Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File: ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier: I8CEL3TGxQP4OeLkafoh2ZdSqgHsqOsOKU8bISvZtno=
Subject key identifier: 1A:AA:92:17:D9:07:ED:89:BA:30:56:B8:F5:65:18:35:2C:F8:FC:16
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 019F1378954683363508A5B4E43B31EBD37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number: 199D
Signing time: Mon 29 Jun 2026 13:01:37 +0000
Manifest this update: Mon 29 Jun 2026 13:01:37 +0000
Manifest next update: Tue 30 Jun 2026 13:01:37 +0000
Files and hashes: 1: NcDn26l6X1jaA0rTBfljUSQkQrA.roa (hash: DBP3tSVruTN+BPgGFJB1Pkmv6KFos1kOIWJAln1+ovw=)
2: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: LOE73iiHIT8P9Q9hM4xH0jjPk9Cg5zncgQBaOa4smOw=)
3: et0olEFrB1y2vEuy1NWpl0biftA.roa (hash: o7zVoM3aaUFP3OzR2+EuOIiIDki9aymtbkBZVSrLD3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:78:95:46:83:36:35:08:a5:b4:e4:3b:31:eb:d3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Jun 29 13:01:37 2026 GMT
Not After : Jun 30 13:01:37 2026 GMT
Subject: CN=1aaa9217d907ed89ba3056b8f56518352cf8fc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:ca:4c:cd:0e:8f:bf:d3:0e:c8:3c:43:0d:
38:33:bb:3f:91:e9:f9:76:ac:00:71:70:64:89:8c:
41:d9:7a:4f:f8:fe:18:05:4a:26:19:cb:15:97:b0:
2c:2e:7d:c3:e1:04:10:ea:6e:3c:72:03:ff:72:91:
e2:ab:c9:da:f2:60:71:0a:a8:9a:44:a7:a1:0d:2c:
23:0b:e8:61:6f:5b:5a:3b:e6:fe:99:05:7b:d7:51:
0c:62:7d:e6:d3:75:56:48:aa:d2:a1:df:4e:cd:da:
e4:ac:6f:9b:1e:e9:40:ef:4f:ec:bf:23:e1:b3:4e:
75:4b:03:bc:09:f4:08:40:96:76:60:18:3f:8e:d9:
b9:84:7c:3f:06:a1:fe:1f:76:0d:ca:e7:02:1a:a2:
ff:9d:93:85:04:65:63:6f:93:24:59:fd:5d:57:68:
b1:c3:ee:9a:28:b4:88:e0:f4:38:a1:5b:da:9c:fd:
42:0f:dc:52:61:82:0a:93:1c:2f:2d:e8:62:8b:66:
81:14:fa:ee:d0:ce:a2:e7:62:96:7b:1c:78:af:47:
b9:67:ae:90:fc:b4:67:45:f7:f5:54:d7:e3:22:c2:
6c:d4:51:70:64:5b:0e:0a:75:0a:8f:85:93:e0:66:
02:c7:0f:71:b4:a7:5b:05:00:2f:53:61:fe:60:b1:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AA:92:17:D9:07:ED:89:BA:30:56:B8:F5:65:18:35:2C:F8:FC:16
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:1b:9c:e0:40:18:a9:8a:fb:32:6c:1c:84:eb:96:08:dc:
84:f4:70:70:e4:ef:66:28:e9:f6:2a:10:43:f4:05:79:9c:fd:
4b:e3:cc:d1:6b:dd:a0:a4:c9:6b:41:d6:db:9c:40:8c:8d:76:
65:b4:07:1f:13:b4:b4:bc:4a:91:14:03:0e:0f:17:40:3e:4b:
98:4a:96:9a:58:42:55:51:93:78:31:52:c0:36:56:47:e9:44:
43:7d:51:7f:99:94:47:2d:5d:47:2a:f3:b7:d5:18:3c:45:36:
0b:b4:8e:0c:d0:e3:e2:b6:fc:8a:ae:dd:0b:cf:0a:c2:58:35:
6f:f1:77:ce:9e:ff:23:c0:0e:dd:3a:43:a6:a2:ca:25:53:77:
61:da:11:3d:d1:49:f3:15:ec:44:5c:f1:2c:3d:51:a3:f5:19:
e5:17:8b:d4:4d:58:7c:cc:ff:f5:b6:f1:c2:14:54:c9:58:88:
c0:ea:47:b4:6f:6e:29:20:17:76:3a:d2:ca:7d:43:ec:8d:f6:
aa:e0:13:5a:d7:1e:2c:d7:f8:cb:2c:f3:92:33:db:29:b9:04:
ff:9f:c5:b6:6e:bb:8f:51:af:25:88:32:6a:9f:c3:5a:56:3c:
a8:94:3e:ca:38:ac:97:35:95:25:ae:51:a1:93:f9:7a:c8:0e:
69:b6:df:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:37:36 2026 by rpki-client