Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: 52anxX95xMFOersOQxXDZAtaH2bfYaJJYWz4Pnf/3yI=
Subject key identifier: 28:20:B9:3D:65:44:45:89:25:4D:18:44:85:3D:46:1D:22:10:E3:D1
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019EBA6AA9C694FC85A588BCA76E646E73C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 195B
Signing time: Fri 12 Jun 2026 06:00:12 +0000
Manifest this update: Fri 12 Jun 2026 06:00:12 +0000
Manifest next update: Sat 13 Jun 2026 06:00:12 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: 4Z/tieXXEjD2AwYWAO1JsPWNc5bN/wOWuPqspO4TEyM=)
2: LgLPacdhRsAQk7Vm_5r4RdWNxxE.roa (hash: w8JcLAQyevCQky/Dfp2roamWiZayux9j96dBVgl8j+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:6a:a9:c6:94:fc:85:a5:88:bc:a7:6e:64:6e:73:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Jun 12 06:00:12 2026 GMT
Not After : Jun 13 06:00:12 2026 GMT
Subject: CN=2820b93d65444589254d1844853d461d2210e3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:b4:ae:1c:4d:c6:9d:f2:82:6f:62:e6:d7:
f6:f9:c6:3d:9b:70:c0:54:1c:7b:42:50:35:f1:e3:
99:16:d4:8c:dc:b1:79:d9:32:5c:a6:af:15:83:af:
ec:e4:ec:bb:17:ed:16:87:a2:29:90:1d:82:2c:02:
b7:8d:cb:8e:07:69:3f:ee:31:49:36:42:2f:03:63:
25:a5:40:e0:7a:20:1c:33:36:0c:77:90:57:08:ca:
55:a4:92:2b:6d:b2:19:e0:a0:cc:61:3a:de:35:05:
5e:f8:d0:46:70:3e:d5:ef:52:66:87:ee:91:f7:b3:
0f:2a:95:6d:67:1a:2e:cd:6c:4e:4d:3c:d5:b8:4c:
8b:f1:e2:b6:dd:16:46:70:9a:f5:6e:1c:00:1b:36:
81:86:3c:6f:fe:b1:8a:d2:89:01:96:1e:2a:41:10:
3e:67:8d:8f:93:e0:ff:b1:68:ac:1a:b2:31:73:6b:
98:91:f2:e4:b8:92:5a:12:e4:06:7e:6c:fa:85:e8:
2f:cb:d3:b8:c4:05:6f:35:94:4f:fb:00:3d:15:03:
58:05:26:4d:70:95:f2:17:da:29:d7:c7:d0:70:21:
56:42:55:c2:52:8d:1f:7d:ce:39:7f:cc:d8:4d:57:
f2:29:30:ca:bf:c8:e1:91:35:6f:75:de:a3:0e:28:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:B9:3D:65:44:45:89:25:4D:18:44:85:3D:46:1D:22:10:E3:D1
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2b:e1:b7:15:ab:ae:68:4b:fd:56:5b:28:db:a1:e7:03:3d:
9d:4b:1e:6a:cd:36:d1:3e:75:56:75:03:cd:1d:ae:2b:f4:66:
43:e6:59:8d:28:c1:7a:45:5d:e5:ca:b9:ea:bd:26:5a:e4:a1:
08:00:94:c4:3c:fa:06:be:0e:f3:0f:8a:85:2f:8a:89:45:9c:
15:f0:36:8a:c7:91:e0:a1:04:f4:a5:e9:b8:c7:7c:94:0a:e6:
41:49:7c:9d:aa:68:c0:66:e1:ce:e0:bc:b8:ab:f8:11:4f:62:
05:41:f2:cb:7f:6d:36:30:97:a3:00:1b:f2:6f:61:81:a9:09:
99:09:1b:24:4e:7c:43:04:23:4f:61:04:c7:b0:19:03:f1:81:
9c:b8:ad:c0:72:7b:b9:9f:f4:25:c0:f3:61:7f:98:3a:0c:3d:
81:13:8b:16:82:2d:43:51:a3:12:8c:21:f8:52:3f:42:74:a2:
c4:3b:dd:79:01:0c:40:37:82:0a:db:8b:f1:76:66:1a:99:c8:
c1:38:d8:91:f4:9b:5a:66:63:1e:8a:1a:7f:de:8a:a5:7f:e0:
d0:a2:94:12:25:79:db:60:01:98:39:06:41:e9:9f:92:86:d9:
ed:95:14:81:a7:68:65:eb:81:59:4e:52:90:2c:15:d7:58:97:
1b:b5:ca:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:53:08 2026 by rpki-client