 Jun 2026 11:01:22 +0000
Manifest next update: Tue 30 Jun 2026 11:01:22 +0000
Files and hashes: 1: EVwEDsl1QyAjbNymTjk5C93jYmo.crl (hash: YfPgU5ft7ZaDaS1nYdpQhvvtFsaRAmfyLPhtFh6wcfQ=)
2: T5FYecDL9dYudSF4znOqL3xO-3I.roa (hash: tGYqIZRK3jsFGjXl9JsU630t/v5iPjAOq7gYJouPhLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:0a:7d:ca:3c:68:e6:f8:6c:e9:4c:2a:76:b3:f9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115c040ec9754320236cdca64e39390bdde3626a
Validity
Not Before: Jun 29 11:01:22 2026 GMT
Not After : Jun 30 11:01:22 2026 GMT
Subject: CN=895d93d7a55bba81ac55480111256c32afe7a74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8f:6c:92:c2:a8:d1:82:4d:c7:f1:8f:d5:76:
54:88:9f:7a:2c:93:2b:8a:31:8a:46:6b:47:31:0d:
6d:8b:f0:f1:69:ce:a7:c1:2d:b2:39:59:98:52:1e:
5b:07:5b:8c:8a:42:9e:e8:aa:9b:2e:20:eb:be:e1:
ce:76:08:57:f5:60:01:8f:9a:0a:f5:84:b8:b2:09:
67:0b:3c:ed:2e:c0:b9:df:fd:cd:0a:a8:a0:27:ba:
53:ea:d4:92:a4:6a:6e:1c:ff:8b:96:2f:40:3e:f2:
c4:5b:86:2a:a8:5e:ee:b2:d1:d4:3a:c2:4e:af:ab:
2b:81:d3:4c:9c:71:86:4b:d0:e2:ea:7c:88:b6:18:
3c:fa:82:5e:3c:97:51:bf:22:81:4c:a4:55:3e:a3:
8a:b5:03:5b:4b:f1:66:be:8c:bb:9b:ce:d7:d5:70:
7e:69:70:57:f3:53:24:0b:a3:62:af:22:40:5f:95:
c9:d2:46:9b:55:7d:20:8c:ce:1c:2f:46:a1:8c:24:
50:1c:e0:90:21:ea:d0:ff:15:92:8b:bd:db:bc:dc:
24:a4:4b:55:e8:d8:b3:b3:3f:c2:41:49:7d:6a:ed:
2e:da:62:82:72:7e:b9:54:9c:3b:29:ba:f1:9f:2b:
9f:38:8d:c9:95:4c:47:dd:07:39:b5:f7:71:26:b8:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5D:93:D7:A5:5B:BA:81:AC:55:48:01:11:25:6C:32:AF:E7:A7:4E
X509v3 Authority Key Identifier:
keyid:11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1d:22:b4:43:07:76:fb:64:ec:bd:c9:72:71:84:0c:1d:10:
e7:a3:7e:c0:6c:cc:fb:29:ce:de:e6:37:38:07:70:07:2c:69:
af:15:51:e9:03:f8:d4:5c:b6:43:d0:f8:5b:89:1b:e9:36:75:
f9:b5:9f:7d:30:f3:d6:62:39:e9:10:8f:9f:5d:87:e9:7f:00:
3d:29:c9:03:b9:49:73:4e:eb:ce:93:e8:75:4c:ad:2e:f2:5e:
6c:37:cf:53:27:b6:75:aa:17:a5:69:05:23:36:e7:e2:5e:fd:
3c:7f:d1:cd:32:07:fc:6a:93:6b:9f:b4:ea:6f:64:11:4d:42:
dc:4f:60:39:c7:f9:9f:2b:32:14:4d:04:ca:4d:52:18:40:ca:
67:66:43:ee:95:4c:58:b4:99:ab:6e:e6:26:7d:11:e3:db:c5:
5f:cf:3d:e0:f4:21:9b:c2:b4:4f:d6:da:13:9d:19:38:3c:b0:
40:61:7a:a9:b3:69:a7:7e:fb:21:4d:aa:0c:24:1e:ec:12:25:
3f:e0:42:f0:22:55:a0:dc:4a:1e:7b:7a:75:64:d2:91:43:41:
15:10:6f:c2:61:c2:28:a6:75:10:9f:c9:69:01:1b:ba:2d:0b:
91:41:0b:59:05:8b:96:ca:8e:1f:64:fd:8e:ed:0c:58:ac:e4:
ea:a1:cf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:33:40 2026 by rpki-client