Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: kLXKJTxO8jlLB29KBaaUvs0ucTz6eOU+2TETPPHOSko=
Subject key identifier: 69:F5:49:6E:81:5C:8E:5F:62:98:40:9F:12:73:89:D1:73:9C:B7:B3
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 01A164C6420C5369E0629E420E8FC23CD59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 1AB9
Signing time: Thu 22 Oct 2026 18:01:16 +0000
Manifest this update: Thu 22 Oct 2026 18:01:16 +0000
Manifest next update: Fri 23 Oct 2026 18:01:16 +0000
Files and hashes: 1: QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa (hash: KF0eVyAAEY8VGFQ1+W9WFibrhH45a/vXshpeDiUAhF0=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: /WWaflKffAR5G5edfEQkUVR2OfQE99ZiQ/Co2hmUL+8=)
3: ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa (hash: eyPv8WnShqVImAMmncYrIFp/3E9eBCBd7q2DigUVUPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:c6:42:0c:53:69:e0:62:9e:42:0e:8f:c2:3c:d5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Oct 22 18:01:16 2026 GMT
Not After : Oct 23 18:01:16 2026 GMT
Subject: CN=69f5496e815c8e5f6298409f127389d1739cb7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:47:ea:79:40:28:90:bc:45:74:00:e7:93:
a1:76:0e:d4:31:c6:7f:8f:43:9f:89:3c:53:63:7b:
9f:3f:3c:91:d7:47:54:84:2e:c0:49:0c:df:4e:9e:
6b:2b:c6:91:8d:2c:cd:d0:8b:ff:a2:39:87:8d:82:
f5:99:d4:3e:81:fe:32:b8:76:24:ec:f3:99:74:eb:
53:c6:ca:57:a3:8e:69:e8:95:2b:8f:08:0b:3a:a9:
27:c4:de:53:0a:ed:bb:e2:92:42:11:96:70:a2:c7:
e4:2d:cc:00:fb:d3:71:f4:dc:f3:c6:92:fa:7e:22:
ba:b1:e7:89:ed:b7:7a:d9:d9:5b:f2:33:57:c9:f3:
87:11:ce:ff:05:71:15:2c:77:0e:a3:f3:ca:4d:43:
1e:53:e4:ea:94:26:7e:12:3f:d5:c7:bb:2f:05:fe:
be:b8:96:7e:27:76:5d:5b:aa:3c:06:6c:31:44:ec:
42:51:ef:84:a9:ae:e6:88:d6:18:2c:4f:e9:d0:a7:
f5:9a:fc:79:db:85:4d:b4:70:5b:22:3c:ce:40:77:
45:5e:04:ab:06:d9:31:d7:5f:5e:1b:76:2e:73:79:
e3:a6:a7:8b:2b:8e:d7:85:ec:1b:5f:e5:94:35:5b:
67:86:dd:da:57:b1:40:94:a2:60:6d:d0:97:2e:df:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F5:49:6E:81:5C:8E:5F:62:98:40:9F:12:73:89:D1:73:9C:B7:B3
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8a:c8:66:42:2f:72:2e:09:78:fb:c2:ec:48:9d:00:fc:29:
84:05:0e:14:20:70:61:3a:29:0f:7e:bd:b4:c7:25:2b:93:b9:
b7:2e:39:60:8b:33:21:f3:7e:eb:bc:58:1d:2d:59:59:68:97:
83:a6:30:b0:5c:e2:29:60:64:fe:fc:91:25:e8:fe:a7:44:92:
73:ce:6c:8f:26:e8:43:a4:ef:7e:93:60:21:fe:7d:82:1c:40:
24:d8:3e:b3:6c:45:7d:88:3b:7d:62:86:36:93:2d:d3:20:64:
bb:86:ac:d9:b3:7e:a3:07:7f:72:78:a5:58:48:35:86:88:1b:
0b:2b:8c:03:49:d5:55:3e:b7:22:09:65:60:3c:5e:a3:1c:1a:
89:c3:50:d9:51:35:21:5b:11:f2:7b:a9:72:c3:e1:1f:ad:d2:
81:77:06:b4:c8:de:01:e3:7d:51:c8:27:9a:93:6d:22:a7:37:
e0:f3:be:b9:dd:ac:4f:a5:be:3a:84:69:39:40:53:c2:ce:92:
26:d3:ab:d0:0f:92:a1:0d:db:d1:48:4b:1d:8e:f3:de:ee:36:
18:37:e7:c8:51:d4:1e:87:79:aa:3c:8d:8b:8e:54:44:fa:ce:
a0:17:00:ce:47:3e:ff:0b:d7:8e:ad:6b:56:10:c7:41:5f:f1:
fe:1b:01:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFkxkIMU2ngYp5CDo/CPNWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMmE4YWMzMDI4YjcwOTExY2I2MTExZmZkYTNhMmVmZTU1
ODg2MmQwHhcNMjYxMDIyMTgwMTE2WhcNMjYxMDIzMTgwMTE2WjAzMTEwLwYDVQQD
Eyg2OWY1NDk2ZTgxNWM4ZTVmNjI5ODQwOWYxMjczODlkMTczOWNiN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ5H6nlAKJC8RXQA55Ohdg7UMcZ/
j0OfiTxTY3ufPzyR10dUhC7ASQzfTp5rK8aRjSzN0Iv/ojmHjYL1mdQ+gf4yuHYk
7POZdOtTxspXo45p6JUrjwgLOqknxN5TCu274pJCEZZwosfkLcwA+9Nx9NzzxpL6
fiK6seeJ7bd62dlb8jNXyfOHEc7/BXEVLHcOo/PKTUMeU+TqlCZ+Ej/Vx7svBf6+
uJZ+J3ZdW6o8BmwxROxCUe+Eqa7miNYYLE/p0Kf1mvx524VNtHBbIjzOQHdFXgSr
Btkx119eG3Yuc3njpqeLK47XhewbX+WUNVtnht3aV7FAlKJgbdCXLt8cqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn1SW6BXI5fYphAnxJzidFznLezMB8GA1UdIwQY
MBaAFHsqisMCi3CRHLYRH/2jou/lWIYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEt
ODU4ZGQxYjE2MTdmLzEvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi84NjcyMDktZDM1Zi00OWM0LWE2ZWEtODU4ZGQxYjE2MTdm
LzEvZXlxS3d3S0xjSkVjdGhFZl9hT2k3LVZZaGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIrIZkIv
ci4JePvC7EidAPwphAUOFCBwYTopD369tMclK5O5ty45YIszIfN+67xYHS1ZWWiX
g6YwsFziKWBk/vyRJej+p0SSc85sjyboQ6TvfpNgIf59ghxAJNg+s2xFfYg7fWKG
NpMt0yBku4as2bN+owd/cnilWEg1hogbCyuMA0nVVT63IgllYDxeoxwaicNQ2VE1
IVsR8nupcsPhH63SgXcGtMjeAeN9UcgnmpNtIqc34PO+ud2sT6W+OoRpOUBTws6S
JtOr0A+SoQ3b0UhLHY7z3u42GDfnyFHUHod5qjyNi45URPrOoBcAzkc+/wvXjq1r
VhDHQV/x/hsB7Q==
-----END CERTIFICATE-----
Generated at Fri Oct 23 02:35:52 2026 by rpki-client