Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json)
Hash identifier: lOfc9AdahL0HTXvbPFS/qW4K0zTkgBqdLBMk6v36T7o=
Subject key identifier: FF:C9:84:52:D5:7D:69:FD:14:42:B5:27:9E:06:84:7F:18:E7:CF:5D
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 01A0CCD9D3F313AA409B71EF4611C45FACC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
Manifest number: 13D2
Signing time: Wed 23 Sep 2026 06:00:22 +0000
Manifest this update: Wed 23 Sep 2026 06:00:22 +0000
Manifest next update: Thu 24 Sep 2026 06:00:22 +0000
Files and hashes: 1: Wfdm8iDDw0lI9V9EYGtDizSpNCQ.roa (hash: G7MUAWNXEqs1+UqwYpVfJPda6fWT1l1YlfUSrCkPCOs=)
2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: UCQINGjlt8mpkRd5LaItLg1kYvf1aXdHUDTYNCSmoN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:d3:f3:13:aa:40:9b:71:ef:46:11:c4:5f:ac:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Sep 23 06:00:22 2026 GMT
Not After : Sep 24 06:00:22 2026 GMT
Subject: CN=ffc98452d57d69fd1442b5279e06847f18e7cf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:f4:b6:1e:ec:06:27:9e:2c:92:2a:04:d5:
b0:3d:58:50:56:c7:45:9c:b3:9b:a5:73:18:af:06:
b2:78:b2:a5:a4:0e:4d:25:e9:5c:c6:38:e6:1f:0f:
a5:70:39:00:80:7c:47:b5:8e:77:d3:61:91:28:5a:
31:2c:00:3f:fc:5c:0b:ec:32:64:ca:ad:b7:b1:0c:
a1:5a:6a:89:7e:6e:c4:df:35:54:c3:4c:ab:e2:b0:
74:68:57:7e:99:ea:f6:3a:b8:de:0e:4f:dc:ad:c7:
fc:62:02:a4:d1:6b:87:d3:09:35:e1:03:bf:19:7e:
a0:69:ac:3d:3e:22:9c:66:a8:59:83:0b:c5:6f:8b:
f6:41:7e:64:80:47:32:a7:e8:d8:23:b1:64:1f:08:
84:3c:5c:ae:76:f4:ff:0b:48:50:2f:de:80:cb:43:
63:51:46:0a:c3:4f:67:0e:14:90:17:10:73:62:87:
3d:d0:79:95:94:19:a6:97:a7:c9:ef:c5:53:d6:99:
f7:e0:6d:67:d1:62:af:a8:c6:a6:98:62:aa:fe:48:
60:eb:f4:c0:c8:77:2c:b3:c3:0d:d5:43:31:8d:62:
78:0c:df:9f:7b:03:3e:74:bb:56:0f:05:4f:c4:49:
44:ba:fc:5a:a1:e8:16:80:2e:8e:2f:85:b9:c1:c6:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C9:84:52:D5:7D:69:FD:14:42:B5:27:9E:06:84:7F:18:E7:CF:5D
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a5:0c:30:e8:00:0c:6f:cc:cd:ab:23:40:80:e8:40:f3:4a:
2b:79:b5:34:f2:7d:ad:9c:13:d7:7f:a1:cd:fa:7c:77:c9:cc:
a3:87:58:c3:a9:0d:75:0b:9d:c7:15:a1:0c:60:77:7d:ca:38:
a9:e3:aa:73:d2:ac:de:52:9d:90:62:d1:38:52:a2:62:16:1e:
1d:bb:98:47:e7:d9:df:c8:d3:9b:d6:f5:06:f8:ef:13:36:6f:
6e:67:1b:7c:1e:ed:5e:95:03:22:22:d1:69:ba:c7:01:89:75:
94:41:ad:c6:f5:c1:b8:3b:84:0f:60:6f:f5:95:4a:55:8d:80:
28:6c:29:fd:51:12:dc:70:ee:af:90:ed:6e:31:69:bc:75:e5:
cd:4c:39:a6:64:9d:ce:0e:93:62:7b:77:db:d7:9e:61:24:8b:
53:bc:62:47:df:9b:a8:01:ac:87:5e:ea:2d:94:b1:7a:16:20:
f4:f8:d6:f3:5e:4c:3d:45:42:2a:14:96:11:50:b4:60:ca:67:
9c:6f:ba:47:67:78:3b:2b:89:d2:26:65:c0:72:db:49:20:8e:
e2:2b:da:b1:b7:ee:26:41:69:fa:d6:4d:c5:a0:9d:5a:4e:b9:
7e:88:dc:a3:58:35:b1:91:25:c6:47:e5:71:99:1a:2e:fa:50:
ca:cd:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:04:06 2026 by rpki-client