Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
File: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft (raw, json)
Hash identifier: 41DWX45i/jn0hYnokcl3ZpYi7Yyd0i2lUuzf6y41K4U=
Subject key identifier: 10:F2:D9:93:76:67:8E:33:97:00:BA:5F:BD:2A:98:A0:71:E5:E9:8B
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Certificate issuer: /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial: 019A1F8870A873F09B388D603415A43FF032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
Manifest number: 013D
Signing time: Sun 26 Oct 2025 08:00:26 +0000
Manifest this update: Sun 26 Oct 2025 08:00:26 +0000
Manifest next update: Mon 27 Oct 2025 08:00:26 +0000
Files and hashes: 1: 07Dre1kZ1oyyZdumPkKx6qPgfFY.roa (hash: RR36HXtAKDeJVmCbbh+1KLLcoMylQhGqmF8IKuf7xSg=)
2: L9P5jce1CFUQf8kDcRnSKMNRg6Y.roa (hash: y2cI0gHx5iyLsjT9G/msQppoT5m659vB4r+3Psa3q7U=)
3: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl (hash: WQIFEPQq7sPNN+3OkgqzaS0yU8mPrkfgEZeq68QUKco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:70:a8:73:f0:9b:38:8d:60:34:15:a4:3f:f0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Validity
Not Before: Oct 26 08:00:26 2025 GMT
Not After : Oct 27 08:00:26 2025 GMT
Subject: CN=10f2d99376678e339700ba5fbd2a98a071e5e98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:07:23:5b:f8:49:70:91:68:39:ed:20:d9:51:
48:57:9e:b2:6d:27:bd:e2:92:79:21:d9:8a:1f:e8:
7e:74:d3:61:3b:d9:a1:4b:32:2a:42:6b:14:3b:93:
5e:99:79:65:a3:3e:50:8e:75:19:ef:18:70:d7:2e:
91:b0:ac:a7:69:17:e8:bf:a3:7c:e8:29:4a:b5:da:
87:55:d8:51:54:8a:76:2a:98:76:57:be:14:6c:96:
e6:6b:8f:a5:10:dc:97:a3:6c:71:06:78:5f:53:07:
d3:b7:5d:58:9b:40:b3:88:79:07:e1:a9:d7:f2:d5:
12:a1:72:41:95:e0:03:09:99:5e:c8:78:d9:62:21:
30:24:d2:5f:6f:27:52:7a:5f:95:c5:41:19:49:9b:
98:42:8f:f7:02:92:99:d9:63:f1:9f:14:63:cc:07:
ba:aa:91:c3:a1:f3:ea:9b:06:59:f7:61:78:c4:c7:
dc:69:d5:0b:13:80:14:83:44:04:09:22:5b:e5:96:
98:7d:97:09:a1:b8:ec:1c:af:8d:ea:e4:85:a3:dc:
9b:b6:80:f6:f3:84:81:2c:05:9e:9e:d3:7e:78:58:
45:f8:85:b1:5d:87:42:e1:68:ab:69:9a:5e:a6:ec:
80:19:8c:5c:3f:e1:83:a3:7b:44:99:ea:82:2b:f2:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F2:D9:93:76:67:8E:33:97:00:BA:5F:BD:2A:98:A0:71:E5:E9:8B
X509v3 Authority Key Identifier:
keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:39:cc:0a:d7:ae:97:bd:80:06:8f:8a:72:e8:c4:22:50:ee:
6c:9b:67:25:0b:03:91:e9:a9:1f:00:1d:94:94:4c:9a:ee:c7:
33:37:b9:1c:08:de:b7:2a:83:71:74:ff:9a:0e:7f:cc:b4:98:
9e:6f:ea:16:ef:e1:14:d5:df:7c:63:8f:ab:2f:70:b6:49:a7:
ea:02:3f:c7:dc:73:53:e2:fd:24:31:2a:f6:6e:eb:53:b0:74:
32:4f:db:99:31:49:3d:6b:cc:1e:b2:c4:8c:5a:1b:74:1c:de:
7f:70:1d:af:42:7f:a5:a1:67:50:a4:6f:e1:75:16:6f:29:d3:
40:97:a1:cf:73:d2:f5:2a:a8:d5:06:c6:37:5c:09:cf:71:66:
86:05:90:2b:48:5e:e9:a2:a5:d0:41:30:41:84:11:43:58:59:
f0:c6:d3:03:0c:7a:11:b0:8b:76:9c:90:b0:46:3e:37:80:30:
db:a2:60:f6:e8:9f:2c:0e:76:1a:32:8a:36:f9:b7:b9:b2:27:
dd:91:20:3d:35:46:f6:8c:5d:83:d5:51:c1:fb:0f:45:51:2e:
91:c4:2b:9e:51:90:d0:57:74:df:11:80:a8:c0:bf:d6:97:29:
36:b4:50:f2:b7:41:28:3f:8a:82:95:eb:f6:35:b4:dd:c9:77:
0e:c4:34:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofiHCoc/CbOI1gNBWkP/AyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMjZjNDZkMGU1ZmZmMDQzN2NiNjk3ODNmZTM5OWYxOTAz
MjAwZDUwHhcNMjUxMDI2MDgwMDI2WhcNMjUxMDI3MDgwMDI2WjAzMTEwLwYDVQQD
EygxMGYyZDk5Mzc2Njc4ZTMzOTcwMGJhNWZiZDJhOThhMDcxZTVlOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAcjW/hJcJFoOe0g2VFIV56ybSe9
4pJ5IdmKH+h+dNNhO9mhSzIqQmsUO5NemXlloz5QjnUZ7xhw1y6RsKynaRfov6N8
6ClKtdqHVdhRVIp2Kph2V74UbJbma4+lENyXo2xxBnhfUwfTt11Ym0CziHkH4anX
8tUSoXJBleADCZleyHjZYiEwJNJfbydSel+VxUEZSZuYQo/3ApKZ2WPxnxRjzAe6
qpHDofPqmwZZ92F4xMfcadULE4AUg0QECSJb5ZaYfZcJobjsHK+N6uSFo9ybtoD2
84SBLAWentN+eFhF+IWxXYdC4WiraZpepuyAGYxcP+GDo3tEmeqCK/LxjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDy2ZN2Z44zlwC6X70qmKBx5emLMB8GA1UdIwQY
MBaAFHsmxG0OX/8EN8tpeD/jmfGQMgDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXliRWJRNWZfd1EzeTJsNFAtT1o4WkF5QU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YWIwZWYtMWFlYS00ZTczLWFkZDct
NzRkYjlhMjlhNzNjLzEvZXliRWJRNWZfd1EzeTJsNFAtT1o4WkF5QU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82YWIwZWYtMWFlYS00ZTczLWFkZDctNzRkYjlhMjlhNzNj
LzEvZXliRWJRNWZfd1EzeTJsNFAtT1o4WkF5QU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTnMCteu
l72ABo+KcujEIlDubJtnJQsDkempHwAdlJRMmu7HMze5HAjetyqDcXT/mg5/zLSY
nm/qFu/hFNXffGOPqy9wtkmn6gI/x9xzU+L9JDEq9m7rU7B0Mk/bmTFJPWvMHrLE
jFobdBzef3Adr0J/paFnUKRv4XUWbynTQJehz3PS9Sqo1QbGN1wJz3FmhgWQK0he
6aKl0EEwQYQRQ1hZ8MbTAwx6EbCLdpyQsEY+N4Aw26Jg9uifLA52GjKKNvm3ubIn
3ZEgPTVG9oxdg9VRwfsPRVEukcQrnlGQ0Fd03xGAqMC/1pcpNrRQ8rdBKD+KgpXr
9jW03cl3DsQ0jQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 16:16:40 2025 by rpki-client