Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier: 6XizeLxT8AaBMvdzTlvbmGW72UP1+m8pXpaceAhUsaM=
Subject key identifier: C8:B3:42:7B:F2:5A:1D:63:F0:72:14:67:08:2C:73:55:AF:68:A2:D8
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 019F9DA7CF648EA278181B07EEC4E2DAAF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number: 0708
Signing time: Sun 26 Jul 2026 09:00:48 +0000
Manifest this update: Sun 26 Jul 2026 09:00:48 +0000
Manifest next update: Mon 27 Jul 2026 09:00:48 +0000
Files and hashes: 1: LFUS6tQiGpmjI6ItUVw2MpTAETI.roa (hash: FEu4LPnIRepU4N89SAmjCCbg/lOypjW1gLoZTKRnXmE=)
2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: u7hTxHJmaWaqg7SMxEuU+VTDpBUlaZkqkr6G/eFhyJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:a7:cf:64:8e:a2:78:18:1b:07:ee:c4:e2:da:af:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: Jul 26 09:00:48 2026 GMT
Not After : Jul 27 09:00:48 2026 GMT
Subject: CN=c8b3427bf25a1d63f0721467082c7355af68a2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e3:a7:4b:8a:38:d7:a5:0c:73:3a:2d:18:64:
e2:8a:f6:34:73:07:f7:4c:6e:23:7e:e2:85:da:68:
98:d0:03:5a:fc:22:e1:69:84:81:2c:e8:97:09:8a:
ab:27:5a:56:5c:44:ff:0d:4e:5e:0e:07:81:f8:c3:
00:ef:90:ae:aa:65:6b:91:37:f4:42:85:26:c3:fa:
9f:90:e3:dd:ab:f1:de:f1:e0:67:0c:e3:23:db:fd:
cd:45:cf:4b:a6:2a:b9:61:28:da:ba:a2:14:83:95:
61:0f:43:f0:77:22:54:16:08:02:47:70:e0:8b:fc:
24:69:c7:20:47:f0:11:6c:81:38:a3:be:90:f0:bc:
ba:7a:32:3c:f3:12:40:f1:e5:60:63:60:28:85:09:
5e:cc:2c:8d:12:5b:e2:1a:c4:ff:c9:0d:05:d8:0a:
35:f0:53:20:fb:fb:d0:68:13:ce:40:a5:03:dc:08:
75:59:e7:5c:00:91:ff:a0:47:48:d4:35:8e:5d:7f:
c9:05:16:a7:5e:11:db:c3:ea:e2:0c:d4:23:39:1f:
ae:cc:02:f5:1d:d3:67:cb:fb:77:ec:30:de:98:68:
f8:82:81:3c:1e:fd:b5:cd:5e:c7:77:65:8a:01:17:
08:4a:d4:5a:8d:04:18:94:47:a0:2a:b8:bd:7c:a0:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B3:42:7B:F2:5A:1D:63:F0:72:14:67:08:2C:73:55:AF:68:A2:D8
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:92:20:e9:bc:f6:91:42:38:7e:26:44:1b:a8:f2:0a:db:78:
de:ac:d6:bc:e2:7f:4a:e3:17:25:85:8b:c4:66:90:22:51:a9:
4a:0a:fe:91:0b:2d:17:71:02:64:f9:9b:22:ad:39:26:1b:34:
a9:74:94:60:45:41:17:84:1f:38:2c:b0:6b:f7:28:d8:ed:ad:
69:f4:b9:11:ba:15:47:fe:48:b1:cb:1f:31:44:53:57:37:31:
2f:f5:a9:89:6c:bb:cb:12:df:a4:84:4d:ea:f9:b8:9d:10:5f:
7a:76:0f:11:31:d5:32:f7:f8:b5:ae:4d:55:fb:5c:4d:9a:c7:
e0:35:14:ea:bc:33:98:f0:8d:36:d5:a5:bf:05:0e:02:1e:30:
7c:6e:d7:32:18:d1:a3:b6:dd:ac:7f:ed:d1:5c:5c:ac:c1:82:
8c:31:f0:ed:3a:7d:7d:b2:bd:4f:8c:48:a9:42:59:0f:76:9c:
2c:fd:83:ee:dd:2a:70:1b:51:5f:68:40:f6:9f:1d:a4:bc:81:
ac:37:d0:70:d7:56:45:24:2c:bb:42:3a:ed:af:4c:8d:9c:73:
76:f0:ae:d2:ac:55:57:79:f3:1f:a1:b6:6b:57:4e:66:fa:67:
c0:5b:ca:45:4e:52:15:60:94:98:08:22:91:c4:8e:a2:60:d7:
df:f8:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:51:49 2026 by rpki-client