Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: LzYd4cVK7sGOddzQNWMG0RSIx2HdRoC2gFBgTv7NWbg=
Subject key identifier: D2:DF:0F:08:69:8C:17:1F:77:09:AD:6E:6E:C1:07:DF:7F:75:F5:68
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 019D37890FB5F613E448F8C7CBD0EA4EE507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 11F7
Signing time: Sun 29 Mar 2026 03:00:22 +0000
Manifest this update: Sun 29 Mar 2026 03:00:22 +0000
Manifest next update: Mon 30 Mar 2026 03:00:22 +0000
Files and hashes: 1: Wfdm8iDDw0lI9V9EYGtDizSpNCQ.roa (hash: G7MUAWNXEqs1+UqwYpVfJPda6fWT1l1YlfUSrCkPCOs=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: vr2jxjgm+ZV9XSh3HY/Lp5KVoddp0xi7pR+DpjjDUDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0f:b5:f6:13:e4:48:f8:c7:cb:d0:ea:4e:e5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Mar 29 03:00:22 2026 GMT
Not After : Mar 30 03:00:22 2026 GMT
Subject: CN=d2df0f08698c171f7709ad6e6ec107df7f75f568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:b9:ac:17:4e:6b:cc:6c:92:3a:38:36:32:
08:e7:fd:4e:6a:76:24:1c:d4:27:50:45:9b:11:86:
4f:d3:a9:cf:ce:05:09:bb:e5:1b:75:94:d9:84:26:
94:14:cf:e5:5b:3e:34:e7:06:a1:26:af:99:c9:c4:
89:3f:c4:06:46:de:18:c8:91:d5:a9:2b:96:77:dd:
a2:b7:ae:36:be:14:03:38:fc:17:d6:32:3d:dc:19:
fd:4e:21:b8:3f:fa:7f:3e:8c:ec:c8:7b:2b:e1:ec:
96:0f:e2:d9:95:a1:38:8c:b3:1b:00:b1:a8:ad:e0:
77:94:ef:af:ac:65:4a:c2:1d:4c:7d:96:42:5b:1e:
76:36:dd:c6:00:29:35:37:03:f9:30:05:00:8c:8b:
25:b3:39:20:8e:2f:ce:dc:21:44:e5:c2:43:8a:35:
d6:c3:fe:04:f3:66:17:31:93:8c:ae:d8:d1:a8:48:
45:ec:39:f9:12:0d:86:58:af:6e:a2:91:0d:37:ab:
1b:2f:25:8d:5b:4c:fe:58:73:ef:58:48:0b:d4:11:
e3:fa:4c:6d:5d:fe:3e:d8:4d:e5:51:79:b0:0f:17:
3a:20:fe:c5:6e:20:3f:b3:62:c0:d6:05:25:be:d0:
4d:47:29:49:a1:e0:97:94:2f:90:7a:c9:d3:3e:89:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DF:0F:08:69:8C:17:1F:77:09:AD:6E:6E:C1:07:DF:7F:75:F5:68
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c4:73:68:18:86:ec:85:07:4a:1c:19:74:7a:3c:20:90:21:
5b:df:dd:71:0b:50:4b:88:e0:39:07:d4:82:09:d0:06:58:3c:
a5:d2:89:33:05:32:58:42:02:c5:5b:8d:3e:2a:2e:13:0c:04:
db:53:c0:cf:7a:1e:ea:0d:5e:ad:54:44:cc:6d:24:c8:f5:13:
37:af:0d:da:b8:0b:63:04:70:61:76:89:d4:85:05:8f:be:17:
d6:ba:52:ae:a3:92:88:fb:38:b1:d0:a2:5b:42:30:f2:1a:f2:
b5:ed:05:bc:2c:d0:dd:f7:ea:a1:44:df:54:1c:44:55:0b:bc:
49:07:60:4a:f3:54:b3:74:17:ac:49:22:6b:aa:33:f9:4b:98:
12:1b:71:02:85:ba:51:a2:b5:19:db:20:bf:99:2e:5c:a4:c6:
a6:de:d4:cc:ff:43:93:2a:53:d3:34:9f:02:87:ae:da:67:65:
97:2b:ff:9c:85:43:f7:74:9b:b9:f0:41:7b:c4:1c:68:6d:35:
55:a6:74:f7:f8:82:34:2a:4b:b4:b3:43:b3:41:aa:b4:25:4a:
df:43:91:38:1d:32:ec:7c:40:15:2e:92:e7:31:9e:71:d3:86:
26:c4:02:4f:13:9a:10:03:e5:bd:90:45:14:73:56:76:d9:9e:
45:97:64:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:49 2026 by rpki-client