Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.mft
File: EiYRihMr9PhYuZ6ffiLV7zFEFJ0.mft (raw, json)
Hash identifier: bTncWpZXCBFEbAHCCZnXoFkg3au+HEPDBkErBzgIjCM=
Subject key identifier: 8C:F1:42:B2:8F:62:03:4B:15:17:5B:58:37:84:64:71:AE:33:6E:CF
Authority key identifier: 12:26:11:8A:13:2B:F4:F8:58:B9:9E:9F:7E:22:D5:EF:31:44:14:9D
Certificate issuer: /CN=1226118a132bf4f858b99e9f7e22d5ef3144149d
Certificate serial: 01A1DFBA731B1210AE248BCFC547D4B71372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.mft
Manifest number: 67
Signing time: Sun 15 Nov 2026 15:01:40 +0000
Manifest this update: Sun 15 Nov 2026 15:01:40 +0000
Manifest next update: Mon 16 Nov 2026 15:01:40 +0000
Files and hashes: 1: 78hDSNEpMNyFqla5IsunXowOK5s.roa (hash: 9AFNy1NWqTXLUmTeLpiBe+8dF7UypIVwRpWPemfnxWQ=)
2: EiYRihMr9PhYuZ6ffiLV7zFEFJ0.crl (hash: OXpLEW6MU2/JNFUfonl77SmyfoPzczWlBu3+0h1uQog=)
3: awc3XipEWtbq5LY1RS7zhjk5VV4.roa (hash: 2BZL2rKDYS4rq4m02j+f41598wS/cdfgn7Qx20K4+xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:73:1b:12:10:ae:24:8b:cf:c5:47:d4:b7:13:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1226118a132bf4f858b99e9f7e22d5ef3144149d
Validity
Not Before: Nov 15 15:01:40 2026 GMT
Not After : Nov 16 15:01:40 2026 GMT
Subject: CN=8cf142b28f62034b15175b5837846471ae336ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:cf:90:17:38:06:1d:f6:4d:b2:b4:18:4e:
c9:40:81:ca:08:f3:45:d6:d4:4b:20:58:9a:f5:ce:
f6:d2:75:c2:3b:9c:4c:c5:95:9c:59:1f:2a:e0:a7:
3c:1c:0c:8b:88:61:5f:3d:f2:f2:43:ce:59:19:58:
f3:45:ae:6a:55:ee:ca:fd:c2:3c:52:b7:b8:b3:fe:
37:8f:fd:a0:e3:e1:61:33:cf:2f:02:66:15:8e:5d:
c1:fa:3d:16:48:21:1b:f8:a5:d2:ae:0b:f1:4c:a1:
43:7c:13:3f:9e:17:7d:1b:77:9d:df:f7:bc:09:99:
10:5a:5b:34:0b:2f:33:bd:a7:16:b0:b7:af:83:34:
23:b6:c8:6a:7a:5b:67:56:55:4a:2d:eb:0f:49:59:
06:56:39:d3:d4:ea:95:b7:bd:17:b7:e9:ee:ac:fe:
e6:10:34:88:10:35:96:e0:b3:e9:f1:3b:59:e3:bd:
ad:3b:90:b9:2e:dd:68:d7:87:5b:6f:00:31:64:07:
e3:09:e3:f0:df:a1:75:25:64:10:ef:ce:2d:76:25:
5a:40:1f:9f:68:2b:bc:b2:45:d1:73:05:d0:a3:27:
45:f2:d0:70:d1:b3:79:88:46:5d:e1:71:45:e9:9d:
36:94:67:25:91:29:17:bb:8b:66:90:a9:9f:c8:c8:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F1:42:B2:8F:62:03:4B:15:17:5B:58:37:84:64:71:AE:33:6E:CF
X509v3 Authority Key Identifier:
keyid:12:26:11:8A:13:2B:F4:F8:58:B9:9E:9F:7E:22:D5:EF:31:44:14:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4c:fd:bb:8c:02:2c:c8:b0:41:0a:fa:bc:8e:07:7b:ce:12:
a1:25:7b:68:13:ea:5d:47:a5:75:97:7f:62:81:80:60:5f:67:
ec:bf:2d:7e:f0:c9:2a:3f:04:b3:0c:a3:09:56:14:70:10:74:
b4:28:6b:14:eb:5b:a6:2b:96:9a:7b:7e:f9:2f:5a:76:72:42:
2f:23:1b:74:24:0f:56:29:e6:a7:58:7f:f2:94:24:01:16:23:
3a:8f:14:c4:f6:00:5c:93:99:ee:87:ba:cb:b8:9d:58:6b:3c:
a6:73:67:af:4c:cd:b3:73:5e:8c:54:71:aa:07:90:2d:6a:75:
79:3b:4c:86:e6:bb:a1:90:59:f6:f0:3e:b9:43:a6:fb:9c:f2:
c0:01:62:65:b9:2f:f8:bd:f8:dc:61:bc:4b:2d:82:59:fe:38:
11:db:d7:ce:65:05:be:49:da:22:27:33:d9:7c:b4:de:c9:16:
c0:39:18:f0:28:2e:76:1e:8a:ed:a7:2c:0e:6b:b1:d2:a3:47:
a0:7d:7f:fa:42:a3:fe:43:67:56:59:11:a8:7b:8c:a0:34:97:
ec:d7:13:d6:8e:4b:a3:c6:4c:a9:9f:81:ba:42:a3:f7:aa:b9:
16:df:93:84:4e:6c:e1:32:df:69:2a:a6:d2:e6:f9:e5:26:f1:
30:27:7a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfunMbEhCuJIvPxUfUtxNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjYxMThhMTMyYmY0Zjg1OGI5OWU5ZjdlMjJkNWVmMzE0
NDE0OWQwHhcNMjYxMTE1MTUwMTQwWhcNMjYxMTE2MTUwMTQwWjAzMTEwLwYDVQQD
Eyg4Y2YxNDJiMjhmNjIwMzRiMTUxNzViNTgzNzg0NjQ3MWFlMzM2ZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOPPkBc4Bh32TbK0GE7JQIHKCPNF
1tRLIFia9c720nXCO5xMxZWcWR8q4Kc8HAyLiGFfPfLyQ85ZGVjzRa5qVe7K/cI8
Ure4s/43j/2g4+FhM88vAmYVjl3B+j0WSCEb+KXSrgvxTKFDfBM/nhd9G3ed3/e8
CZkQWls0Cy8zvacWsLevgzQjtshqeltnVlVKLesPSVkGVjnT1OqVt70Xt+nurP7m
EDSIEDWW4LPp8TtZ472tO5C5Lt1o14dbbwAxZAfjCePw36F1JWQQ784tdiVaQB+f
aCu8skXRcwXQoydF8tBw0bN5iEZd4XFF6Z02lGclkSkXu4tmkKmfyMjouwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzxQrKPYgNLFRdbWDeEZHGuM27PMB8GA1UdIwQY
MBaAFBImEYoTK/T4WLmen34i1e8xRBSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlZUmloTXI5UGhZdVo2ZmZpTFY3ekZFRkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8xNjI2NWMtM2JkNC00ZjEzLWFiY2Mt
MDBiNWE2ZDIzYjM5LzEvRWlZUmloTXI5UGhZdVo2ZmZpTFY3ekZFRkowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8xNjI2NWMtM2JkNC00ZjEzLWFiY2MtMDBiNWE2ZDIzYjM5
LzEvRWlZUmloTXI5UGhZdVo2ZmZpTFY3ekZFRkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0z9u4wC
LMiwQQr6vI4He84SoSV7aBPqXUeldZd/YoGAYF9n7L8tfvDJKj8EswyjCVYUcBB0
tChrFOtbpiuWmnt++S9adnJCLyMbdCQPVinmp1h/8pQkARYjOo8UxPYAXJOZ7oe6
y7idWGs8pnNnr0zNs3NejFRxqgeQLWp1eTtMhua7oZBZ9vA+uUOm+5zywAFiZbkv
+L343GG8Sy2CWf44EdvXzmUFvknaIicz2Xy03skWwDkY8Cgudh6K7acsDmux0qNH
oH1/+kKj/kNnVlkRqHuMoDSX7NcT1o5Lo8ZMqZ+BukKj96q5Ft+ThE5s4TLfaSqm
0ub55SbxMCd6mA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:03:13 2026 by rpki-client