Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
File: evoTWyBy38xO87VBwTa8gAHvQwc.mft (raw, json)
Hash identifier: FLUAV+aQmWbv6wD9RnPFH9O6Se+S2OlguhFrVpZsv2I=
Subject key identifier: 16:09:9A:B5:17:F3:EE:4C:81:84:C0:91:EC:08:2C:44:DF:8F:2D:39
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Certificate issuer: /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial: 01A1938CE13C89764E59953C1EC0AE5E2C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
Manifest number: 0F54
Signing time: Sat 31 Oct 2026 20:00:45 +0000
Manifest this update: Sat 31 Oct 2026 20:00:45 +0000
Manifest next update: Sun 01 Nov 2026 20:00:45 +0000
Files and hashes: 1: M7y_k5iNH6dSWHLXPJNTz-Qdtp8.roa (hash: kmS2hNo1cx40s9TRt+mHs2M1UGSMR40egkM7Knj7Rb4=)
2: evoTWyBy38xO87VBwTa8gAHvQwc.crl (hash: u20RVzsSa09Ad4dcrsMe11ufEtCKNYvm6tWTgvdNUCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:8c:e1:3c:89:76:4e:59:95:3c:1e:c0:ae:5e:2c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Validity
Not Before: Oct 31 20:00:45 2026 GMT
Not After : Nov 1 20:00:45 2026 GMT
Subject: CN=16099ab517f3ee4c8184c091ec082c44df8f2d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:f4:2d:e8:9a:e8:1e:fa:90:0c:f6:6f:3e:
0a:62:8f:d5:6f:dc:9c:ef:25:2b:9d:98:74:e4:18:
92:bf:24:7a:33:df:ae:77:ff:ff:45:e3:d4:f0:ff:
45:bb:7e:92:f6:7e:ec:b1:75:ca:d9:7b:0d:da:9b:
0e:d4:8a:be:07:8c:f5:a0:85:9c:5e:da:15:b4:04:
f2:a1:42:d8:c1:bc:db:82:04:88:e1:ec:34:3b:b9:
a2:28:2e:d0:f9:73:94:0c:bb:4d:73:c2:77:4a:7d:
87:4f:42:49:11:e3:23:9e:80:2c:2b:96:bf:75:68:
0b:e5:46:86:b1:0f:d5:86:c1:a1:3c:cc:e6:bb:f3:
fb:6d:e6:dc:3d:a2:a4:ab:53:1c:ff:cb:db:3f:94:
69:65:10:40:ba:0e:62:67:27:25:fd:29:1e:16:e5:
fd:ff:27:f5:4f:f4:c0:cb:be:a7:f5:db:d5:ad:f6:
89:ca:26:f0:a6:67:d5:6f:4b:8c:7d:16:f5:7a:aa:
98:43:e1:8f:18:5c:7a:23:bb:f8:41:2a:0f:07:8a:
56:61:ec:64:5f:2c:dd:c5:9c:b2:a9:54:6c:b6:a1:
a8:b6:9c:55:00:83:02:0f:94:78:5b:14:92:f8:48:
0d:ca:90:68:46:2b:8a:d7:3e:fc:42:f5:50:85:a6:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:09:9A:B5:17:F3:EE:4C:81:84:C0:91:EC:08:2C:44:DF:8F:2D:39
X509v3 Authority Key Identifier:
keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:94:3d:08:19:ba:97:dc:8e:a6:53:97:ce:a6:bf:35:2d:2b:
92:8f:9d:ed:0b:8e:24:1a:16:33:1b:bf:1c:22:02:40:79:da:
65:05:c7:29:d9:a1:01:d3:84:b6:44:ae:ea:55:0c:fc:ca:5b:
95:c4:f6:62:d7:e0:a1:60:05:ee:a3:ce:69:72:97:e0:98:19:
85:5b:90:da:9c:10:7e:7c:ba:38:b4:3b:71:7c:a5:de:b4:4c:
e7:c4:9b:cf:9c:8e:32:cf:03:86:72:68:d8:dd:f2:dd:19:32:
db:e4:3e:f5:39:3d:8d:49:5c:30:33:26:aa:b3:d9:89:a0:34:
45:8a:2e:3d:76:17:a1:12:c3:d6:b2:fc:4e:d4:fe:33:b8:5d:
64:32:9e:07:36:73:c8:24:29:9b:c4:d9:e1:df:31:34:f2:b7:
85:99:8b:4c:b9:70:b6:56:c0:12:7f:31:73:ad:cc:d9:d4:57:
91:b3:33:34:da:e0:f4:d4:4c:76:f6:bb:e8:a0:6e:40:51:a6:
79:d5:00:dc:2a:46:9e:00:6c:e0:fb:6d:ec:85:54:48:2f:62:
9c:78:56:6e:aa:9d:71:1e:c3:3c:13:64:59:e5:f6:f1:be:17:
db:dc:4c:fd:4b:f0:f8:62:b4:91:d9:33:86:90:57:5d:0f:4d:
ef:8e:fc:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGTjOE8iXZOWZU8HsCuXix3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZmExMzViMjA3MmRmY2M0ZWYzYjU0MWMxMzZiYzgwMDFl
ZjQzMDcwHhcNMjYxMDMxMjAwMDQ1WhcNMjYxMTAxMjAwMDQ1WjAzMTEwLwYDVQQD
EygxNjA5OWFiNTE3ZjNlZTRjODE4NGMwOTFlYzA4MmM0NGRmOGYyZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL/0Leia6B76kAz2bz4KYo/Vb9yc
7yUrnZh05BiSvyR6M9+ud///RePU8P9Fu36S9n7ssXXK2XsN2psO1Iq+B4z1oIWc
XtoVtATyoULYwbzbggSI4ew0O7miKC7Q+XOUDLtNc8J3Sn2HT0JJEeMjnoAsK5a/
dWgL5UaGsQ/VhsGhPMzmu/P7bebcPaKkq1Mc/8vbP5RpZRBAug5iZycl/SkeFuX9
/yf1T/TAy76n9dvVrfaJyibwpmfVb0uMfRb1eqqYQ+GPGFx6I7v4QSoPB4pWYexk
XyzdxZyyqVRstqGotpxVAIMCD5R4WxSS+EgNypBoRiuK1z78QvVQhaZBkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYJmrUX8+5MgYTAkewILETfjy05MB8GA1UdIwQY
MBaAFHr6E1sgct/MTvO1QcE2vIAB70MHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZvVFd5QnkzOHhPODdWQndUYThnQUh2UXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iMTQxOTMtZjU2OS00MzRhLWFlYTQt
ZjVkZWFhOWJmMGY3LzEvZXZvVFd5QnkzOHhPODdWQndUYThnQUh2UXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iMTQxOTMtZjU2OS00MzRhLWFlYTQtZjVkZWFhOWJmMGY3
LzEvZXZvVFd5QnkzOHhPODdWQndUYThnQUh2UXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5Q9CBm6
l9yOplOXzqa/NS0rko+d7QuOJBoWMxu/HCICQHnaZQXHKdmhAdOEtkSu6lUM/Mpb
lcT2YtfgoWAF7qPOaXKX4JgZhVuQ2pwQfny6OLQ7cXyl3rRM58Sbz5yOMs8DhnJo
2N3y3Rky2+Q+9Tk9jUlcMDMmqrPZiaA0RYouPXYXoRLD1rL8TtT+M7hdZDKeBzZz
yCQpm8TZ4d8xNPK3hZmLTLlwtlbAEn8xc63M2dRXkbMzNNrg9NRMdva76KBuQFGm
edUA3CpGngBs4Ptt7IVUSC9inHhWbqqdcR7DPBNkWeX28b4X29xM/Uvw+GK0kdkz
hpBXXQ9N7478xw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 05:57:09 2026 by rpki-client