Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
File: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft (raw, json)
Hash identifier: WMV7YsRZ0Td2Bc9f2cs7t1aUCneFis2gqP2RJrXGnYs=
Subject key identifier: 89:2D:E3:4C:5C:38:F0:4A:D1:0D:74:EB:FC:F1:B0:86:71:78:26:5B
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Certificate issuer: /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial: 019CAD903C3E80724ACB24EECB2B4F648CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
Manifest number: 0290
Signing time: Mon 02 Mar 2026 08:00:36 +0000
Manifest this update: Mon 02 Mar 2026 08:00:36 +0000
Manifest next update: Tue 03 Mar 2026 08:00:36 +0000
Files and hashes: 1: 1pFLtL3u2Mj6D98HAx8GtYTeAwI.roa (hash: pmrWF+lDh+ECpFtkS0mznQOkoYJ7QI62/Hl2UZgNaYA=)
2: e7JCKZM7Sj7nZ-jn0culwxxnmRY.roa (hash: uCVQMuNimm2kRxYums+7bm1dwpOCnLao+2OKBBHNm54=)
3: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl (hash: 0m9BZppSuZemvy+55Geux2E0Xf4HjqFF4j+2fkFcOOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:3c:3e:80:72:4a:cb:24:ee:cb:2b:4f:64:8c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Validity
Not Before: Mar 2 08:00:36 2026 GMT
Not After : Mar 3 08:00:36 2026 GMT
Subject: CN=892de34c5c38f04ad10d74ebfcf1b0867178265b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:68:74:d4:56:38:a2:e1:3f:d8:c2:89:bc:
50:d3:db:41:e8:20:6d:f0:d5:91:65:e4:1f:2b:bb:
cb:80:ec:34:24:e3:97:d5:e4:89:d2:7d:8d:f6:13:
83:a0:a2:18:be:3a:f7:63:58:65:6d:4b:bc:c9:7c:
76:4a:c6:4a:ee:c8:83:d8:3c:2d:bd:6e:06:ef:46:
35:5a:f4:1f:c2:f6:51:49:0a:a9:cf:12:99:14:ec:
01:33:85:6d:46:a0:2f:79:47:89:40:bc:99:a1:34:
1e:65:58:ec:23:f7:47:f3:28:95:bc:3c:ba:16:bd:
e8:fe:c6:52:c5:a3:ef:45:8c:ce:bf:c1:2a:86:5b:
00:a8:f5:14:06:d1:00:17:0b:69:2f:54:4b:75:85:
a6:68:c3:da:e0:09:61:dc:1c:b8:86:a3:2f:f9:a7:
e7:54:35:b0:a1:87:23:4f:83:52:97:24:32:6b:f2:
78:74:92:e9:5d:ef:4c:23:31:33:22:39:f0:db:6a:
cb:13:73:e4:21:ef:5d:19:fa:bf:8c:b7:56:28:46:
00:0f:3e:61:f2:63:55:c8:86:5c:f8:70:13:1f:27:
e1:0d:b6:ce:80:b5:11:83:c1:65:78:4f:e6:da:db:
c1:86:ab:c0:1f:af:a1:85:1e:5e:27:ad:8a:7b:1b:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2D:E3:4C:5C:38:F0:4A:D1:0D:74:EB:FC:F1:B0:86:71:78:26:5B
X509v3 Authority Key Identifier:
keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7a:6e:c9:a4:82:d6:aa:4e:08:8d:a2:f1:e0:e0:d6:de:f6:
61:26:71:57:2a:a6:9e:5d:c1:cc:b8:7d:f4:8a:83:28:f3:98:
4a:ca:b6:29:82:72:01:89:0b:06:4b:c2:95:86:02:9a:59:22:
c4:61:89:a8:6f:7f:d6:b3:ba:f4:43:55:6d:27:46:67:24:74:
e9:d0:fb:62:c6:e5:89:b8:06:81:d3:a0:09:d3:79:70:28:f3:
0d:26:28:83:83:5e:cf:25:e3:4a:93:72:2c:54:46:79:02:a1:
b4:9f:d0:ee:dd:73:f5:27:ae:e7:7f:87:d6:48:c9:ba:81:a7:
65:0b:61:27:71:4e:f8:6f:43:ed:b4:f0:45:8d:14:64:a5:bd:
72:21:ce:48:98:e2:a2:f6:01:98:a2:6f:d9:94:af:48:4e:cf:
ab:58:f9:25:8c:51:62:4f:1b:00:2c:b9:58:e0:da:3b:62:15:
de:ef:56:d3:71:ca:f8:ce:8e:24:e2:b3:58:7c:30:12:29:8f:
27:9f:ed:42:5a:f5:1e:9c:6f:51:1c:40:71:4a:99:68:d7:96:
6a:54:bd:32:17:b3:6c:6e:3f:64:58:a5:16:3d:b7:83:09:44:
a8:76:54:f9:7a:45:a9:08:7e:47:b6:6a:51:9a:01:9b:3f:0c:
4c:99:a6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:24 2026 by rpki-client