Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
File: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft (raw, json)
Hash identifier: ZwSa3ast5UXNQDKUaWAlZX2QTj8EwMeIdXedSbSLu7Q=
Subject key identifier: DB:6A:0F:A8:20:03:86:A3:D4:6C:41:04:20:BA:74:FA:3F:97:F3:DC
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Certificate issuer: /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial: 019FA0DF9990918EF53EBCAD06AF53C02A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
Manifest number: 0CA2
Signing time: Mon 27 Jul 2026 00:00:36 +0000
Manifest this update: Mon 27 Jul 2026 00:00:36 +0000
Manifest next update: Tue 28 Jul 2026 00:00:36 +0000
Files and hashes: 1: 6ItjAY2vqbDsPfEN7PlB_byd1yQ.roa (hash: 67Rx+JVBn8qMfeiQxadB9O8Is1LQ2PXvAawWWlcCFMo=)
2: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl (hash: gEaZ6+Zlw4hvguEgRbetFhaDE0oIxGrWgWaZZCgHrgM=)
3: NVmR8SLnsWJmOtHmQD77L3ydy_g.roa (hash: gul58bNSNA/dLY883axm3ey7Q1DEI9GtKpYlNW7IBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:99:90:91:8e:f5:3e:bc:ad:06:af:53:c0:2a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Validity
Not Before: Jul 27 00:00:36 2026 GMT
Not After : Jul 28 00:00:36 2026 GMT
Subject: CN=db6a0fa8200386a3d46c410420ba74fa3f97f3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:5f:be:30:dc:5f:85:78:ef:67:63:35:c7:
ea:fa:91:a6:69:b0:7d:8f:b7:39:2c:25:cd:a6:2e:
00:05:e7:99:c4:91:60:d4:ba:ab:b2:3b:88:77:6a:
0e:52:50:27:25:db:c5:d4:a1:bc:53:e6:a0:81:de:
dd:70:14:8a:24:5d:49:3c:a5:10:4e:e9:11:d5:eb:
8f:f2:e5:56:fb:9d:39:3c:41:b4:ff:9d:f7:04:11:
96:fb:4e:41:3c:59:a7:9b:2e:7d:42:e2:2e:04:54:
3d:cc:11:c6:90:21:e1:22:2e:8b:37:9d:39:25:de:
99:bb:e8:4c:75:e7:ab:ee:7c:a9:98:f5:ae:76:1f:
bf:2a:f9:44:13:27:7a:6e:04:af:de:d3:b5:88:00:
8e:2e:1f:5a:f8:72:8e:47:7d:b1:d0:5b:ce:85:0b:
93:4b:48:da:69:a0:77:b3:86:6d:3c:52:06:88:ff:
fb:2a:8f:c9:0f:16:20:dc:de:de:48:31:1a:ed:bf:
16:3d:3f:29:ff:ee:4b:91:e3:19:c7:2f:69:99:6b:
0b:a0:3d:bc:c6:47:dd:86:3d:dd:32:14:9c:1b:8d:
84:62:98:e4:e8:f6:0b:d3:42:81:e2:af:1f:b8:63:
cf:97:f1:db:d4:08:0f:9b:7c:87:9f:7a:a1:7a:47:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6A:0F:A8:20:03:86:A3:D4:6C:41:04:20:BA:74:FA:3F:97:F3:DC
X509v3 Authority Key Identifier:
keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6e:74:9b:90:b7:d1:7c:8c:57:1f:73:20:c5:c4:ac:b6:f4:
5c:d3:bf:85:03:11:84:94:d0:4d:a7:c2:7a:b1:f9:54:cf:7f:
b1:6c:23:6e:17:0b:61:60:d7:cc:89:b1:f0:8f:35:15:e6:8c:
32:75:a4:13:bc:b0:09:f7:d1:3e:72:e0:47:1a:35:35:d3:c2:
03:26:ba:8b:51:88:66:86:df:90:55:7f:43:6c:65:b8:c0:f1:
68:7f:1d:8a:8b:a7:92:8a:26:fc:8a:ae:c4:63:53:42:2c:c8:
e9:8a:9c:05:34:f1:47:6b:e8:53:46:43:5d:b7:c9:a4:2d:1c:
b6:bc:7b:c8:0b:9c:a7:4d:e2:b3:fe:76:a8:3e:ae:73:1e:f6:
b7:fb:13:c3:fc:1b:e2:f8:2c:3d:0c:40:e0:6d:03:62:37:b6:
66:6d:fd:62:84:82:39:19:ac:b5:b2:6b:84:86:e9:0a:da:40:
fd:81:b0:ff:44:13:b6:c7:60:93:17:9d:ef:7f:58:af:e4:94:
cb:09:5f:a3:1e:2a:17:30:39:2d:de:40:09:84:23:b0:78:19:
e7:5d:39:ec:22:ab:9a:5a:6b:3a:53:13:19:5e:c4:f8:bf:e7:
23:c7:5f:1b:69:f4:d5:33:cb:7c:9a:97:c0:98:55:3b:2a:37:
ad:60:5c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:24 2026 by rpki-client