Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
File: eVoYZBqRazBgdNHhH9CxDp39xDA.mft (raw, json)
Hash identifier: Bs7lRVpMun6y/8WmhoK8R/jk+voipxyCwZZP7jHqPvk=
Subject key identifier: 5D:8A:7A:0C:0C:BD:3F:76:9B:B6:A8:F2:2B:D2:BE:F8:E5:C5:06:69
Authority key identifier: 79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30
Certificate issuer: /CN=795a18641a916b306074d1e11fd0b10e9dfdc430
Certificate serial: 019D38D311F0636D3F6977909BF990CF35EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
Manifest number: 0A95
Signing time: Sun 29 Mar 2026 09:00:49 +0000
Manifest this update: Sun 29 Mar 2026 09:00:49 +0000
Manifest next update: Mon 30 Mar 2026 09:00:49 +0000
Files and hashes: 1: NSff8QmOR5QMbXmvv0vT3cO30Vo.roa (hash: 9Im0oh/WcFti35mYlpYTmDh/TqslAAcAQyxVVkByg1w=)
2: eVoYZBqRazBgdNHhH9CxDp39xDA.crl (hash: BErLXGMzkNBdlMVsA+bcWkVix6FhiDFUyRpeWmD2Juw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:11:f0:63:6d:3f:69:77:90:9b:f9:90:cf:35:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=795a18641a916b306074d1e11fd0b10e9dfdc430
Validity
Not Before: Mar 29 09:00:49 2026 GMT
Not After : Mar 30 09:00:49 2026 GMT
Subject: CN=5d8a7a0c0cbd3f769bb6a8f22bd2bef8e5c50669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6a:50:93:1f:6f:c8:1e:c8:32:aa:26:6e:7c:
88:78:55:71:11:1e:d9:ab:de:e5:bd:8c:e8:a9:8d:
d4:a5:62:fc:a5:d0:41:4e:10:29:e0:2c:69:4e:69:
60:22:fc:15:a0:09:45:39:44:56:c2:dd:35:27:b7:
fd:28:fa:bc:12:5e:ee:0e:56:69:d5:60:2d:b9:2d:
9b:27:5f:60:59:13:8a:3c:15:f1:f9:9c:8a:f1:f9:
97:d8:96:c3:ba:0f:54:9c:c3:74:d2:ec:46:ca:01:
f9:75:7f:83:a5:39:08:83:b1:62:94:ac:e1:de:6e:
4e:24:d7:9b:85:36:ea:29:4b:35:91:2e:bd:4a:ac:
fe:3b:78:e5:28:32:ae:81:6e:68:81:cb:cc:48:3b:
18:c3:76:a5:3e:9d:76:88:c9:f5:23:0c:b2:53:b7:
d4:c3:67:df:8c:74:e4:a6:f5:cb:ce:ea:e6:9b:d5:
0f:f5:b8:f1:00:63:35:d8:e0:38:58:35:3b:83:61:
1a:94:2b:1c:df:3d:b0:53:40:0a:dd:83:1d:09:64:
49:b0:e6:69:9d:89:85:b4:c9:63:61:8b:86:11:c0:
a8:01:26:04:28:8f:70:f3:1e:e6:d5:82:a0:df:36:
53:66:46:89:bb:ef:be:0b:52:88:06:63:89:f1:e3:
5b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8A:7A:0C:0C:BD:3F:76:9B:B6:A8:F2:2B:D2:BE:F8:E5:C5:06:69
X509v3 Authority Key Identifier:
keyid:79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:95:aa:e7:db:1d:ac:02:c2:14:05:d0:90:85:fa:41:ac:e5:
79:65:a6:3e:30:1e:1f:47:a1:14:4d:cc:1f:0d:a3:38:fa:04:
4b:9d:c1:32:62:74:1b:88:5d:52:86:ab:a3:6c:6f:ee:18:2b:
b3:49:3e:d9:4c:c7:85:5d:20:d3:ae:3b:84:24:d1:2c:f7:79:
fe:42:56:f3:10:87:d5:26:b1:b3:94:63:10:c1:16:9d:18:f8:
d2:b7:13:2c:ac:8e:07:bc:ab:8c:99:33:fe:6f:3a:16:ed:1e:
cf:d6:fa:e6:29:6e:26:b3:d6:a7:9e:35:e5:c1:43:c5:15:bd:
c6:07:62:86:2f:e1:91:d5:cd:4c:78:ce:7a:7a:82:d0:da:69:
7a:23:a3:46:63:7b:b7:1b:c5:c2:2d:e1:6c:44:00:8c:8d:4e:
34:86:83:f6:d1:a2:60:3d:51:5a:ab:17:58:1f:fd:bb:b2:ef:
ef:3a:dd:53:e8:c6:93:21:2b:95:c6:a4:95:23:a8:f6:e0:ac:
8e:8e:3b:5f:e5:55:16:3c:fc:bc:ac:51:ac:ac:31:80:d8:41:
48:00:03:58:95:65:d0:bc:31:c4:63:c4:7a:ce:71:4e:56:cc:
45:25:d1:3e:dd:30:b3:a8:22:e7:99:a6:77:76:7c:54:af:f7:
d4:61:49:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040xHwY20/aXeQm/mQzzXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NWExODY0MWE5MTZiMzA2MDc0ZDFlMTFmZDBiMTBlOWRm
ZGM0MzAwHhcNMjYwMzI5MDkwMDQ5WhcNMjYwMzMwMDkwMDQ5WjAzMTEwLwYDVQQD
Eyg1ZDhhN2EwYzBjYmQzZjc2OWJiNmE4ZjIyYmQyYmVmOGU1YzUwNjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGpQkx9vyB7IMqombnyIeFVxER7Z
q97lvYzoqY3UpWL8pdBBThAp4CxpTmlgIvwVoAlFOURWwt01J7f9KPq8El7uDlZp
1WAtuS2bJ19gWROKPBXx+ZyK8fmX2JbDug9UnMN00uxGygH5dX+DpTkIg7FilKzh
3m5OJNebhTbqKUs1kS69Sqz+O3jlKDKugW5ogcvMSDsYw3alPp12iMn1IwyyU7fU
w2ffjHTkpvXLzurmm9UP9bjxAGM12OA4WDU7g2EalCsc3z2wU0AK3YMdCWRJsOZp
nYmFtMljYYuGEcCoASYEKI9w8x7m1YKg3zZTZkaJu+++C1KIBmOJ8eNbRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2KegwMvT92m7ao8ivSvvjlxQZpMB8GA1UdIwQY
MBaAFHlaGGQakWswYHTR4R/QsQ6d/cQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVZvWVpCcVJhekJnZE5IaEg5Q3hEcDM5eERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lNDJiYTQtN2E4NC00MjI2LWFmYTct
MDlmYjhmZTcyZjRhLzEvZVZvWVpCcVJhekJnZE5IaEg5Q3hEcDM5eERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lNDJiYTQtN2E4NC00MjI2LWFmYTctMDlmYjhmZTcyZjRh
LzEvZVZvWVpCcVJhekJnZE5IaEg5Q3hEcDM5eERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5Wq59sd
rALCFAXQkIX6QazleWWmPjAeH0ehFE3MHw2jOPoES53BMmJ0G4hdUoaro2xv7hgr
s0k+2UzHhV0g0647hCTRLPd5/kJW8xCH1Saxs5RjEMEWnRj40rcTLKyOB7yrjJkz
/m86Fu0ez9b65iluJrPWp5415cFDxRW9xgdihi/hkdXNTHjOenqC0NppeiOjRmN7
txvFwi3hbEQAjI1ONIaD9tGiYD1RWqsXWB/9u7Lv7zrdU+jGkyErlcaklSOo9uCs
jo47X+VVFjz8vKxRrKwxgNhBSAADWJVl0LwxxGPEes5xTlbMRSXRPt0ws6gi55mm
d3Z8VK/31GFJXQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:36 2026 by rpki-client