Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: BTEoHvU5yjXLUxtlsCpGYRw5lgHfpubmYsQkCIm9X+k=
Subject key identifier: E7:FE:35:95:25:7B:FB:1A:A4:B4:C5:0D:B1:0A:F7:EF:E0:18:65:17
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019FA22915894CFC3AAD2B980A5016074212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 06:00:29 +0000
Manifest this update: Mon 27 Jul 2026 06:00:29 +0000
Manifest next update: Tue 28 Jul 2026 06:00:29 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: /mz8c5UBKXhoA7+Xj8kgzNhu9RLggGL87VPPRjI2VcY=)
2: LgLPacdhRsAQk7Vm_5r4RdWNxxE.roa (hash: w8JcLAQyevCQky/Dfp2roamWiZayux9j96dBVgl8j+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:15:89:4c:fc:3a:ad:2b:98:0a:50:16:07:42:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Jul 27 06:00:29 2026 GMT
Not After : Jul 28 06:00:29 2026 GMT
Subject: CN=e7fe3595257bfb1aa4b4c50db10af7efe0186517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:46:66:fa:18:e6:0d:98:a4:c7:8a:94:47:
54:31:57:d8:bf:65:0e:44:e3:c0:30:f2:b0:ec:01:
40:f4:22:e4:e8:ee:40:01:77:91:33:24:5e:72:97:
e4:6b:fb:5e:f4:5f:5c:9a:21:15:1a:95:f9:f7:eb:
ed:de:43:67:fa:e0:1f:97:f8:bc:48:40:af:b5:c4:
ea:d7:7a:ee:d4:51:11:08:f7:c5:8c:08:3d:ee:6a:
cb:fa:04:80:ff:b6:1e:76:49:63:e7:80:29:51:cc:
72:58:43:58:9c:29:d6:ff:36:43:bf:ae:44:84:23:
0a:99:89:ec:6e:d5:89:bc:ae:aa:95:7e:da:d9:b7:
c9:4f:da:4c:42:b6:57:b6:d4:89:fb:96:8b:d9:f4:
50:ec:db:1d:b3:2c:8c:ab:a9:95:31:07:d7:2e:20:
6b:6d:4e:e7:bf:f0:25:3d:c8:9a:79:94:a4:fc:5a:
17:f9:aa:2d:70:d0:2c:29:25:ca:58:f9:0f:15:0c:
71:0a:0b:f5:d2:1a:e5:56:1d:20:53:93:78:ea:d4:
8b:67:91:1e:19:29:ab:ab:55:b4:06:4b:cd:3b:08:
97:67:44:be:28:16:b2:af:39:0f:34:93:24:aa:3e:
46:59:91:ce:5d:62:6b:28:2b:7d:0f:d3:bc:21:22:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FE:35:95:25:7B:FB:1A:A4:B4:C5:0D:B1:0A:F7:EF:E0:18:65:17
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0a:9e:01:d6:37:f4:63:e9:da:a3:1a:49:44:15:af:39:a3:
06:46:1a:ec:88:e1:a6:81:63:60:35:c0:16:e3:a8:b7:0c:44:
f1:94:0d:64:b4:2b:ba:68:74:6c:ce:f7:51:91:db:be:6b:4a:
31:e5:8a:7b:d2:a5:16:ae:59:90:75:8c:65:ca:41:ec:2d:c9:
59:e0:78:c3:7a:a5:21:11:cc:67:eb:99:4e:a3:18:ca:a9:41:
47:c5:b7:a1:58:42:c8:48:15:fc:75:34:5c:e1:c6:93:64:8b:
c0:bb:23:5c:ef:e8:ed:1e:9a:b2:b6:76:be:ae:58:b6:17:7b:
b9:09:55:dc:52:07:a5:89:a7:ed:ff:c6:d0:8f:a4:99:1f:d1:
86:bb:f6:31:df:30:63:de:ba:1a:1d:b8:55:8d:62:99:f3:12:
1e:f2:f8:98:6a:c5:bc:80:04:63:bb:88:c8:5f:2f:6e:db:e1:
5a:ba:5a:04:25:00:b9:b8:0f:0e:9c:01:d9:36:17:8a:fd:04:
dd:de:96:d3:e6:9f:cc:a3:02:cf:a6:b7:42:7e:f7:c4:d8:c2:
36:9d:7d:20:35:2b:6c:c0:dd:bf:ca:8d:08:44:ee:50:2d:bd:
a0:05:51:8f:64:e7:4d:e4:9b:90:48:cb:49:12:42:65:37:ef:
c4:f5:d4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:32:03 2026 by rpki-client