Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: HI0Bw7wRpQkeMgPck7Ixd1Z2UTeUWWxpEH3bBBaLfi4=
Subject key identifier: 6B:A8:82:A1:55:4C:28:1E:7A:5E:69:19:22:A2:19:77:8B:61:74:34
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 01A17AA866623422DACD4994A41CEE85CBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 142C
Signing time: Tue 27 Oct 2026 00:00:18 +0000
Manifest this update: Tue 27 Oct 2026 00:00:18 +0000
Manifest next update: Wed 28 Oct 2026 00:00:18 +0000
Files and hashes: 1: Wfdm8iDDw0lI9V9EYGtDizSpNCQ.roa (hash: G7MUAWNXEqs1+UqwYpVfJPda6fWT1l1YlfUSrCkPCOs=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: Vllim0EhAoVGvMsCTgcNKiNT6KOQXp9AW0286bi+DMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:66:62:34:22:da:cd:49:94:a4:1c:ee:85:cb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Oct 27 00:00:18 2026 GMT
Not After : Oct 28 00:00:18 2026 GMT
Subject: CN=6ba882a1554c281e7a5e691922a219778b617434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:21:1a:83:bc:05:b4:05:62:9b:9f:a8:b6:
2f:4e:8d:83:a2:01:c0:97:e2:f8:2c:87:db:ff:29:
b2:a0:11:f6:ea:ef:bb:fd:97:36:04:56:72:74:6a:
56:00:73:57:74:95:d1:5a:c1:b6:94:e5:5b:a1:32:
5d:9a:cd:05:1b:f0:ad:04:e7:55:d5:cf:c1:e6:c5:
b0:55:ea:07:cc:c6:7e:a8:6d:1d:9c:3a:58:04:d0:
9d:ec:f8:16:08:de:62:3b:23:eb:c6:8b:24:d0:d4:
02:33:89:30:fc:dc:44:be:f0:d4:25:ca:ca:f3:2f:
a1:19:72:8c:03:52:8f:82:5d:5f:74:db:fc:ea:59:
a6:e3:1a:c6:0b:30:69:f7:83:2b:81:36:67:00:34:
67:73:ff:cb:f4:a4:98:c5:bb:7e:b6:9d:57:e0:0b:
b8:f4:14:61:45:a0:88:44:0c:90:af:14:18:da:d6:
85:55:d7:bb:76:db:9d:5a:89:5d:d7:77:be:f8:de:
c3:9d:77:bc:80:a8:6e:9c:c5:2f:2a:d0:9e:94:c0:
ce:7f:91:a6:08:d0:7b:14:7a:df:1d:19:0b:3b:c5:
6b:a6:d5:dd:16:bc:a2:d5:8d:dd:57:cc:76:6c:3d:
d5:ca:e0:86:05:d1:52:24:12:e7:59:90:be:73:13:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A8:82:A1:55:4C:28:1E:7A:5E:69:19:22:A2:19:77:8B:61:74:34
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:97:58:92:1e:0d:24:b1:be:11:a0:fb:5d:7a:a0:f3:82:54:
d8:be:49:3b:7d:7e:61:92:5f:d7:6e:92:f3:24:1a:ae:08:94:
4b:59:9d:82:a4:15:27:7f:2d:31:b4:bf:12:34:4e:2c:2b:5f:
74:b8:65:20:57:82:f7:2d:7c:0f:ab:b7:dc:4e:f9:32:41:cf:
89:be:75:6d:71:61:b0:55:dd:ff:55:fc:e5:f8:6e:b0:01:bc:
26:03:b7:6f:64:5b:00:68:bf:90:65:a2:fb:9f:71:67:8e:48:
62:40:e4:f4:3d:b8:d7:d2:95:e3:2e:80:81:9f:96:20:11:de:
d8:82:63:4c:d7:86:00:c4:aa:7d:7c:12:44:25:c4:0a:56:71:
c2:98:ab:9c:b3:bb:20:78:dc:92:6e:d8:d7:7f:bd:44:45:53:
bc:0b:04:e5:1f:ff:19:4b:6f:b4:5a:e9:b7:23:a0:e7:31:5d:
59:25:b0:96:42:46:af:11:cf:2d:0b:67:03:18:b7:02:a8:a0:
37:81:00:11:8d:35:77:a6:34:28:5c:c1:57:4e:29:c6:6b:a6:
fe:bf:d8:fc:61:60:6f:35:97:64:22:c4:a1:bf:bf:67:1a:8f:
59:e8:b8:29:9e:ec:f8:17:b6:40:45:4d:b7:6b:51:c1:05:a3:
43:9b:82:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6qGZiNCLazUmUpBzuhcvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjZjZmNkYTM5NzE2M2Q4MzVjODk3YWRlYTkwNzFlNjFj
OGJjNGQwHhcNMjYxMDI3MDAwMDE4WhcNMjYxMDI4MDAwMDE4WjAzMTEwLwYDVQQD
Eyg2YmE4ODJhMTU1NGMyODFlN2E1ZTY5MTkyMmEyMTk3NzhiNjE3NDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD8hGoO8BbQFYpufqLYvTo2DogHA
l+L4LIfb/ymyoBH26u+7/Zc2BFZydGpWAHNXdJXRWsG2lOVboTJdms0FG/CtBOdV
1c/B5sWwVeoHzMZ+qG0dnDpYBNCd7PgWCN5iOyPrxosk0NQCM4kw/NxEvvDUJcrK
8y+hGXKMA1KPgl1fdNv86lmm4xrGCzBp94MrgTZnADRnc//L9KSYxbt+tp1X4Au4
9BRhRaCIRAyQrxQY2taFVde7dtudWold13e++N7DnXe8gKhunMUvKtCelMDOf5Gm
CNB7FHrfHRkLO8VrptXdFryi1Y3dV8x2bD3VyuCGBdFSJBLnWZC+cxOCjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuogqFVTCgeel5pGSKiGXeLYXQ0MB8GA1UdIwQY
MBaAFHsmz82jlxY9g1yJet6pBx5hyLxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEt
NmNkNTFjODRjMDE1LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEtNmNkNTFjODRjMDE1
LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJdYkh4N
JLG+EaD7XXqg84JU2L5JO31+YZJf126S8yQargiUS1mdgqQVJ38tMbS/EjROLCtf
dLhlIFeC9y18D6u33E75MkHPib51bXFhsFXd/1X85fhusAG8JgO3b2RbAGi/kGWi
+59xZ45IYkDk9D2419KV4y6AgZ+WIBHe2IJjTNeGAMSqfXwSRCXEClZxwpirnLO7
IHjckm7Y13+9REVTvAsE5R//GUtvtFrptyOg5zFdWSWwlkJGrxHPLQtnAxi3Aqig
N4EAEY01d6Y0KFzBV04pxmum/r/Y/GFgbzWXZCLEob+/ZxqPWei4KZ7s+Be2QEVN
t2tRwQWjQ5uC2g==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:59:05 2026 by rpki-client