Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
File: evOlFiiU19GsKvgy16vPHb4RCuE.mft (raw, json)
Hash identifier: wjssXvaYmG7xyRAmr7+8GXecVobcCH3fR0v4/FhCkSE=
Subject key identifier: CA:44:87:01:F2:B0:48:32:F0:73:BD:8B:81:64:81:07:D2:2A:29:1C
Authority key identifier: 7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1
Certificate issuer: /CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
Certificate serial: 019FA3057982C9B040BCE7F6F76DD68C0EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
Manifest number: 0833
Signing time: Mon 27 Jul 2026 10:01:12 +0000
Manifest this update: Mon 27 Jul 2026 10:01:12 +0000
Manifest next update: Tue 28 Jul 2026 10:01:12 +0000
Files and hashes: 1: evOlFiiU19GsKvgy16vPHb4RCuE.crl (hash: sdnuzYWDEvvTWnyDtoc1ZbA70Yt/cpHKfGOhy681RYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:79:82:c9:b0:40:bc:e7:f6:f7:6d:d6:8c:0e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
Validity
Not Before: Jul 27 10:01:12 2026 GMT
Not After : Jul 28 10:01:12 2026 GMT
Subject: CN=ca448701f2b04832f073bd8b81648107d22a291c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:9b:d3:9c:c4:1a:47:ec:88:bd:e3:f2:e4:
0f:a7:bc:76:45:5e:1b:3e:4c:87:0c:62:01:0d:84:
c3:98:b8:16:d8:db:fd:9f:29:a1:60:9e:9d:7a:c9:
91:6f:25:05:09:e8:fd:5b:cf:de:f7:28:f7:31:83:
c4:40:91:5b:fd:67:8b:10:7a:90:5f:ec:6d:3a:1a:
28:5f:e3:71:54:0a:05:df:ad:a4:f7:04:6b:7c:e8:
86:4e:94:b4:7b:4e:42:f8:82:f2:4d:6d:79:56:18:
ad:58:78:3f:86:e8:87:ee:52:27:02:5a:71:1a:85:
f4:ba:68:22:ad:9e:ef:76:02:cb:37:84:40:99:3d:
ef:65:dd:90:28:63:c8:c1:04:97:83:95:be:38:41:
06:80:f7:a5:34:d1:22:f3:13:da:16:be:ff:54:78:
bf:dc:c2:b3:61:e2:26:58:d3:7b:48:c4:37:9f:5f:
1b:39:1d:56:6f:12:67:ae:51:ef:8d:c7:ef:11:bf:
6f:2c:32:9d:e4:f2:d4:f2:7c:cf:08:b5:b7:79:d4:
c9:02:21:31:eb:72:59:dc:23:0f:d3:72:95:96:56:
54:16:f7:a3:f1:07:74:c1:5a:2f:cf:63:13:27:f4:
26:e6:fb:05:41:f1:bb:43:10:3e:ea:db:80:91:2e:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:44:87:01:F2:B0:48:32:F0:73:BD:8B:81:64:81:07:D2:2A:29:1C
X509v3 Authority Key Identifier:
keyid:7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c8:9b:33:e0:f2:24:59:9d:36:46:60:3b:80:c5:df:76:97:
7e:64:67:e5:22:96:5b:8f:f7:93:be:9b:66:10:e5:a1:ee:04:
24:b4:7b:2b:c0:b0:85:3a:65:86:a4:4e:d5:6a:85:8c:75:cc:
8d:4a:72:17:13:81:69:a7:14:eb:d6:db:84:b9:cd:40:5b:49:
d7:de:bc:e9:33:71:22:15:c9:85:b1:7c:7f:b1:95:f3:db:5b:
2e:3b:cf:25:f7:58:06:f3:9c:77:73:ae:ea:94:da:a2:60:95:
97:f3:e5:c4:01:31:53:70:47:62:55:80:12:ad:47:60:94:26:
e2:e6:41:08:9f:33:9c:fc:13:9b:d5:82:4b:b5:75:18:21:6a:
28:d0:a0:3b:f1:36:d6:b2:f9:be:cf:2e:e7:3a:c3:ce:bc:1e:
35:ef:4d:bd:3a:14:c5:01:74:f9:40:04:e8:67:3d:e4:bf:0f:
bb:21:cf:1e:69:db:68:c3:f6:0e:48:79:25:ec:38:63:92:f9:
5d:0f:64:81:9b:8c:3c:4c:ce:3a:1e:e3:56:28:e2:14:e3:c4:
b3:c8:64:81:20:f2:d2:b6:10:51:57:6b:40:dc:d0:4e:bf:b8:
9e:7a:ec:0f:6d:91:04:ec:a6:80:00:91:1d:8b:e5:ae:b4:73:
3f:6e:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:57:11 2026 by rpki-client