Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier: X+Kw/Prmm/fDEYNg/QaQR7m+EkhX7EluwWTmuZ7I+ms=
Subject key identifier: 37:2E:BE:32:50:6E:5D:0E:D3:A3:A9:F3:0E:4E:76:EA:02:D8:0E:F7
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 01A1826285A89AEEEEC351344ACF75DFEAD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number: 0803
Signing time: Wed 28 Oct 2026 12:00:57 +0000
Manifest this update: Wed 28 Oct 2026 12:00:57 +0000
Manifest next update: Thu 29 Oct 2026 12:00:57 +0000
Files and hashes: 1: LFUS6tQiGpmjI6ItUVw2MpTAETI.roa (hash: FEu4LPnIRepU4N89SAmjCCbg/lOypjW1gLoZTKRnXmE=)
2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: ZBvGc5KZCw+Pdq7a+fy8aoDBynUEI8qgMJzmfMRGki8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:85:a8:9a:ee:ee:c3:51:34:4a:cf:75:df:ea:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: Oct 28 12:00:57 2026 GMT
Not After : Oct 29 12:00:57 2026 GMT
Subject: CN=372ebe32506e5d0ed3a3a9f30e4e76ea02d80ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:44:5e:3e:db:e9:77:ef:3e:e0:0e:b6:67:fa:
70:a9:6d:3f:60:18:74:8d:4f:27:59:af:6a:9d:ba:
4c:51:22:0d:bf:2b:c7:ad:f4:05:67:d7:77:6e:1f:
ea:81:b7:ce:c7:9c:58:99:9e:b7:8a:2f:fe:f2:83:
8d:ad:0c:08:ce:a2:7b:f6:f1:d4:1a:6a:64:79:3e:
80:30:9f:0d:89:eb:ac:7a:ac:da:04:0a:15:c2:8f:
c2:54:25:3f:2e:6f:24:e0:83:b2:ad:79:07:e4:24:
28:26:a2:b1:5e:2d:6c:70:51:fe:34:b0:5c:17:1b:
93:22:cd:c6:f0:a1:88:6e:00:cf:db:a0:8c:3a:77:
d4:12:fb:d7:2e:1b:81:9e:fb:3c:40:24:78:da:ea:
9c:df:be:88:b2:e6:04:10:43:3a:aa:8d:f8:04:f3:
32:85:e9:65:96:1f:d6:31:24:1c:a7:eb:97:f6:26:
f9:0e:b3:2b:b4:c7:39:1d:1d:bc:01:8d:b7:da:37:
47:68:fc:b2:42:f3:48:db:9e:e0:cf:93:f9:6f:83:
f3:ab:e3:d2:92:53:8d:14:ed:66:be:84:9a:fe:04:
2e:a2:a7:67:2e:9b:1a:ae:76:ef:fe:e7:0a:13:5b:
6e:cb:ab:52:54:ec:fb:c9:93:cb:95:12:e5:f9:2d:
5f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2E:BE:32:50:6E:5D:0E:D3:A3:A9:F3:0E:4E:76:EA:02:D8:0E:F7
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ad:57:70:76:52:d6:3a:70:92:b5:66:ca:df:ac:4d:12:86:
61:e2:5f:7d:27:6d:1c:70:2f:e7:4a:5f:d9:e3:00:23:d1:82:
13:9d:18:f2:8e:0b:51:40:53:03:8f:d9:1c:bc:9f:2f:67:b4:
92:12:df:e2:c8:de:69:d3:b1:0e:58:6e:aa:80:8d:88:d6:0a:
cf:b5:8a:6f:2d:ad:53:45:ee:db:05:62:aa:13:30:23:36:50:
8a:03:fa:24:cf:11:17:4a:c0:10:d0:08:f2:7e:96:6c:4b:06:
7b:af:00:bc:f5:53:5a:f2:49:4c:2d:bc:c9:1d:04:d2:39:d4:
10:61:21:a8:b9:7f:0f:d9:18:4c:11:e1:b9:6c:1e:bc:6b:26:
dc:a2:9b:7f:19:56:b1:3c:55:e4:42:9d:10:82:4f:4a:b7:8e:
3a:35:75:76:3b:d6:1c:32:e2:3e:6a:dd:2d:0b:ba:db:70:e2:
bf:11:18:80:4f:98:a2:44:2a:e1:8d:62:d3:b7:c9:5c:0b:25:
34:53:65:d3:33:03:ae:ba:cb:a1:90:c0:8d:00:46:51:e6:cc:
ac:1a:ef:c3:94:85:1b:eb:a2:d0:c8:77:54:22:19:e9:0f:f5:
02:71:eb:c2:a7:5d:82:af:0b:08:9a:ad:8e:d1:c3:ba:f5:d5:
ea:30:12:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:22:18 2026 by rpki-client