Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
File: EVVnl9qc5x7sKV81sAhZuQzoxfA.mft (raw, json)
Hash identifier: DQBISqMpYdDp8EWxUNzEhz6XzEFmSsxWep13U9pYbvo=
Subject key identifier: 71:C3:6D:EF:9E:53:64:3C:EC:CE:32:DE:E8:D4:2F:C9:82:CD:47:96
Authority key identifier: 11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0
Certificate issuer: /CN=11556797da9ce71eec295f35b00859b90ce8c5f0
Certificate serial: 01A17DAA4D6E29C603995DEDCC22F9F5DACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
Manifest number: 02DD
Signing time: Tue 27 Oct 2026 14:01:15 +0000
Manifest this update: Tue 27 Oct 2026 14:01:15 +0000
Manifest next update: Wed 28 Oct 2026 14:01:15 +0000
Files and hashes: 1: EVVnl9qc5x7sKV81sAhZuQzoxfA.crl (hash: roKuYXiRjAQawHWCX/J42iAtXQ08XuOX6cuJAH5aB5Q=)
2: tUtGKToVFVEdLnvzwP_qbyoWrD4.roa (hash: oDawWr/gCtZY5IlLhtFkFwJPnj3rhzKF04OEEY7CZlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:4d:6e:29:c6:03:99:5d:ed:cc:22:f9:f5:da:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11556797da9ce71eec295f35b00859b90ce8c5f0
Validity
Not Before: Oct 27 14:01:15 2026 GMT
Not After : Oct 28 14:01:15 2026 GMT
Subject: CN=71c36def9e53643cecce32dee8d42fc982cd4796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:0e:ad:a6:5a:65:6b:fe:ca:12:02:20:e2:
eb:f3:1b:69:7f:ab:6b:c8:9a:9b:73:08:17:8e:bd:
f0:50:dd:74:66:98:07:11:cc:d6:e9:8f:4c:9c:18:
5c:31:30:22:66:da:4f:1a:0f:82:bf:ef:67:29:a9:
f3:93:c2:16:c7:3e:65:ca:de:f6:61:cc:b1:a2:cc:
1d:10:2c:f2:75:e1:83:bc:05:c7:50:97:09:e1:c7:
5a:39:21:21:9b:26:23:43:89:dd:87:75:ed:93:71:
e8:ec:15:da:01:e8:2b:0b:38:a8:0c:80:73:8b:60:
ce:4c:65:5a:3f:fe:8d:4c:a5:ea:66:85:a9:2c:71:
8c:e2:3e:c6:c2:94:44:d1:9d:d2:dc:bc:63:1d:b1:
86:55:6f:38:7c:0f:0c:3c:3d:7a:0d:5b:b8:83:e0:
7b:1d:ae:3d:cb:28:f5:31:93:b6:2a:cc:63:dc:9e:
71:b1:59:c3:cf:a1:35:b4:3d:6d:0c:e2:e0:d1:ae:
e8:31:6f:89:55:2c:86:c2:cf:b7:ca:ca:7a:07:1d:
43:e2:c6:54:cc:1d:da:0f:ae:d8:b3:b9:da:b1:55:
f0:35:31:7e:a7:ae:bd:a1:7f:94:f7:30:9d:67:bb:
f8:43:4f:f8:1a:b6:5e:c9:8d:6a:1d:78:e7:7e:cf:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C3:6D:EF:9E:53:64:3C:EC:CE:32:DE:E8:D4:2F:C9:82:CD:47:96
X509v3 Authority Key Identifier:
keyid:11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:7a:da:7e:c5:cb:bc:a4:6a:c2:ed:7c:94:0c:d1:e6:d6:02:
a6:e7:f9:f0:80:2d:be:f3:7b:73:bd:cd:cb:bd:83:0c:4d:ec:
97:5d:82:c2:b6:2b:7f:77:6e:8a:51:85:91:55:58:f4:58:c7:
73:6b:8f:da:98:53:3f:34:7b:58:0c:d0:9a:07:1a:c2:cc:3d:
f9:7d:f9:4c:7c:18:ca:60:9e:5d:27:c3:15:44:19:2e:ff:61:
75:6f:32:b9:6a:66:9b:84:05:87:11:8d:a9:8c:0e:a1:7c:7a:
ac:ac:d9:68:50:54:53:37:2b:e6:d8:0f:65:32:c2:dc:c5:89:
da:5c:4b:5a:4b:7f:95:6b:46:d2:bf:04:e2:cc:c8:b6:cc:f8:
4d:40:e2:49:1a:e7:67:dd:a0:bd:a4:73:46:7d:97:50:4d:67:
17:c7:e5:69:c5:21:ef:08:69:02:a1:d9:f7:5c:a3:67:07:26:
ab:fe:da:fd:b7:8e:b6:8f:b4:56:a9:5a:8f:15:3d:76:78:79:
39:ec:d1:ac:0a:87:b7:08:66:06:e7:4c:ee:7c:eb:d0:5d:c1:
2d:c5:4d:73:27:ca:04:ee:a8:8a:dd:43:66:a4:70:6a:20:be:
c2:9b:1d:b3:e5:05:a9:d0:51:f2:b8:d3:38:df:96:93:94:4d:
1e:15:a5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:35:41 2026 by rpki-client