Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: 8XbOgX/K4U15KfEMWoBAMXo7pI7SPjajByM8C5D0oS4=
Subject key identifier: CB:81:3B:7A:7B:7D:38:E3:D4:DC:07:09:32:AB:8B:67:90:B6:95:55
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 019CAA8F5FE92EE787A4BC545887483F4005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 11AE
Signing time: Sun 01 Mar 2026 18:00:48 +0000
Manifest this update: Sun 01 Mar 2026 18:00:48 +0000
Manifest next update: Mon 02 Mar 2026 18:00:48 +0000
Files and hashes: 1: Wfdm8iDDw0lI9V9EYGtDizSpNCQ.roa (hash: G7MUAWNXEqs1+UqwYpVfJPda6fWT1l1YlfUSrCkPCOs=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: e0tJoSEkBd4QNkqeQMSPE85vO18hHeNPTy90McdM2rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5f:e9:2e:e7:87:a4:bc:54:58:87:48:3f:40:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Mar 1 18:00:48 2026 GMT
Not After : Mar 2 18:00:48 2026 GMT
Subject: CN=cb813b7a7b7d38e3d4dc070932ab8b6790b69555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0a:5f:2c:6a:3f:b1:11:fc:24:1e:57:b9:0a:
43:b8:8a:bf:a7:55:cb:8c:11:e0:c4:43:ea:34:1a:
de:18:49:68:87:9c:54:67:d5:75:0c:37:8a:76:f0:
38:8b:07:79:94:2a:c4:03:30:99:45:5f:d8:e9:3a:
a3:a9:a1:6f:f4:19:c9:ff:09:f1:f3:df:4c:e5:7f:
2d:d5:1a:bb:bb:4c:2d:3a:1e:5d:a1:89:fc:44:3f:
3e:26:07:e3:cf:36:fa:5e:e3:4b:6c:ea:aa:84:4f:
7f:88:86:bb:16:66:c2:96:15:af:35:4b:95:c1:55:
63:f6:7e:ba:bd:89:76:c5:fc:c9:72:c0:0c:31:e5:
52:4c:da:e9:71:52:dd:e5:05:69:e5:c4:0e:59:1e:
ee:dc:50:2f:cd:fb:5c:5b:23:ba:8c:c9:35:ef:5b:
26:bb:14:e5:bc:f5:bd:51:be:7f:e8:e3:39:6b:43:
53:46:96:b9:09:2b:8b:43:cb:21:1d:8c:d4:65:08:
0f:ba:99:df:f1:84:6a:86:73:81:9b:32:f7:5e:33:
80:f3:67:a0:2e:11:a3:a2:a3:7c:e1:7f:3d:c6:3f:
24:c6:0f:55:ae:d5:4c:2e:96:e1:7b:a6:1a:c8:c4:
53:ea:b8:c0:c6:d1:a0:36:77:9a:73:7e:aa:fc:e1:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:81:3B:7A:7B:7D:38:E3:D4:DC:07:09:32:AB:8B:67:90:B6:95:55
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a7:40:3a:d8:b1:78:5e:c3:22:5c:ff:4c:4f:3b:99:19:a7:
58:5c:e3:2b:41:b6:e7:a4:31:16:b9:fb:2c:d7:e3:14:b6:74:
43:e6:68:5c:1d:cd:f7:97:46:59:e8:1d:1f:a3:16:34:c1:9c:
66:85:a9:4a:83:0e:00:ba:6b:41:0f:c6:a7:b2:5f:fb:8f:18:
17:34:71:db:13:9c:99:1f:c5:0a:40:ee:e0:43:1c:3e:12:c5:
72:b5:0a:c6:68:4d:b5:a8:c7:00:68:65:a0:3b:b9:a1:54:cb:
d4:45:4d:0a:c0:5f:ed:3e:0c:93:4a:88:d7:1e:33:05:4d:75:
13:78:d2:c0:58:2b:85:c9:1d:d6:cd:e4:3f:1e:f0:22:c5:60:
65:58:b4:e5:c1:e5:a9:42:f4:1d:fe:83:a6:25:ec:96:02:e7:
66:6e:0b:ca:3c:81:68:b0:ec:b2:b3:5a:70:a9:b7:90:11:0f:
0d:87:a2:bb:27:63:61:b9:29:f5:fe:ff:e8:79:83:d0:64:73:
d9:60:00:66:b4:bf:50:9f:87:08:a5:60:ac:d3:14:26:94:a9:
60:4b:ae:15:a2:f8:5f:a6:d0:93:7d:76:5a:2e:07:d1:b4:36:
de:4d:6a:d2:bc:b0:9b:ad:44:5f:e9:ee:a2:15:18:97:50:0c:
aa:b8:da:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj1/pLueHpLxUWIdIP0AFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjZjZmNkYTM5NzE2M2Q4MzVjODk3YWRlYTkwNzFlNjFj
OGJjNGQwHhcNMjYwMzAxMTgwMDQ4WhcNMjYwMzAyMTgwMDQ4WjAzMTEwLwYDVQQD
EyhjYjgxM2I3YTdiN2QzOGUzZDRkYzA3MDkzMmFiOGI2NzkwYjY5NTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QpfLGo/sRH8JB5XuQpDuIq/p1XL
jBHgxEPqNBreGEloh5xUZ9V1DDeKdvA4iwd5lCrEAzCZRV/Y6TqjqaFv9BnJ/wnx
899M5X8t1Rq7u0wtOh5doYn8RD8+Jgfjzzb6XuNLbOqqhE9/iIa7FmbClhWvNUuV
wVVj9n66vYl2xfzJcsAMMeVSTNrpcVLd5QVp5cQOWR7u3FAvzftcWyO6jMk171sm
uxTlvPW9Ub5/6OM5a0NTRpa5CSuLQ8shHYzUZQgPupnf8YRqhnOBmzL3XjOA82eg
LhGjoqN84X89xj8kxg9VrtVMLpbhe6YayMRT6rjAxtGgNneac36q/OHSXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuBO3p7fTjj1NwHCTKri2eQtpVVMB8GA1UdIwQY
MBaAFHsmz82jlxY9g1yJet6pBx5hyLxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEt
NmNkNTFjODRjMDE1LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEtNmNkNTFjODRjMDE1
LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6dAOtix
eF7DIlz/TE87mRmnWFzjK0G256QxFrn7LNfjFLZ0Q+ZoXB3N95dGWegdH6MWNMGc
ZoWpSoMOALprQQ/Gp7Jf+48YFzRx2xOcmR/FCkDu4EMcPhLFcrUKxmhNtajHAGhl
oDu5oVTL1EVNCsBf7T4Mk0qI1x4zBU11E3jSwFgrhckd1s3kPx7wIsVgZVi05cHl
qUL0Hf6DpiXslgLnZm4LyjyBaLDssrNacKm3kBEPDYeiuydjYbkp9f7/6HmD0GRz
2WAAZrS/UJ+HCKVgrNMUJpSpYEuuFaL4X6bQk312Wi4H0bQ23k1q0rywm61EX+nu
ohUYl1AMqrja7Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:33 2026 by rpki-client