Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
File: EVVnl9qc5x7sKV81sAhZuQzoxfA.mft (raw, json)
Hash identifier: y1Egs/CyKgexZX7icft8x8Mw+Wu+fRndK7NfwNpBXpk=
Subject key identifier: 05:26:CA:37:1A:F8:AA:1F:67:05:5B:FA:7F:A9:1E:4E:F4:97:F1:B6
Authority key identifier: 11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0
Certificate issuer: /CN=11556797da9ce71eec295f35b00859b90ce8c5f0
Certificate serial: 019D389C1109E820FB97CDA0FFB0D1991BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
Manifest number: A7
Signing time: Sun 29 Mar 2026 08:00:45 +0000
Manifest this update: Sun 29 Mar 2026 08:00:45 +0000
Manifest next update: Mon 30 Mar 2026 08:00:45 +0000
Files and hashes: 1: EVVnl9qc5x7sKV81sAhZuQzoxfA.crl (hash: 7DmzyV1YQGD2Nyg5sCYbZrVMms+9+P5teYWzxvEb1LM=)
2: tUtGKToVFVEdLnvzwP_qbyoWrD4.roa (hash: oDawWr/gCtZY5IlLhtFkFwJPnj3rhzKF04OEEY7CZlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:11:09:e8:20:fb:97:cd:a0:ff:b0:d1:99:1b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11556797da9ce71eec295f35b00859b90ce8c5f0
Validity
Not Before: Mar 29 08:00:45 2026 GMT
Not After : Mar 30 08:00:45 2026 GMT
Subject: CN=0526ca371af8aa1f67055bfa7fa91e4ef497f1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:60:ac:30:bb:4a:46:18:7c:fa:09:50:40:5a:
12:ce:ae:2e:75:81:a1:98:92:2c:91:a5:13:b2:60:
af:dd:60:b9:75:1e:ad:02:d7:c4:61:30:94:a5:0d:
48:f3:89:9f:c5:73:b6:f9:08:e2:8e:42:2d:03:05:
95:5a:30:a2:33:0e:71:a8:bd:eb:bc:86:2d:f5:31:
f9:f7:e7:54:87:7e:19:65:92:83:1f:a0:de:dd:1d:
3e:23:da:30:0d:32:55:96:55:a1:51:33:c4:0e:00:
e6:d2:91:72:f7:f8:02:74:85:47:87:40:65:2a:29:
6f:3f:db:6b:f0:a6:13:87:24:db:89:75:d9:15:96:
dc:9f:bb:bc:5b:10:1d:d7:a4:53:43:8c:d8:a2:68:
e9:45:67:d1:ef:c9:0d:50:59:7b:75:a2:d3:74:8e:
3c:dc:64:58:3c:99:ea:99:d5:13:03:bf:a9:59:23:
49:24:cb:29:c8:e4:64:68:96:c6:21:83:b1:93:c2:
6d:37:5f:04:ba:da:2d:f9:b6:47:a1:89:01:4a:98:
61:95:a9:f2:3f:3c:f6:d1:c1:f8:a9:56:2c:0f:64:
5d:87:45:92:ab:b5:04:44:fb:e4:5e:e9:9e:14:c1:
e3:ca:4c:64:eb:5e:42:e5:d3:89:35:06:39:22:33:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:26:CA:37:1A:F8:AA:1F:67:05:5B:FA:7F:A9:1E:4E:F4:97:F1:B6
X509v3 Authority Key Identifier:
keyid:11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:80:d6:30:a6:0e:8f:81:63:55:a8:28:cb:59:fe:91:be:c1:
70:76:8d:4e:aa:94:c6:13:63:96:29:1f:5c:a1:10:ff:07:d5:
7d:1a:02:e1:35:8f:f5:25:60:88:b1:d8:1d:5b:2c:c4:e3:cc:
0b:82:92:87:c8:de:b1:a9:b4:71:e1:b0:fe:0a:97:3b:07:86:
a2:37:63:e4:50:3b:72:8c:e4:b8:8f:71:7f:4d:3c:e2:77:5d:
b5:c2:55:63:bf:52:37:a3:1a:09:45:95:d6:00:e6:ea:7d:b2:
30:55:57:c1:49:34:ea:15:43:8c:24:cf:15:28:85:93:83:2b:
84:0a:77:12:97:0d:20:33:8d:46:72:08:60:7c:83:85:22:72:
ba:4f:02:4a:5c:01:af:85:82:06:50:c2:89:23:b6:a9:83:61:
7b:6e:a3:44:c6:b7:45:b3:9f:41:61:36:f2:76:91:99:19:59:
a1:83:b6:14:79:4a:75:40:45:e2:60:99:80:0a:61:89:02:c5:
55:90:01:e0:ae:1c:44:9e:25:bf:28:a3:a3:65:b5:d3:1a:3f:
73:f1:cc:53:7b:67:7b:60:c5:c1:c3:a0:fd:d6:63:27:6f:cc:
d6:fe:3f:fa:78:7c:6a:d2:5e:b3:af:5f:59:ae:c1:a5:c6:bb:
4b:da:5f:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBEJ6CD7l82g/7DRmRu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNTU2Nzk3ZGE5Y2U3MWVlYzI5NWYzNWIwMDg1OWI5MGNl
OGM1ZjAwHhcNMjYwMzI5MDgwMDQ1WhcNMjYwMzMwMDgwMDQ1WjAzMTEwLwYDVQQD
EygwNTI2Y2EzNzFhZjhhYTFmNjcwNTViZmE3ZmE5MWU0ZWY0OTdmMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WCsMLtKRhh8+glQQFoSzq4udYGh
mJIskaUTsmCv3WC5dR6tAtfEYTCUpQ1I84mfxXO2+QjijkItAwWVWjCiMw5xqL3r
vIYt9TH59+dUh34ZZZKDH6De3R0+I9owDTJVllWhUTPEDgDm0pFy9/gCdIVHh0Bl
KilvP9tr8KYThyTbiXXZFZbcn7u8WxAd16RTQ4zYomjpRWfR78kNUFl7daLTdI48
3GRYPJnqmdUTA7+pWSNJJMspyORkaJbGIYOxk8JtN18Eutot+bZHoYkBSphhlany
Pzz20cH4qVYsD2Rdh0WSq7UERPvkXumeFMHjykxk615C5dOJNQY5IjOZaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUmyjca+KofZwVb+n+pHk70l/G2MB8GA1UdIwQY
MBaAFBFVZ5fanOce7ClfNbAIWbkM6MXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVZWbmw5cWM1eDdzS1Y4MXNBaFp1UXpveGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80Njk2ZTUtZmNlYy00NGEwLThmMDMt
MWVlZGE5YTlmZjhmLzEvRVZWbmw5cWM1eDdzS1Y4MXNBaFp1UXpveGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80Njk2ZTUtZmNlYy00NGEwLThmMDMtMWVlZGE5YTlmZjhm
LzEvRVZWbmw5cWM1eDdzS1Y4MXNBaFp1UXpveGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYDWMKYO
j4FjVagoy1n+kb7BcHaNTqqUxhNjlikfXKEQ/wfVfRoC4TWP9SVgiLHYHVssxOPM
C4KSh8jesam0ceGw/gqXOweGojdj5FA7cozkuI9xf0084nddtcJVY79SN6MaCUWV
1gDm6n2yMFVXwUk06hVDjCTPFSiFk4MrhAp3EpcNIDONRnIIYHyDhSJyuk8CSlwB
r4WCBlDCiSO2qYNhe26jRMa3RbOfQWE28naRmRlZoYO2FHlKdUBF4mCZgAphiQLF
VZAB4K4cRJ4lvyijo2W10xo/c/HMU3tne2DFwcOg/dZjJ2/M1v4/+nh8atJes69f
Wa7Bpca7S9pfhw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:15 2026 by rpki-client