Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File: eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier: DraPmV/zd5p9r1K+AdiHG6G7qZQQASSrHavOSfbdvR8=
Subject key identifier: EE:43:8E:B7:4A:73:B0:95:C7:8A:3C:73:F7:78:CB:27:EB:AF:BE:C1
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer: /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial: 019CABD8E2377B8CE5A024B131710BF802B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number: 072D
Signing time: Mon 02 Mar 2026 00:00:43 +0000
Manifest this update: Mon 02 Mar 2026 00:00:43 +0000
Manifest next update: Tue 03 Mar 2026 00:00:43 +0000
Files and hashes: 1: RLR72YRiJVyCWPKBdtMEO1UXGxo.roa (hash: 5N61eUvI++Qd4nCDGm+6k0H44mOvPhvyKSYwjTVvkeA=)
2: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: lTwMr999aOGggygMbfduG89omDws2gnacUakUvvv1h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e2:37:7b:8c:e5:a0:24:b1:31:71:0b:f8:02:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Validity
Not Before: Mar 2 00:00:43 2026 GMT
Not After : Mar 3 00:00:43 2026 GMT
Subject: CN=ee438eb74a73b095c78a3c73f778cb27ebafbec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:bf:b2:05:e4:05:4a:af:ac:c5:bb:a7:b4:
a9:55:63:51:6a:56:8b:dd:db:58:c1:ab:24:b7:2d:
ab:17:a2:85:db:fb:ad:44:8d:e5:6c:55:b8:ac:fa:
7d:38:0e:2c:df:e4:31:5f:2e:4f:65:07:10:c0:09:
d0:35:66:5d:37:45:04:76:15:6a:96:7f:95:65:57:
d8:0b:a1:c9:1a:26:e0:75:19:e5:17:85:c7:8e:d8:
aa:2a:33:be:3b:65:88:5e:3a:7c:bc:d6:2d:5a:0a:
43:cb:cd:4c:a9:6b:49:38:74:ab:25:c3:0f:a4:60:
42:42:43:b1:5c:f3:de:43:b7:4c:74:11:d2:a7:a9:
a7:cf:0f:18:14:c7:50:72:dd:92:40:ef:77:59:5e:
0b:f6:6c:be:11:df:13:1d:1b:4e:ed:f4:61:5a:0c:
22:c9:17:33:90:4e:7d:60:c6:3e:56:e6:8e:83:b6:
6d:aa:3e:92:44:f4:7e:04:38:2a:4d:2a:4f:52:f3:
7c:c0:c6:7d:00:38:f9:54:94:f8:6a:96:67:3d:fb:
49:a4:f6:67:95:30:50:e7:b5:b1:f4:68:1f:3d:0d:
d8:72:44:f7:02:04:6e:5b:96:0f:23:f5:ff:be:d4:
5d:d0:58:97:38:2b:03:00:76:e6:eb:ea:a7:31:85:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:43:8E:B7:4A:73:B0:95:C7:8A:3C:73:F7:78:CB:27:EB:AF:BE:C1
X509v3 Authority Key Identifier:
keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a1:ea:a4:2c:19:b3:96:43:e1:3d:0b:42:e0:10:75:c0:12:
09:78:34:8b:91:87:6d:53:e3:02:35:ff:4f:50:ee:32:ca:45:
f2:6f:a5:3f:84:8f:ca:6b:d9:4b:3a:02:b1:2d:47:e7:fe:83:
a1:5b:dc:bd:ff:47:82:30:1a:25:9a:0b:b7:fe:00:16:ad:bf:
fc:dd:c5:42:99:b7:1b:f8:c0:d2:9b:48:5d:7d:31:1a:4a:d1:
45:32:b3:32:bc:7b:2c:d8:7b:ae:7d:45:b3:29:42:e5:ca:36:
20:c4:e7:db:1c:28:7f:3f:2d:53:1e:38:3d:12:9c:61:24:d3:
2d:c6:5b:ba:82:18:e3:44:ac:34:87:13:d9:87:b7:f1:b8:f5:
ae:e7:45:2a:5b:09:a4:f4:ee:53:7d:dc:70:e5:26:c1:33:20:
72:53:78:5c:24:1b:dd:0a:bf:bd:6e:97:9e:ee:9e:4a:7c:66:
23:13:d6:6e:1a:30:5d:b1:8f:60:30:58:de:50:98:19:ef:54:
24:21:4a:32:b1:4d:69:ed:9b:78:47:23:57:20:d9:2b:cb:cf:
7a:b4:c8:8c:50:62:a5:57:18:c8:c6:f1:2c:50:04:50:8b:12:
33:71:1c:32:70:b7:6c:87:81:e5:c7:51:97:74:be:8b:2c:a6:
fb:cc:cd:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2OI3e4zloCSxMXEL+AKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjcxMTE1MDkxMGRjZDFiMWM3YWI1MzE0NDhiZDgzMjFm
YzFjMzYwHhcNMjYwMzAyMDAwMDQzWhcNMjYwMzAzMDAwMDQzWjAzMTEwLwYDVQQD
EyhlZTQzOGViNzRhNzNiMDk1Yzc4YTNjNzNmNzc4Y2IyN2ViYWZiZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQi/sgXkBUqvrMW7p7SpVWNRalaL
3dtYwaskty2rF6KF2/utRI3lbFW4rPp9OA4s3+QxXy5PZQcQwAnQNWZdN0UEdhVq
ln+VZVfYC6HJGibgdRnlF4XHjtiqKjO+O2WIXjp8vNYtWgpDy81MqWtJOHSrJcMP
pGBCQkOxXPPeQ7dMdBHSp6mnzw8YFMdQct2SQO93WV4L9my+Ed8THRtO7fRhWgwi
yRczkE59YMY+VuaOg7Ztqj6SRPR+BDgqTSpPUvN8wMZ9ADj5VJT4apZnPftJpPZn
lTBQ57Wx9GgfPQ3YckT3AgRuW5YPI/X/vtRd0FiXOCsDAHbm6+qnMYVxJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5DjrdKc7CVx4o8c/d4yyfrr77BMB8GA1UdIwQY
MBaAFHsnERUJENzRscerUxRIvYMh/Bw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXljUkZRa1EzTkd4eDZ0VEZFaTlneUg4SERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iMTE3NjQtYmU2NS00OWYxLWI0MmMt
YjdhOGI3YzEyZWVlLzEvZXljUkZRa1EzTkd4eDZ0VEZFaTlneUg4SERZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9iMTE3NjQtYmU2NS00OWYxLWI0MmMtYjdhOGI3YzEyZWVl
LzEvZXljUkZRa1EzTkd4eDZ0VEZFaTlneUg4SERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqHqpCwZ
s5ZD4T0LQuAQdcASCXg0i5GHbVPjAjX/T1DuMspF8m+lP4SPymvZSzoCsS1H5/6D
oVvcvf9HgjAaJZoLt/4AFq2//N3FQpm3G/jA0ptIXX0xGkrRRTKzMrx7LNh7rn1F
sylC5co2IMTn2xwofz8tUx44PRKcYSTTLcZbuoIY40SsNIcT2Ye38bj1rudFKlsJ
pPTuU33ccOUmwTMgclN4XCQb3Qq/vW6Xnu6eSnxmIxPWbhowXbGPYDBY3lCYGe9U
JCFKMrFNae2beEcjVyDZK8vPerTIjFBipVcYyMbxLFAEUIsSM3EcMnC3bIeB5cdR
l3S+iyym+8zNqg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:26 2026 by rpki-client