Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: kbrnP820N4f5vO94S9T6qu2hSPu/vAdNHDZkIyE1g54=
Subject key identifier: F0:AF:DE:0A:DD:48:00:29:49:DC:F7:83:11:00:3C:7C:1C:E1:C8:4B
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 019DCDF49531156AB36D5A059BBB2FB45E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 18D9
Signing time: Mon 27 Apr 2026 08:00:51 +0000
Manifest this update: Mon 27 Apr 2026 08:00:51 +0000
Manifest next update: Tue 28 Apr 2026 08:00:51 +0000
Files and hashes: 1: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: xDYcKj0PvQopyDucnuCqR+7IQ8HXQzmw2uRfoWk5FO0=)
2: n2RXCHmE2mIVVK86mWjjYTONVEY.roa (hash: vfexF/zKDf9M5bj3mCjRl7MbjkVTZHBSgi+Kjne7g2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:95:31:15:6a:b3:6d:5a:05:9b:bb:2f:b4:5e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Apr 27 08:00:51 2026 GMT
Not After : Apr 28 08:00:51 2026 GMT
Subject: CN=f0afde0add48002949dcf78311003c7c1ce1c84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:7a:49:89:74:fc:bb:1e:ed:4f:e3:c9:25:
67:b9:e0:97:a6:7c:c0:69:6f:dd:93:69:b1:a9:b0:
8d:4b:03:b1:99:10:12:18:8f:23:4b:d0:2f:8f:ae:
d3:fe:26:af:9f:f0:d5:83:76:cc:9b:fa:17:4d:f1:
45:e4:7e:57:a2:21:55:6a:84:6d:27:df:7d:78:98:
40:bd:a1:ec:86:c1:a4:50:dc:1f:a0:46:55:56:bb:
c0:48:37:0d:b6:73:93:d7:29:45:e0:b2:d6:c6:b6:
ac:82:f5:8e:51:a5:83:c1:56:f1:75:f9:0b:7a:63:
1d:68:65:00:ff:76:41:a1:06:d8:cf:1e:e0:e1:5d:
27:96:6d:70:a7:07:f3:14:6f:78:55:97:95:64:ee:
4e:6a:da:7d:fe:6e:3f:69:3e:1f:19:c9:cd:31:4e:
f5:10:c6:cd:58:c2:5e:0f:be:06:e9:19:5c:15:f1:
8d:2a:1e:ab:7b:29:ff:46:a2:2f:0a:a2:e6:de:8a:
da:de:3e:09:28:4b:27:ba:72:5c:58:46:5f:f9:e5:
f7:ea:cc:7f:03:b1:00:4f:29:8f:75:c4:f7:26:06:
a2:43:bd:9b:0c:80:ac:aa:a1:6b:2a:7c:2e:22:0b:
76:31:28:ea:32:5e:ad:11:b7:88:16:05:e6:3c:de:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AF:DE:0A:DD:48:00:29:49:DC:F7:83:11:00:3C:7C:1C:E1:C8:4B
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:2d:5c:d6:30:f1:f5:d4:88:2e:d0:0d:8d:60:ad:98:94:10:
3d:5d:41:74:87:11:fd:14:03:aa:4b:fe:9f:3a:4b:f9:e4:a8:
30:9b:31:1d:12:8a:0b:d1:b1:4e:4f:39:52:fb:51:c7:13:fb:
a4:93:eb:70:be:3b:bc:40:d2:07:94:e7:c2:a7:9e:05:3f:5a:
0e:c8:4c:04:cf:89:2b:df:c2:b5:82:cc:93:e2:d2:9b:ef:7a:
e2:ed:d0:3d:8d:05:da:1f:e0:49:bf:37:66:49:1a:a6:49:bb:
0f:72:9b:2c:64:f9:50:1f:f4:f4:c5:59:9b:c6:2d:6c:48:a5:
02:90:b1:bb:41:36:14:d7:52:f5:13:ee:08:57:a7:6f:b8:a1:
af:62:a0:24:fb:4e:4f:62:4e:0b:d2:82:bb:77:de:d1:a4:59:
b8:ca:9c:12:ca:c7:ae:c6:c4:d1:94:a3:0a:04:f3:2b:02:b8:
15:81:b8:a3:ee:bc:db:b7:18:9c:f9:2a:80:f7:99:03:7f:93:
bd:20:5c:b1:11:ea:61:54:78:7d:03:5e:0a:df:f5:fe:d3:76:
ba:97:9d:96:d2:e8:47:52:2d:77:ef:c6:15:d1:91:3f:d7:a7:
50:3c:63:5f:cd:8a:d9:cd:f7:ca:e9:83:56:0b:94:fc:66:63:
c0:b0:40:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:42:05 2026 by rpki-client