Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: p1FnBtmiaXzkzQPU5gONpY8XYOO1aDQrRSKiyunlvCE=
Subject key identifier: CD:C6:F1:EB:DA:5A:7E:47:1B:C3:F9:C9:46:4E:B5:A9:09:A6:BD:49
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019CE523443E1616475F0823DD0160484280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 03:00:19 +0000
Manifest this update: Fri 13 Mar 2026 03:00:19 +0000
Manifest next update: Sat 14 Mar 2026 03:00:19 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: kg91/TKAWXZ3NvBEjKUQooUJjVQs4/Z3rAShzPQ8k80=)
2: qvuOHYoyggsc9g8iuTbD4CEqvBo.roa (hash: jWZoQBgvdhifzrjkxPZUHR/6QgarurKmN/mBEWXh09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:44:3e:16:16:47:5f:08:23:dd:01:60:48:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Mar 13 03:00:19 2026 GMT
Not After : Mar 14 03:00:19 2026 GMT
Subject: CN=cdc6f1ebda5a7e471bc3f9c9464eb5a909a6bd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:c5:9e:08:0a:77:ab:53:43:ae:fd:c8:3d:
e7:36:b9:1a:74:c7:1c:ff:7c:b4:c9:4c:c6:f4:4e:
25:53:e8:0d:a1:9b:1a:a5:1e:ad:a9:fd:8b:79:ed:
11:1e:50:fe:c5:46:73:f3:12:89:b7:33:dc:f5:a6:
ed:b6:42:43:ab:18:3b:57:3a:84:4e:98:f8:ad:55:
eb:54:7f:bc:09:1d:ba:3f:66:ee:77:3f:36:6a:31:
26:25:b9:f8:35:5c:cc:8e:87:65:84:e7:7c:41:6f:
88:82:8f:cb:23:a3:6c:96:ac:6b:ba:71:57:a9:02:
a2:29:5a:6c:6b:98:14:59:bb:51:df:8e:46:ae:56:
7d:16:e9:4e:ea:5b:96:82:f5:73:e9:0e:85:d2:90:
81:86:df:12:1f:64:5b:00:51:f9:4e:73:90:2b:10:
98:31:19:eb:b9:9e:1a:fd:63:04:2c:be:8c:ce:43:
bc:8c:d5:9a:3b:ab:49:ca:03:14:3b:45:03:d6:ef:
92:83:5c:80:27:4a:01:04:cc:6d:5a:82:8b:88:95:
70:79:8a:ee:93:a3:e4:0b:60:56:4d:78:0e:92:f3:
30:95:71:d1:8a:b0:a9:d5:de:f4:6e:1a:4b:08:9f:
a9:7c:61:f1:55:c8:a9:c8:12:68:db:d7:1e:84:1e:
89:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C6:F1:EB:DA:5A:7E:47:1B:C3:F9:C9:46:4E:B5:A9:09:A6:BD:49
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:05:60:d4:3a:b5:43:ba:ae:59:a8:4f:fe:9f:62:2b:1a:04:
ce:52:7e:8e:01:98:b6:33:ae:2f:bf:cb:4d:06:ff:df:19:1a:
c2:2e:f8:9a:d0:6c:9c:b0:ec:87:d9:8e:66:00:12:ee:bb:89:
11:d5:80:5f:52:01:fe:9d:39:0d:b4:97:82:f5:e6:e6:51:ff:
18:8e:6a:82:11:db:23:02:ba:bc:38:aa:c3:8e:ed:ff:7e:6b:
06:63:af:00:23:20:92:3c:ea:cd:61:b2:ef:2f:b6:fe:57:30:
17:e7:59:52:25:23:94:ab:ae:2d:01:32:99:4e:5b:22:45:c3:
d1:04:b1:b7:d0:21:56:4f:31:98:72:2c:86:7a:7f:07:4a:73:
26:0a:62:9c:71:06:f8:a6:5c:8c:e5:9a:97:46:03:b1:6a:f5:
6b:5e:b3:e5:c2:c8:39:ec:60:3c:84:d5:9e:e6:4f:47:14:a2:
03:15:f0:e0:c6:5d:e1:67:26:92:b0:de:93:86:32:3f:dd:97:
25:b0:50:01:85:55:66:69:f7:54:a9:7c:46:26:3d:a0:89:fb:
d2:19:6d:76:16:14:07:28:f0:be:e5:b4:e3:de:2e:e9:3c:36:
4f:f7:24:e2:22:04:a7:79:2e:16:15:82:95:80:63:d5:65:b8:
26:de:ba:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlI0Q+FhZHXwgj3QFgSEKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYmM0MGJjYWI1ZTkwNTNhYjZkYjdkMTllMmEzOGRmMWI2
ZjlhNGIwHhcNMjYwMzEzMDMwMDE5WhcNMjYwMzE0MDMwMDE5WjAzMTEwLwYDVQQD
EyhjZGM2ZjFlYmRhNWE3ZTQ3MWJjM2Y5Yzk0NjRlYjVhOTA5YTZiZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6/FnggKd6tTQ679yD3nNrkadMcc
/3y0yUzG9E4lU+gNoZsapR6tqf2Lee0RHlD+xUZz8xKJtzPc9abttkJDqxg7VzqE
Tpj4rVXrVH+8CR26P2budz82ajEmJbn4NVzMjodlhOd8QW+Igo/LI6NslqxrunFX
qQKiKVpsa5gUWbtR345GrlZ9FulO6luWgvVz6Q6F0pCBht8SH2RbAFH5TnOQKxCY
MRnruZ4a/WMELL6MzkO8jNWaO6tJygMUO0UD1u+Sg1yAJ0oBBMxtWoKLiJVweYru
k6PkC2BWTXgOkvMwlXHRirCp1d70bhpLCJ+pfGHxVcipyBJo29cehB6J0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3G8evaWn5HG8P5yUZOtakJpr1JMB8GA1UdIwQY
MBaAFBG8QLyrXpBTq2230Z4qON8bb5pLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQt
YWU0Zjg0ZTE2Y2ExLzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQtYWU0Zjg0ZTE2Y2Ex
LzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQVg1Dq1
Q7quWahP/p9iKxoEzlJ+jgGYtjOuL7/LTQb/3xkawi74mtBsnLDsh9mOZgAS7ruJ
EdWAX1IB/p05DbSXgvXm5lH/GI5qghHbIwK6vDiqw47t/35rBmOvACMgkjzqzWGy
7y+2/lcwF+dZUiUjlKuuLQEymU5bIkXD0QSxt9AhVk8xmHIshnp/B0pzJgpinHEG
+KZcjOWal0YDsWr1a16z5cLIOexgPITVnuZPRxSiAxXw4MZd4WcmkrDek4YyP92X
JbBQAYVVZmn3VKl8RiY9oIn70hltdhYUByjwvuW0494u6Tw2T/ck4iIEp3kuFhWC
lYBj1WW4Jt66Dg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:50:30 2026 by rpki-client