Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
File: eVoYZBqRazBgdNHhH9CxDp39xDA.mft (raw, json)
Hash identifier: 6OcNxh00ff5MmERHJv+r6dFfPtBpTlEojH6NOLiZPzY=
Subject key identifier: AC:2F:6F:37:C6:40:30:0E:51:AD:60:08:41:F6:36:19:14:CE:32:E8
Authority key identifier: 79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30
Certificate issuer: /CN=795a18641a916b306074d1e11fd0b10e9dfdc430
Certificate serial: 01A08A8C15C3498DD0E87B56AB2D9C0A6939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
Manifest number: 0C4D
Signing time: Thu 10 Sep 2026 09:00:31 +0000
Manifest this update: Thu 10 Sep 2026 09:00:31 +0000
Manifest next update: Fri 11 Sep 2026 09:00:31 +0000
Files and hashes: 1: NSff8QmOR5QMbXmvv0vT3cO30Vo.roa (hash: 9Im0oh/WcFti35mYlpYTmDh/TqslAAcAQyxVVkByg1w=)
2: eVoYZBqRazBgdNHhH9CxDp39xDA.crl (hash: mvW+DyGL4p7E5134MwbvUvaUhaa+xgxHc0vASS/NesU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:15:c3:49:8d:d0:e8:7b:56:ab:2d:9c:0a:69:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795a18641a916b306074d1e11fd0b10e9dfdc430
Validity
Not Before: Sep 10 09:00:31 2026 GMT
Not After : Sep 11 09:00:31 2026 GMT
Subject: CN=ac2f6f37c640300e51ad600841f6361914ce32e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:57:1a:a4:74:14:cc:b8:97:c1:2c:f1:70:
64:16:8b:45:20:21:e5:9a:b3:4a:c7:c1:b5:c6:09:
79:8f:1c:9d:df:e9:e5:f2:30:ba:4d:06:5c:09:9d:
8f:04:df:e5:e7:f6:cd:ff:fb:b5:4a:32:d7:46:bf:
11:ff:4f:90:1f:bc:24:ac:b7:04:6f:0f:65:e7:3d:
d0:bb:4e:c6:ce:5f:42:0d:bd:08:9e:2b:25:fa:42:
4a:25:c5:b6:a4:41:53:9f:0b:dc:5c:c8:23:8d:1c:
bd:9d:85:a2:87:f8:47:e9:f1:b3:f0:3e:58:6b:f1:
b2:08:19:73:1f:8a:0e:21:f3:34:90:64:ab:d5:db:
12:6f:2b:81:bf:13:6b:60:45:b4:96:f1:f6:96:11:
68:7e:c1:fa:b2:c8:11:4d:d6:31:19:5d:10:03:c4:
ed:23:b6:a3:99:07:5d:d2:40:9e:c0:06:cb:bc:d3:
3a:6d:a3:34:62:31:b2:67:9c:19:e3:fd:98:33:e2:
71:90:b1:cd:6d:fa:15:6c:2d:7c:3f:7b:65:34:b0:
b9:07:ad:ce:e1:e0:50:06:4a:6e:89:6f:5c:bc:54:
98:f7:b6:12:f5:5d:4e:b0:3a:03:51:a8:9d:06:97:
a9:39:e7:b4:9a:93:48:18:bc:67:a5:0b:66:1b:95:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2F:6F:37:C6:40:30:0E:51:AD:60:08:41:F6:36:19:14:CE:32:E8
X509v3 Authority Key Identifier:
keyid:79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d7:d1:e9:4f:43:0c:74:9c:52:75:e6:c8:6c:d7:bb:b8:52:
7d:46:72:e5:1c:1f:f1:ea:14:9d:65:6d:d7:5a:44:7d:5c:a8:
43:6b:cb:41:23:72:cd:79:54:71:f9:df:b3:d1:79:73:50:3d:
f0:2c:72:4a:65:e3:24:a8:e6:a5:55:fa:a6:19:fc:60:1f:f1:
10:6b:24:b3:5b:f1:5d:25:f4:cc:7f:18:03:c1:8e:c3:db:89:
d9:cf:e9:45:2c:c5:5a:0f:0a:2d:44:21:41:8f:bd:a0:49:bc:
16:b3:d4:28:c6:c2:ac:ae:c2:47:04:d7:bf:13:5b:43:8c:35:
8e:34:63:8f:8c:27:bd:a6:9f:59:2e:04:a1:18:76:e9:49:77:
d2:90:52:e4:18:ad:04:78:9d:80:99:3e:4a:b9:b0:58:c3:cc:
29:0f:e7:22:d9:57:da:ca:1a:eb:64:ad:86:50:88:12:d8:02:
e6:28:9a:87:3c:3b:9c:52:7a:8e:85:2e:8e:e2:8b:26:47:4c:
56:33:24:7c:67:56:86:da:56:4b:aa:8a:ea:b4:b1:fd:94:70:
da:18:0a:bb:1c:c2:bf:a4:78:01:40:1a:5a:4e:b2:15:e4:25:
e8:b0:20:29:8c:16:68:2a:e4:0a:4a:87:6d:9d:04:bf:98:a9:
ba:44:a3:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjBXDSY3Q6HtWqy2cCmk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NWExODY0MWE5MTZiMzA2MDc0ZDFlMTFmZDBiMTBlOWRm
ZGM0MzAwHhcNMjYwOTEwMDkwMDMxWhcNMjYwOTExMDkwMDMxWjAzMTEwLwYDVQQD
EyhhYzJmNmYzN2M2NDAzMDBlNTFhZDYwMDg0MWY2MzYxOTE0Y2UzMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjJXGqR0FMy4l8Es8XBkFotFICHl
mrNKx8G1xgl5jxyd3+nl8jC6TQZcCZ2PBN/l5/bN//u1SjLXRr8R/0+QH7wkrLcE
bw9l5z3Qu07Gzl9CDb0Inisl+kJKJcW2pEFTnwvcXMgjjRy9nYWih/hH6fGz8D5Y
a/GyCBlzH4oOIfM0kGSr1dsSbyuBvxNrYEW0lvH2lhFofsH6ssgRTdYxGV0QA8Tt
I7ajmQdd0kCewAbLvNM6baM0YjGyZ5wZ4/2YM+JxkLHNbfoVbC18P3tlNLC5B63O
4eBQBkpuiW9cvFSY97YS9V1OsDoDUaidBpepOee0mpNIGLxnpQtmG5XLNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwvbzfGQDAOUa1gCEH2NhkUzjLoMB8GA1UdIwQY
MBaAFHlaGGQakWswYHTR4R/QsQ6d/cQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVZvWVpCcVJhekJnZE5IaEg5Q3hEcDM5eERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lNDJiYTQtN2E4NC00MjI2LWFmYTct
MDlmYjhmZTcyZjRhLzEvZVZvWVpCcVJhekJnZE5IaEg5Q3hEcDM5eERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lNDJiYTQtN2E4NC00MjI2LWFmYTctMDlmYjhmZTcyZjRh
LzEvZVZvWVpCcVJhekJnZE5IaEg5Q3hEcDM5eERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNfR6U9D
DHScUnXmyGzXu7hSfUZy5Rwf8eoUnWVt11pEfVyoQ2vLQSNyzXlUcfnfs9F5c1A9
8CxySmXjJKjmpVX6phn8YB/xEGsks1vxXSX0zH8YA8GOw9uJ2c/pRSzFWg8KLUQh
QY+9oEm8FrPUKMbCrK7CRwTXvxNbQ4w1jjRjj4wnvaafWS4EoRh26Ul30pBS5Bit
BHidgJk+SrmwWMPMKQ/nItlX2soa62SthlCIEtgC5iiahzw7nFJ6joUujuKLJkdM
VjMkfGdWhtpWS6qK6rSx/ZRw2hgKuxzCv6R4AUAaWk6yFeQl6LAgKYwWaCrkCkqH
bZ0Ev5ipukSjWQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:40:26 2026 by rpki-client