Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
File: rEvdnpfyEDcMwwElesFfrrj6Uk4.mft (raw, json)
Hash identifier: 39XHMpCHh7bc+4lW7N4rQsJ4aNjQ+t7pNhJCoA46LP0=
Subject key identifier: A4:67:33:10:59:4B:B0:B9:32:1B:DF:50:5A:FB:9C:5E:10:B7:2B:76
Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
Certificate issuer: /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Certificate serial: 019D37C05F608B758EC656080E6783A73D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
Manifest number: 0D3A
Signing time: Sun 29 Mar 2026 04:00:47 +0000
Manifest this update: Sun 29 Mar 2026 04:00:47 +0000
Manifest next update: Mon 30 Mar 2026 04:00:47 +0000
Files and hashes: 1: r4pIacnAe2D-JYQIftRnotqD1wA.roa (hash: eaVNQg7BOR5lgnv8gywl/1AkyppXss9dVOIpa7LgtUE=)
2: rEvdnpfyEDcMwwElesFfrrj6Uk4.crl (hash: YSfyFdharUW6k1AV8HDvqo41SI7J/zGhCw8F/RlLSHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5f:60:8b:75:8e:c6:56:08:0e:67:83:a7:3d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Validity
Not Before: Mar 29 04:00:47 2026 GMT
Not After : Mar 30 04:00:47 2026 GMT
Subject: CN=a4673310594bb0b9321bdf505afb9c5e10b72b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:86:01:38:1d:96:3c:31:1b:2d:f6:c8:aa:
fd:e3:c8:87:45:6e:d0:4b:1c:96:ed:e6:db:28:0f:
78:22:0a:b1:c5:db:da:db:63:1d:13:21:42:b1:66:
8d:8c:92:ca:a1:81:04:95:bd:a8:82:8e:8c:bd:a8:
8c:e4:80:9d:e3:d1:62:a5:d4:a8:d8:04:bd:c2:a2:
f5:af:7e:94:30:fc:ed:d7:57:d6:61:f4:f5:4d:c6:
69:87:2f:67:7a:6a:4f:f1:24:2b:13:43:27:c6:f2:
12:7a:ad:90:96:2f:42:0c:a0:46:99:7c:ab:e2:69:
02:fc:ea:6a:3c:4b:3a:c0:7a:ff:1b:de:cf:d0:85:
f2:45:90:a3:ec:95:c8:70:98:7e:f9:35:a8:55:aa:
40:f6:61:3b:bc:9e:57:80:56:83:26:64:b3:86:2d:
50:cc:64:5f:9b:a2:7e:d1:ac:6b:47:d1:75:1f:d6:
82:ab:f8:5c:91:33:53:51:1b:81:06:fc:13:08:49:
9b:ca:24:ef:cb:db:32:ef:e2:91:fe:0e:c1:64:df:
c5:00:da:8e:a7:5a:79:d1:7a:2e:45:1f:06:16:df:
09:64:30:28:16:ae:cd:9f:86:74:49:85:e4:1a:84:
98:6d:f8:53:b4:1c:19:d8:d0:e0:49:35:7f:4a:c9:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:67:33:10:59:4B:B0:B9:32:1B:DF:50:5A:FB:9C:5E:10:B7:2B:76
X509v3 Authority Key Identifier:
keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bb:45:15:ea:0b:93:5d:82:28:4b:2f:00:8e:77:8f:f9:e4:
9c:2f:6e:0a:34:b0:eb:ce:5a:4c:a2:82:71:cf:4a:34:ad:6f:
73:02:15:75:4f:f3:9b:42:fb:ef:a8:a4:d2:40:05:95:53:1b:
46:c9:4a:9d:75:ce:ad:25:22:97:a2:dd:15:5d:2d:d4:d7:44:
c6:8d:92:61:27:29:03:c2:12:aa:7f:41:51:9e:dc:d6:cf:77:
8a:2f:47:79:e7:b6:0c:fd:21:7c:36:38:14:53:4f:5c:ee:48:
35:db:7e:c5:3a:71:75:95:ee:62:59:b8:71:5d:d8:1e:af:06:
c1:4a:79:44:13:72:99:3a:1a:1d:74:87:0c:1c:ee:79:be:8c:
2d:8a:5b:86:ce:10:30:6e:3e:e8:eb:ca:36:68:07:fd:09:37:
1a:88:a6:e2:6d:c7:e9:a2:a1:fc:77:f9:f9:2d:6a:84:c9:83:
80:45:18:86:d3:96:fa:23:15:e9:c4:2a:42:4a:0b:0f:df:e8:
43:ca:02:db:00:0a:39:a5:65:97:78:16:d3:89:9b:3f:1d:03:
ce:bf:16:91:6e:d7:03:55:17:e7:08:66:92:c2:a5:67:23:b5:
36:95:e3:c6:75:f4:58:a1:47:ef:a6:bf:c6:9a:8c:a8:f6:65:
a0:6d:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:57 2026 by rpki-client