Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
File: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft (raw, json)
Hash identifier: x0+eC5KNKVxpbDZktIqtAGSc1FSqboqHI3BrJZOU/rc=
Subject key identifier: 40:FD:24:20:FB:12:70:7F:FA:F2:44:E7:55:09:BD:A6:5D:B4:E1:57
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Certificate issuer: /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial: 019D2928F308D5443650298DAED8FECFD9EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
Manifest number: 02D0
Signing time: Thu 26 Mar 2026 08:00:42 +0000
Manifest this update: Thu 26 Mar 2026 08:00:42 +0000
Manifest next update: Fri 27 Mar 2026 08:00:42 +0000
Files and hashes: 1: 1pFLtL3u2Mj6D98HAx8GtYTeAwI.roa (hash: pmrWF+lDh+ECpFtkS0mznQOkoYJ7QI62/Hl2UZgNaYA=)
2: e7JCKZM7Sj7nZ-jn0culwxxnmRY.roa (hash: uCVQMuNimm2kRxYums+7bm1dwpOCnLao+2OKBBHNm54=)
3: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl (hash: SbxtoBtMNTtDhMO3tKERmUgzDZjr19rOajSI0toJZV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:f3:08:d5:44:36:50:29:8d:ae:d8:fe:cf:d9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Validity
Not Before: Mar 26 08:00:42 2026 GMT
Not After : Mar 27 08:00:42 2026 GMT
Subject: CN=40fd2420fb12707ffaf244e75509bda65db4e157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:10:f5:fa:45:47:1e:d7:c9:09:2c:d9:44:
d9:47:6a:9c:4e:46:1c:2b:9c:07:1e:a8:b1:36:fb:
51:c3:0f:b2:38:7c:60:36:c4:b8:66:f0:9a:b7:34:
cb:16:8a:0b:af:e2:39:73:8f:b9:84:90:96:d1:c5:
0a:5c:3f:e2:da:ac:f9:e7:03:f1:2e:06:88:d2:ce:
97:4c:b5:51:41:07:20:14:87:de:f8:19:0c:3b:51:
90:b2:f1:96:5f:89:f8:d9:fd:b5:be:f3:69:01:08:
56:b8:eb:06:05:92:c9:2a:58:be:81:5e:f4:c4:aa:
dc:11:b5:67:36:71:a8:b6:3f:64:17:b3:32:b2:b2:
55:59:70:2c:f5:bb:06:96:ed:f2:3f:45:d4:96:58:
df:c4:59:3b:c9:a0:54:ae:f9:8c:dd:6f:d7:d7:06:
c5:5c:d5:a1:3a:02:73:60:83:97:a2:23:f8:a9:12:
24:9b:2c:56:0c:42:70:ec:89:67:0f:ca:8a:14:3f:
7f:ad:91:7f:dc:32:36:d2:57:9a:04:e1:79:18:29:
a2:91:61:3b:39:c8:fc:38:40:ff:8a:20:b7:48:f0:
e7:79:43:9d:98:6f:14:6f:bd:bd:70:5f:6e:d6:a4:
31:6b:21:86:59:4f:2c:76:42:aa:dc:a1:86:03:71:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FD:24:20:FB:12:70:7F:FA:F2:44:E7:55:09:BD:A6:5D:B4:E1:57
X509v3 Authority Key Identifier:
keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b0:8a:4e:3c:cb:0a:61:cf:ab:14:1d:9c:bf:09:66:69:9f:
24:8a:fe:d7:1e:a6:8e:bd:41:f1:f5:7e:3e:84:37:dc:a2:12:
16:42:54:e1:90:73:92:f6:71:b0:74:08:98:b8:73:a5:0c:03:
fe:17:03:35:67:c4:17:80:4d:db:fb:82:a7:4b:0f:ec:94:82:
93:68:1f:31:d3:ba:32:0b:9d:eb:69:11:bb:07:66:75:e8:69:
34:10:0c:95:ae:ef:74:4e:2b:80:23:f0:dd:b1:12:76:74:00:
a2:3a:76:bd:b1:3f:ec:a9:8b:79:9e:64:a3:02:c2:4f:fa:c3:
15:ee:d3:46:3a:03:e6:53:14:ff:1c:4e:2c:74:d8:e0:bd:20:
1d:ce:f1:86:94:2b:4a:93:db:d1:62:cb:e2:e6:08:ab:b7:26:
ac:64:b6:e3:83:fe:9d:7b:ad:11:c5:fa:cd:e9:40:66:5c:0f:
d5:a5:12:ec:41:32:cd:89:dc:8a:98:dd:b5:28:58:c8:49:ce:
c9:ca:62:78:be:71:52:90:67:ee:ae:00:aa:f8:c0:f5:5f:a6:
de:18:b9:c9:91:f6:1c:0e:75:b3:bb:55:ae:c1:7a:b1:ae:56:
f1:ca:37:bd:2a:4e:60:9e:a3:6a:46:87:9b:f6:d8:f6:7b:e5:
8d:56:6e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:15 2026 by rpki-client