Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: g0UcmrUk72aIB83SQr7iael9sv1Mewe2IUiJuvQ87Y4=
Subject key identifier: 6A:59:34:51:34:83:68:C5:91:31:8A:AB:4C:8E:1A:DF:62:EB:CF:BC
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 019FA372B9E356615585EE486BF9E94F79BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 1338
Signing time: Mon 27 Jul 2026 12:00:32 +0000
Manifest this update: Mon 27 Jul 2026 12:00:32 +0000
Manifest next update: Tue 28 Jul 2026 12:00:32 +0000
Files and hashes: 1: Wfdm8iDDw0lI9V9EYGtDizSpNCQ.roa (hash: G7MUAWNXEqs1+UqwYpVfJPda6fWT1l1YlfUSrCkPCOs=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: 9ifp6Dxm8OjWtQH8BNkM2veUxfgPZDvQ2F9uLetcj/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:b9:e3:56:61:55:85:ee:48:6b:f9:e9:4f:79:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Jul 27 12:00:32 2026 GMT
Not After : Jul 28 12:00:32 2026 GMT
Subject: CN=6a593451348368c591318aab4c8e1adf62ebcfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:f8:35:4b:00:be:e0:cc:0f:7e:84:66:9f:
6f:24:ab:dd:fc:2d:1e:6c:10:0e:ed:f7:e0:4b:f4:
3d:11:2a:25:1e:35:a3:92:d2:a5:f8:3b:7c:a8:e3:
2c:c1:a6:bc:fd:b4:9e:b3:90:98:37:bd:23:6d:56:
c8:11:bd:82:3b:1d:c3:bf:25:fc:c8:95:f8:c6:e0:
04:f5:a9:68:e5:80:bb:d6:01:30:ac:42:7b:66:89:
17:5f:26:ba:36:c6:d7:fb:26:e2:da:d1:8d:16:8d:
ca:2a:05:88:40:98:96:03:64:42:06:20:a2:d3:a0:
ca:5b:5a:ca:0b:5a:3e:60:1e:3d:a4:bc:1f:32:a8:
45:c5:28:9f:fb:bf:ff:3c:7a:be:24:98:16:7d:24:
44:15:f5:9d:fe:f7:b3:5d:df:1a:46:14:67:a7:52:
ff:cb:d4:d0:dc:5b:80:9d:2e:5b:8a:d4:72:fe:0c:
33:c8:84:37:2d:d7:66:20:b1:20:b9:d2:b5:a9:ce:
8f:c8:d3:fb:75:44:7f:58:26:5a:fa:96:79:28:2b:
fc:9b:b3:36:5d:68:73:7e:37:79:09:f6:3c:46:d2:
1c:68:c5:d6:9a:df:dc:4e:f4:1f:0b:8c:0d:e2:82:
9f:a9:8f:0c:e5:17:5f:02:3e:fc:cf:4a:f2:93:6e:
cc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:59:34:51:34:83:68:C5:91:31:8A:AB:4C:8E:1A:DF:62:EB:CF:BC
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f5:34:58:c8:ed:6c:6a:2a:d5:88:03:84:30:9d:88:fa:20:
a3:19:45:e6:dd:29:98:a7:58:36:52:69:18:e5:b0:25:8a:4d:
44:84:2f:54:05:5f:da:a0:1c:35:c8:e4:34:d1:2e:56:98:fc:
f8:23:4a:8b:87:d2:9c:a9:40:06:0e:07:b8:0a:6c:c4:66:ad:
3f:50:e8:67:16:38:1a:57:e2:65:fa:19:06:1d:a3:56:82:45:
d7:fa:aa:28:c0:34:50:e5:3d:f0:ee:5f:39:e5:53:5a:d3:1a:
16:05:16:00:0b:f6:8f:a9:20:0b:ea:1f:59:01:c4:92:03:2d:
92:97:56:8d:91:93:bb:77:f3:26:89:5f:02:a3:09:b6:f8:85:
57:0e:a6:9d:48:ec:14:e3:b3:1e:17:c5:4d:d6:12:ba:22:5b:
e3:ea:07:08:f7:cf:ee:cc:18:cc:77:6b:5a:91:2f:4f:95:96:
36:28:b7:f0:8d:48:53:9f:72:fd:5a:73:8b:8f:27:9b:ea:86:
1a:bb:ba:bb:0c:79:c1:72:fe:38:00:19:d5:14:35:4b:46:0f:
a9:8d:75:ae:44:00:07:4c:3d:df:be:9b:d7:b7:ea:b6:27:e7:
d9:0c:c9:4a:02:22:ee:16:c7:3d:4f:9f:32:cd:b2:08:80:3d:
8c:f8:93:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:25:31 2026 by rpki-client