Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
File: ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft (raw, json)
Hash identifier: rCcXAX2v+GcZBAeEsG9VuN26qDjNRcEugzY4dt45EOk=
Subject key identifier: 39:97:D4:A7:2D:BD:41:0C:0E:74:8E:45:EB:26:D8:3D:E9:82:4D:98
Authority key identifier: 79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
Certificate issuer: /CN=79bc498edc4189584874b7cb45025ef542481b6a
Certificate serial: 019D3865D57185805D42FA3E06370E454366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 07:01:31 +0000
Manifest this update: Sun 29 Mar 2026 07:01:31 +0000
Manifest next update: Mon 30 Mar 2026 07:01:31 +0000
Files and hashes: 1: a3hQkooCn8x46O_eURpLJRVcyg4.roa (hash: tnmlw5UaWszHoGLC/j+Q9KSkF66XylpC4Q+T0iyP6ac=)
2: ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl (hash: Duu9JJOUOUbb9GFilFOjDcKrLRdMvCN9qrkb7mKf/Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d5:71:85:80:5d:42:fa:3e:06:37:0e:45:43:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bc498edc4189584874b7cb45025ef542481b6a
Validity
Not Before: Mar 29 07:01:31 2026 GMT
Not After : Mar 30 07:01:31 2026 GMT
Subject: CN=3997d4a72dbd410c0e748e45eb26d83de9824d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0c:24:9d:21:b2:60:7b:2c:f7:43:ba:5c:b1:
dd:19:ee:e3:0f:ba:5a:51:38:a6:e2:28:1e:4b:18:
f6:df:ee:01:a4:28:ed:5a:66:80:5a:13:88:a5:04:
97:2f:d3:71:12:03:05:35:34:db:75:ab:0a:bd:dd:
e3:6c:d4:ad:9c:79:19:f1:d4:1b:22:62:a9:8c:42:
61:87:aa:47:6d:ed:dd:c3:0f:89:21:2e:61:b3:ff:
2a:bf:0c:f3:fa:86:1d:21:37:22:77:42:41:6a:a3:
1a:2e:67:34:2e:cf:1f:70:a3:6b:bd:a3:c9:09:c3:
d9:b5:ff:67:76:19:c4:1b:4e:ea:37:eb:77:99:d5:
c5:b4:2a:fc:b5:a2:aa:07:42:0d:f5:b3:5e:1e:92:
b7:5c:e9:8e:6a:31:34:b0:92:0b:18:2a:d6:f8:48:
b8:2b:c2:1f:96:c9:97:4c:e5:f6:3f:54:6e:07:74:
5c:05:67:c4:1d:aa:d7:ec:aa:c8:e3:0b:32:ef:4a:
d1:11:19:bb:8f:55:1a:60:35:da:ac:45:59:fa:a7:
75:c6:9d:05:3d:37:5c:dc:be:48:14:7f:27:bc:91:
ff:87:52:14:ce:fb:5e:99:96:8c:7b:23:88:b7:d8:
1b:0b:7b:15:e3:0a:6f:54:e3:97:b6:9f:9e:ee:ab:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:97:D4:A7:2D:BD:41:0C:0E:74:8E:45:EB:26:D8:3D:E9:82:4D:98
X509v3 Authority Key Identifier:
keyid:79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2b:c9:86:21:24:d1:ee:77:19:7f:6e:69:9f:d3:51:34:29:
1f:90:3a:d6:34:16:a1:9f:45:12:1d:68:94:3e:60:7f:cb:a4:
b8:46:4d:be:2e:56:b7:14:ae:db:bd:9d:c7:4a:72:ec:4c:77:
e8:8f:35:d8:91:c7:49:37:45:73:15:b4:e4:71:de:2f:8e:55:
dc:c2:b2:b2:a3:2d:d2:3b:5d:91:8e:1b:5d:2a:9c:09:90:15:
12:3b:df:df:ab:94:d2:49:83:e8:fc:ff:b7:fe:3c:dc:a0:62:
0e:aa:07:84:92:40:99:2b:3d:72:13:5e:54:96:a6:7e:8f:4f:
fd:e4:d7:21:90:5b:2c:c6:6e:02:c8:fb:ee:35:4c:2d:76:79:
e7:85:cc:4c:54:0f:8a:61:5b:17:62:fe:71:29:cf:6c:da:42:
b6:a1:ac:78:63:f3:c6:37:a7:ad:3f:49:6d:f5:52:ce:d2:13:
a7:dc:82:05:20:76:f6:eb:2f:27:38:71:fb:b5:f7:b2:2c:07:
4b:e4:9e:1a:4d:01:ba:87:72:5e:da:36:03:23:f5:dc:2c:ad:
18:f2:aa:68:d0:91:0c:b7:ea:3f:dd:f4:39:ec:9a:8d:29:c4:
fa:5d:92:d3:a3:f1:71:c0:4e:4c:13:6d:a8:93:98:f7:d6:b4:
74:dd:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:36 2026 by rpki-client