Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: L+cEmsc/7KITeq53IO/0xcoVJd5hZ/1szl5YAtYaysQ=
Subject key identifier: B7:08:B3:C1:F7:1A:1A:E1:51:3A:46:65:AF:E7:3B:21:9B:62:AE:1F
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 01A0EDAF9C59490A97DBECF3BA2D89B46A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 13E3
Signing time: Tue 29 Sep 2026 15:01:44 +0000
Manifest this update: Tue 29 Sep 2026 15:01:44 +0000
Manifest next update: Wed 30 Sep 2026 15:01:44 +0000
Files and hashes: 1: Wfdm8iDDw0lI9V9EYGtDizSpNCQ.roa (hash: G7MUAWNXEqs1+UqwYpVfJPda6fWT1l1YlfUSrCkPCOs=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: GB4Bgm6bD9CGwevjsbC3IdbVkirK4hqxuHiQ9j0RdGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:9c:59:49:0a:97:db:ec:f3:ba:2d:89:b4:6a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Sep 29 15:01:44 2026 GMT
Not After : Sep 30 15:01:44 2026 GMT
Subject: CN=b708b3c1f71a1ae1513a4665afe73b219b62ae1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:30:ea:87:f7:9b:46:44:1e:ff:fd:8b:46:
bd:25:37:93:1a:c7:ab:60:59:8e:be:9a:fd:0e:44:
70:f1:73:b3:5f:94:29:00:2e:42:86:1a:9d:5b:4d:
8b:d6:a6:48:60:81:1a:89:8b:54:39:51:ec:d1:54:
b9:d8:38:ec:68:44:25:55:7c:cb:0e:f1:9e:54:07:
24:59:f7:4c:08:8c:cd:fa:2d:50:ad:bb:b6:5e:7c:
ce:46:a5:34:e6:0d:24:4a:e6:ed:7e:7b:ad:eb:4d:
de:71:b2:3c:da:5e:30:77:19:a5:27:8e:33:f5:43:
dc:13:1f:cf:19:eb:9f:9e:2a:aa:9a:73:65:d1:9c:
9b:bb:7b:47:06:6f:86:86:e6:94:67:d3:a1:e1:e3:
6d:79:90:bd:c1:32:1c:b0:d9:87:73:f4:f4:a4:40:
02:b7:ca:3d:dd:75:b7:82:3d:42:6b:c0:f6:e3:7a:
0f:33:a8:ba:82:92:c8:90:6c:7f:77:c5:99:cb:05:
1b:48:56:0d:f5:dc:0b:52:da:b5:93:ce:ba:a2:2d:
93:6f:81:2e:c7:0c:a1:f8:47:4b:fa:26:12:f7:6a:
a4:37:94:76:78:42:90:2a:da:df:be:93:0d:f1:2c:
8f:a0:e3:18:86:02:ca:c7:57:8e:51:d7:6c:81:53:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:08:B3:C1:F7:1A:1A:E1:51:3A:46:65:AF:E7:3B:21:9B:62:AE:1F
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d4:c4:cb:46:14:1b:0f:b4:0b:e1:34:08:b0:66:e3:df:ea:
49:ae:f4:06:61:66:62:ca:9b:eb:98:91:c0:44:d0:2f:f1:75:
07:4f:ee:9a:97:13:24:56:46:06:e5:6c:f9:ca:60:3e:04:84:
a4:0e:2d:b6:69:35:76:64:a4:9a:42:b0:bd:c3:62:0d:95:d8:
34:63:8e:64:39:b5:83:71:71:9e:6d:73:39:1c:fc:8b:c2:fe:
2e:d0:0b:44:3b:f2:85:73:c8:51:14:49:95:a2:63:70:2a:50:
96:06:33:4a:82:bc:d0:9d:e2:5a:ca:ef:c9:c1:9d:c4:1f:23:
ec:4a:b2:db:a5:d7:8f:bf:48:e1:1e:7f:d4:e2:af:50:fd:08:
b5:02:53:13:ea:63:19:8a:0d:9c:28:dd:7c:05:0b:30:df:46:
5d:d7:b2:19:47:f0:88:22:44:c8:02:ce:56:1c:29:65:90:00:
b5:e4:8d:62:1a:22:f1:9b:e7:b9:e7:a3:98:ef:6d:b2:da:84:
05:a4:b5:28:b8:c5:9c:30:68:5b:e8:c8:c8:16:90:6b:76:8b:
9e:bb:29:22:bd:f0:1d:21:fd:42:75:95:30:cc:f4:36:de:bb:
63:df:76:8b:ac:c5:db:77:03:dd:4c:f9:e8:12:83:56:23:ab:
7b:6a:ab:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtr5xZSQqX2+zzui2JtGojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjZjZmNkYTM5NzE2M2Q4MzVjODk3YWRlYTkwNzFlNjFj
OGJjNGQwHhcNMjYwOTI5MTUwMTQ0WhcNMjYwOTMwMTUwMTQ0WjAzMTEwLwYDVQQD
EyhiNzA4YjNjMWY3MWExYWUxNTEzYTQ2NjVhZmU3M2IyMTliNjJhZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cIw6of3m0ZEHv/9i0a9JTeTGser
YFmOvpr9DkRw8XOzX5QpAC5ChhqdW02L1qZIYIEaiYtUOVHs0VS52DjsaEQlVXzL
DvGeVAckWfdMCIzN+i1Qrbu2XnzORqU05g0kSubtfnut603ecbI82l4wdxmlJ44z
9UPcEx/PGeufniqqmnNl0Zybu3tHBm+GhuaUZ9Oh4eNteZC9wTIcsNmHc/T0pEAC
t8o93XW3gj1Ca8D243oPM6i6gpLIkGx/d8WZywUbSFYN9dwLUtq1k866oi2Tb4Eu
xwyh+EdL+iYS92qkN5R2eEKQKtrfvpMN8SyPoOMYhgLKx1eOUddsgVOxfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcIs8H3GhrhUTpGZa/nOyGbYq4fMB8GA1UdIwQY
MBaAFHsmz82jlxY9g1yJet6pBx5hyLxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEt
NmNkNTFjODRjMDE1LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEtNmNkNTFjODRjMDE1
LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9TEy0YU
Gw+0C+E0CLBm49/qSa70BmFmYsqb65iRwETQL/F1B0/umpcTJFZGBuVs+cpgPgSE
pA4ttmk1dmSkmkKwvcNiDZXYNGOOZDm1g3Fxnm1zORz8i8L+LtALRDvyhXPIURRJ
laJjcCpQlgYzSoK80J3iWsrvycGdxB8j7Eqy26XXj79I4R5/1OKvUP0ItQJTE+pj
GYoNnCjdfAULMN9GXdeyGUfwiCJEyALOVhwpZZAAteSNYhoi8ZvnueejmO9tstqE
BaS1KLjFnDBoW+jIyBaQa3aLnrspIr3wHSH9QnWVMMz0Nt67Y992i6zF23cD3Uz5
6BKDViOre2qrUA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 17:58:39 2026 by rpki-client