Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File: ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier: OBkAOT5gML+COBSLU1xhnwyWktF7iW5Vq5S0SmJ09NI=
Subject key identifier: 8D:82:4E:84:19:21:9E:08:73:3B:9C:BE:8D:6F:89:F4:6F:FA:48:DC
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 01A0F4571305F3F6EB2B9A62B032865B41CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number: 1A96
Signing time: Wed 30 Sep 2026 22:02:22 +0000
Manifest this update: Wed 30 Sep 2026 22:02:22 +0000
Manifest next update: Thu 01 Oct 2026 22:02:22 +0000
Files and hashes: 1: NcDn26l6X1jaA0rTBfljUSQkQrA.roa (hash: DBP3tSVruTN+BPgGFJB1Pkmv6KFos1kOIWJAln1+ovw=)
2: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: +seKebWi2FnrDzoMK/7vOzysPSG1T7wh02eKigf+q5s=)
3: et0olEFrB1y2vEuy1NWpl0biftA.roa (hash: o7zVoM3aaUFP3OzR2+EuOIiIDki9aymtbkBZVSrLD3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:57:13:05:f3:f6:eb:2b:9a:62:b0:32:86:5b:41:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Sep 30 22:02:22 2026 GMT
Not After : Oct 1 22:02:22 2026 GMT
Subject: CN=8d824e8419219e08733b9cbe8d6f89f46ffa48dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:7e:fa:58:15:f7:8c:55:d5:7b:18:f7:d1:
b2:e0:66:66:85:39:59:22:72:cb:24:03:b6:b3:c8:
5a:ba:4c:65:63:5e:37:0f:ad:ba:4d:2f:a5:5f:90:
f1:34:a0:38:de:1c:39:69:11:59:4a:46:75:ec:0c:
e6:b7:46:8f:7e:f6:ed:4a:11:22:28:b8:5b:bb:43:
19:21:3c:59:68:44:c6:f0:44:d2:b2:d4:85:e5:28:
72:ee:88:6e:22:6c:ac:84:5b:ae:f0:f3:04:0f:1c:
1f:e4:45:41:32:33:25:33:86:e5:5e:a9:25:18:32:
04:5b:cf:47:d2:9f:d1:e8:ed:aa:82:c7:cc:79:02:
04:f6:dc:89:7d:e4:43:f3:a6:31:1d:ce:7b:b2:f4:
c5:43:1d:a6:75:82:39:58:2e:7e:bc:ce:6d:4c:c6:
e2:5c:6a:d4:cc:59:26:72:7f:87:b2:2f:63:9b:16:
a9:a0:78:b0:b8:de:e1:db:68:7f:d6:9c:85:7e:b3:
57:b6:34:8e:60:b6:82:52:7d:0c:e9:9b:27:38:08:
2e:68:30:b5:5c:03:4c:dc:ca:35:7c:44:25:45:35:
2c:94:c3:a0:9c:cb:c8:28:30:62:37:d9:1e:5b:37:
01:89:42:c3:79:6b:57:85:ee:49:30:5f:5c:53:08:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:82:4E:84:19:21:9E:08:73:3B:9C:BE:8D:6F:89:F4:6F:FA:48:DC
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:d6:e4:9b:54:3d:b6:dc:ed:df:51:f4:a5:15:ec:a0:48:3b:
63:b8:c1:3d:89:59:d9:92:2d:03:01:12:97:9d:bd:c2:6a:ad:
24:04:2a:e3:d6:e4:f4:3d:a9:d1:d8:9a:56:22:46:c9:22:7c:
e9:ea:73:d6:e9:9d:ae:91:da:d8:80:f6:87:0c:e2:af:ee:e7:
82:19:78:32:7f:7a:e2:2c:f5:4a:0e:f9:a4:d8:7e:e3:51:4b:
ad:0e:a4:30:d0:4b:dc:a2:4d:85:fa:e3:bb:e5:99:ab:f3:fa:
ad:4d:f5:f4:27:12:10:48:f0:9e:ee:40:7d:4c:2c:97:5c:8f:
41:98:4d:96:7c:77:9d:62:32:60:98:75:2c:1b:ee:d8:98:fe:
3c:44:5f:02:34:6b:62:ee:be:a4:55:20:dd:fa:dc:b8:ea:23:
a0:2a:32:e3:c3:1e:09:42:8b:43:6a:0f:d1:5e:f8:9b:dd:09:
db:6a:6e:bc:8d:54:d7:42:14:0c:7b:fb:3b:14:1e:6f:c9:be:
8f:35:c2:b4:68:98:c0:c4:37:78:ea:37:a6:84:ec:ab:51:6a:
3c:da:2d:e3:fe:d5:8e:80:8b:80:45:54:42:9a:47:59:6b:c9:
0d:84:38:57:13:9e:ea:99:c5:74:5f:40:d2:b4:9e:e0:f1:cf:
f8:04:fb:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD0VxMF8/brK5pisDKGW0HKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YjUxMzRiMTFmOTQwOTExZjBmZjMxNWM5NDhkYWE1M2Y3
MzJlZTAwHhcNMjYwOTMwMjIwMjIyWhcNMjYxMDAxMjIwMjIyWjAzMTEwLwYDVQQD
Eyg4ZDgyNGU4NDE5MjE5ZTA4NzMzYjljYmU4ZDZmODlmNDZmZmE0OGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw11++lgV94xV1XsY99Gy4GZmhTlZ
InLLJAO2s8haukxlY143D626TS+lX5DxNKA43hw5aRFZSkZ17Azmt0aPfvbtShEi
KLhbu0MZITxZaETG8ETSstSF5Shy7ohuImyshFuu8PMEDxwf5EVBMjMlM4blXqkl
GDIEW89H0p/R6O2qgsfMeQIE9tyJfeRD86YxHc57svTFQx2mdYI5WC5+vM5tTMbi
XGrUzFkmcn+Hsi9jmxapoHiwuN7h22h/1pyFfrNXtjSOYLaCUn0M6ZsnOAguaDC1
XANM3Mo1fEQlRTUslMOgnMvIKDBiN9keWzcBiULDeWtXhe5JMF9cUwhzEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2CToQZIZ4Iczucvo1vifRv+kjcMB8GA1UdIwQY
MBaAFHm1E0sR+UCRHw/zFclI2qU/cy7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYt
Y2VjMjJlYTc5NTEzLzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYtY2VjMjJlYTc5NTEz
LzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4dbkm1Q9
ttzt31H0pRXsoEg7Y7jBPYlZ2ZItAwESl529wmqtJAQq49bk9D2p0diaViJGySJ8
6epz1umdrpHa2ID2hwzir+7nghl4Mn964iz1Sg75pNh+41FLrQ6kMNBL3KJNhfrj
u+WZq/P6rU319CcSEEjwnu5AfUwsl1yPQZhNlnx3nWIyYJh1LBvu2Jj+PERfAjRr
Yu6+pFUg3frcuOojoCoy48MeCUKLQ2oP0V74m90J22puvI1U10IUDHv7OxQeb8m+
jzXCtGiYwMQ3eOo3poTsq1FqPNot4/7VjoCLgEVUQppHWWvJDYQ4VxOe6pnFdF9A
0rSe4PHP+AT7Dw==
-----END CERTIFICATE-----
Generated at Thu Oct 1 09:17:56 2026 by rpki-client