Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
File: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft (raw, json)
Hash identifier: TYITs0a1dfn/MXZOav8oQPcfMVNgF4qHkf11+Hd68XI=
Subject key identifier: F9:17:80:57:80:6D:84:08:88:7B:F2:2D:BD:B8:04:01:6C:F3:14:B2
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Certificate issuer: /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial: 01A0889E015F7009D5C4201CBC83DB8E3F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
Manifest number: 0D1A
Signing time: Thu 10 Sep 2026 00:00:51 +0000
Manifest this update: Thu 10 Sep 2026 00:00:51 +0000
Manifest next update: Fri 11 Sep 2026 00:00:51 +0000
Files and hashes: 1: 6ItjAY2vqbDsPfEN7PlB_byd1yQ.roa (hash: 67Rx+JVBn8qMfeiQxadB9O8Is1LQ2PXvAawWWlcCFMo=)
2: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl (hash: ddfhKDYTNv9vWzSFttpuvoCxgjl6lundBT2CokmVHlM=)
3: NVmR8SLnsWJmOtHmQD77L3ydy_g.roa (hash: gul58bNSNA/dLY883axm3ey7Q1DEI9GtKpYlNW7IBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:01:5f:70:09:d5:c4:20:1c:bc:83:db:8e:3f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Validity
Not Before: Sep 10 00:00:51 2026 GMT
Not After : Sep 11 00:00:51 2026 GMT
Subject: CN=f9178057806d8408887bf22dbdb804016cf314b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:17:8b:c8:d6:5d:2a:8a:0c:c2:8c:c8:2c:
65:4d:5b:44:59:fd:ad:de:34:27:b5:55:68:16:3d:
b8:15:40:20:f3:bd:b7:29:55:58:69:9b:2c:33:75:
9b:ba:df:f3:89:e2:b5:21:38:2b:bb:05:36:83:19:
56:bb:b7:81:5a:26:a8:ea:2b:a5:6f:0f:ad:96:79:
67:6a:2e:31:57:7e:98:88:90:16:c5:82:b2:28:a9:
51:69:87:88:59:c3:46:30:31:cc:fc:fa:e2:cd:5f:
88:bf:d3:f7:91:f2:a9:6f:26:1a:11:98:9e:ef:3d:
44:43:f8:91:ca:a2:a2:b0:d1:6a:f3:eb:25:d2:2f:
7e:b1:c5:66:68:4e:2e:1d:b7:da:34:3e:d4:d5:f0:
a8:d0:24:b2:9f:cc:d8:18:94:ab:ac:01:36:4a:ec:
f9:8d:c7:4b:c9:32:e0:3d:b0:a0:bb:33:c6:e1:7f:
9a:46:b7:01:da:71:f5:83:26:ab:c3:ca:d0:d0:b9:
e5:d5:0a:3d:3e:01:ab:3d:66:e8:ff:12:ed:b7:dd:
93:d8:4c:13:bc:01:97:46:4c:ce:12:60:7e:b3:1a:
71:54:49:c2:4c:02:b6:49:0c:a3:94:91:00:da:f1:
d9:a8:b6:39:ff:c1:27:47:a6:c5:ba:d4:bf:a0:f9:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:80:57:80:6D:84:08:88:7B:F2:2D:BD:B8:04:01:6C:F3:14:B2
X509v3 Authority Key Identifier:
keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:51:f6:63:48:a4:e6:f0:d3:d8:ab:5f:1d:68:26:02:79:5f:
94:04:52:da:af:14:2f:1d:58:e4:1c:cf:63:4c:43:36:64:59:
d7:27:ee:02:43:6a:37:02:3f:e3:bf:fe:b4:d4:dd:80:46:8e:
cc:62:f8:60:26:0a:fe:b7:c1:24:52:63:b5:c5:f2:c4:68:27:
76:92:b4:07:06:80:5b:cb:bc:dc:dd:76:74:fc:0f:cc:d0:8c:
23:4b:2b:5f:5e:42:6c:bd:28:cd:60:7b:d9:84:ee:61:70:78:
10:66:13:1c:c4:27:32:91:77:ec:78:03:a1:59:69:5c:7e:a2:
5a:bc:8d:46:c9:43:94:6c:c9:f8:f5:d3:5d:ed:b0:b5:2f:22:
e4:90:87:7c:e6:9e:ab:fd:8d:26:bb:53:4b:c9:a9:c8:21:be:
38:73:d0:8e:b7:21:9b:76:67:fd:8c:88:7b:ff:8e:be:a4:e2:
33:92:ba:b7:95:60:a8:7e:65:86:95:e7:5a:44:24:44:3c:8c:
18:7d:0b:89:a1:94:5d:9b:21:d4:30:e8:d2:ef:fd:8e:99:f3:
a6:19:f3:81:b3:4f:0c:e5:48:d3:00:d7:6c:ae:7f:1e:9f:0a:
73:2a:64:9e:cd:a2:c6:c7:4e:95:1b:fb:81:89:c9:b6:a3:ec:
ae:ae:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:25:13 2026 by rpki-client