Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File: ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier: nDhhcI21riTJCSdCtSpgyHQZDMMT7RXsf1pLbPP/CL4=
Subject key identifier: 49:45:E9:B5:8E:8A:0F:3B:BC:63:5C:6D:83:34:8B:D7:70:70:0F:BD
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 01A11ED2921262EE7786133EED442226D395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number: 1AAC
Signing time: Fri 09 Oct 2026 04:01:18 +0000
Manifest this update: Fri 09 Oct 2026 04:01:18 +0000
Manifest next update: Sat 10 Oct 2026 04:01:18 +0000
Files and hashes: 1: NcDn26l6X1jaA0rTBfljUSQkQrA.roa (hash: DBP3tSVruTN+BPgGFJB1Pkmv6KFos1kOIWJAln1+ovw=)
2: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: Kf2jpl2gGIKO5SD0oRGruRmm3xwqvgpeIuLmGDDzSqs=)
3: et0olEFrB1y2vEuy1NWpl0biftA.roa (hash: o7zVoM3aaUFP3OzR2+EuOIiIDki9aymtbkBZVSrLD3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:d2:92:12:62:ee:77:86:13:3e:ed:44:22:26:d3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Oct 9 04:01:18 2026 GMT
Not After : Oct 10 04:01:18 2026 GMT
Subject: CN=4945e9b58e8a0f3bbc635c6d83348bd770700fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:0e:12:d0:53:81:04:ae:30:80:b1:29:a5:
51:fb:28:7f:d1:e1:b8:4b:48:36:45:a7:7d:b0:ad:
59:18:da:cc:98:d4:2b:55:85:67:e6:af:28:b3:bd:
68:bd:81:c5:ea:d7:63:39:ff:16:6a:c6:71:7d:c8:
0a:0e:63:67:53:87:4e:44:8e:dc:db:92:a1:04:d4:
7b:03:ab:a2:dc:5d:04:4d:31:54:c0:e3:86:0a:77:
85:17:3e:8c:34:be:81:a8:03:35:ee:de:4e:ce:98:
fe:ae:08:67:10:7c:c0:bb:ac:83:69:3f:dd:c5:90:
f4:37:b8:a2:9f:03:60:02:72:bc:ca:4b:80:c0:27:
3f:cb:74:9d:20:b9:fa:f0:59:ec:cb:19:38:2b:cd:
ee:c9:7a:07:ed:55:fe:81:65:8d:dc:9a:c4:a9:f1:
7d:fa:4f:88:d0:a6:94:ad:5c:30:d8:20:84:8f:e2:
85:30:ae:7a:ce:7e:16:4f:a8:c7:13:78:8d:c5:33:
0b:54:38:4d:9e:ee:7a:5c:49:95:cb:f7:ad:47:a3:
e9:71:a6:d6:82:a9:5e:44:e1:24:a7:b4:19:1e:6f:
fa:17:85:8b:56:81:8c:5e:ee:22:f6:0c:68:15:c0:
75:45:0a:75:45:ab:6f:28:b2:21:2d:ff:c2:26:2b:
4b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:45:E9:B5:8E:8A:0F:3B:BC:63:5C:6D:83:34:8B:D7:70:70:0F:BD
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dd:80:d2:48:cb:7b:b2:37:3c:e5:18:d4:02:b4:f3:5a:0f:
81:b5:af:0a:dd:e7:13:58:3b:09:0d:f9:ee:96:22:66:97:5d:
e7:2f:20:54:f5:b2:e4:56:98:61:03:a2:2f:07:bc:58:24:a1:
7f:1b:1b:f8:c2:5e:b8:21:de:99:dd:79:54:ae:2a:a9:ac:3e:
4d:72:2b:20:26:e0:f5:6a:bd:39:70:ff:2b:97:f5:aa:01:5d:
5b:8c:b9:15:b5:dc:a2:11:f5:53:e1:04:b6:c1:0a:84:f6:01:
58:c4:a6:68:7f:48:1e:88:6d:fa:01:fe:eb:6a:55:7f:1c:a6:
0d:83:e9:1f:9f:9c:e2:43:86:6b:d6:82:b5:fa:21:11:95:3a:
ed:5c:bf:15:cf:c7:26:dd:d1:e8:f7:d2:3f:2e:94:50:70:c0:
88:6f:5d:59:8e:1c:f2:2b:4f:90:cf:b9:1f:ca:3e:6f:6c:24:
f0:c0:07:43:59:7e:ad:b1:29:b7:27:1d:c9:82:74:77:a1:d8:
99:b7:c7:12:2d:d5:35:5d:81:57:65:b3:2c:0a:79:65:20:62:
78:fb:f1:70:47:10:de:16:b3:32:e0:be:5b:0d:17:52:75:51:
51:47:c6:94:51:89:12:73:0c:33:92:72:4e:8e:47:04:38:05:
35:f9:86:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEe0pISYu53hhM+7UQiJtOVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YjUxMzRiMTFmOTQwOTExZjBmZjMxNWM5NDhkYWE1M2Y3
MzJlZTAwHhcNMjYxMDA5MDQwMTE4WhcNMjYxMDEwMDQwMTE4WjAzMTEwLwYDVQQD
Eyg0OTQ1ZTliNThlOGEwZjNiYmM2MzVjNmQ4MzM0OGJkNzcwNzAwZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnMOEtBTgQSuMICxKaVR+yh/0eG4
S0g2Rad9sK1ZGNrMmNQrVYVn5q8os71ovYHF6tdjOf8WasZxfcgKDmNnU4dORI7c
25KhBNR7A6ui3F0ETTFUwOOGCneFFz6MNL6BqAM17t5Ozpj+rghnEHzAu6yDaT/d
xZD0N7iinwNgAnK8ykuAwCc/y3SdILn68Fnsyxk4K83uyXoH7VX+gWWN3JrEqfF9
+k+I0KaUrVww2CCEj+KFMK56zn4WT6jHE3iNxTMLVDhNnu56XEmVy/etR6PpcabW
gqleROEkp7QZHm/6F4WLVoGMXu4i9gxoFcB1RQp1RatvKLIhLf/CJitL9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElF6bWOig87vGNcbYM0i9dwcA+9MB8GA1UdIwQY
MBaAFHm1E0sR+UCRHw/zFclI2qU/cy7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYt
Y2VjMjJlYTc5NTEzLzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYtY2VjMjJlYTc5NTEz
LzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt2A0kjL
e7I3POUY1AK081oPgbWvCt3nE1g7CQ357pYiZpdd5y8gVPWy5FaYYQOiLwe8WCSh
fxsb+MJeuCHemd15VK4qqaw+TXIrICbg9Wq9OXD/K5f1qgFdW4y5FbXcohH1U+EE
tsEKhPYBWMSmaH9IHoht+gH+62pVfxymDYPpH5+c4kOGa9aCtfohEZU67Vy/Fc/H
Jt3R6PfSPy6UUHDAiG9dWY4c8itPkM+5H8o+b2wk8MAHQ1l+rbEptycdyYJ0d6HY
mbfHEi3VNV2BV2WzLAp5ZSBiePvxcEcQ3hazMuC+Ww0XUnVRUUfGlFGJEnMMM5Jy
To5HBDgFNfmGig==
-----END CERTIFICATE-----
Generated at Fri Oct 9 09:53:34 2026 by rpki-client