Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: AZToeiiMdHM80AympTsC/6nvMwxHjqPmfIFMuZa9SJU=
Subject key identifier: 88:56:7B:46:9D:4C:66:3F:E6:05:99:66:3A:EA:3C:06:AC:2F:D5:9F
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019DD0BE7C5BF4932A8BD1AEC312F73297CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 21:00:37 +0000
Manifest this update: Mon 27 Apr 2026 21:00:37 +0000
Manifest next update: Tue 28 Apr 2026 21:00:37 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: UQNiJJCMSiYynS0kwiZoPhbKIfRV4ukye4lmE1sRk68=)
2: qvuOHYoyggsc9g8iuTbD4CEqvBo.roa (hash: jWZoQBgvdhifzrjkxPZUHR/6QgarurKmN/mBEWXh09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:7c:5b:f4:93:2a:8b:d1:ae:c3:12:f7:32:97:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Apr 27 21:00:37 2026 GMT
Not After : Apr 28 21:00:37 2026 GMT
Subject: CN=88567b469d4c663fe60599663aea3c06ac2fd59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:4a:fa:a0:e6:47:26:7a:f2:0d:d1:0e:07:
76:7b:47:3d:49:fd:70:27:20:d7:4a:ae:1c:05:20:
66:15:4d:eb:f1:93:cb:90:7e:b0:c8:de:68:36:7f:
e8:2a:d7:a2:c9:cd:15:ea:55:c9:38:42:41:93:5e:
8d:58:b1:37:35:a3:9b:3f:1c:42:2e:c7:68:66:ab:
09:59:9b:92:07:c9:69:ce:c4:cd:c4:b2:31:48:1b:
a7:49:58:d1:af:88:d8:7b:0a:3b:bd:07:29:02:28:
6f:f5:f8:8d:5d:d5:3c:c6:45:f2:8f:86:fa:5e:e9:
bb:b6:f0:0b:07:c9:9e:8c:03:b1:d4:23:86:81:4c:
0f:ab:77:31:0b:6d:11:1b:95:a5:bf:97:f4:c1:1f:
1e:1f:8e:5c:5f:8b:3e:64:a6:13:09:2d:d9:0f:ee:
35:f3:f2:36:be:bb:29:2b:9d:80:24:8c:5a:35:4e:
fd:9c:da:25:6d:c2:8b:48:e8:ef:e3:45:9f:7b:98:
41:82:14:b1:76:fa:c9:c2:9f:eb:f3:f0:02:23:ad:
40:fb:13:e0:5d:e2:8d:1b:72:90:2c:79:6b:d8:63:
db:9d:a6:d9:21:4b:b8:5e:50:e6:b1:13:ae:9c:dd:
b2:4b:95:ec:c0:fa:9f:90:66:2a:ef:2d:e6:f1:31:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:56:7B:46:9D:4C:66:3F:E6:05:99:66:3A:EA:3C:06:AC:2F:D5:9F
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8f:8c:83:c8:82:11:b4:f2:40:b7:25:90:8c:14:fc:24:de:
da:81:53:ff:e3:71:41:0d:eb:f9:9b:3b:74:37:64:35:8a:0e:
9b:5e:ec:3d:76:b4:6a:2c:e4:c9:d0:59:09:cc:65:bd:e2:f4:
38:8d:2f:ac:4c:ed:73:33:70:14:db:d2:2c:5f:78:ed:e2:f2:
ed:ba:77:ed:82:24:74:4a:bd:a7:dd:73:13:17:f7:bc:fa:24:
cf:8f:1d:90:fc:00:63:11:01:b8:bf:4a:be:82:8c:51:7f:0e:
fc:96:34:b2:e7:6b:a6:7d:07:8c:14:83:de:2f:e0:8a:70:d9:
0e:6d:d3:6d:b2:f4:86:23:a9:33:b4:43:02:d9:60:b5:8f:c7:
19:11:09:de:6d:a7:1b:30:c8:96:71:d4:18:24:ba:bb:ba:4f:
61:4a:6c:fe:83:b9:22:65:29:ee:ca:18:18:c0:5d:6f:e2:7e:
42:54:3a:a7:0b:83:b2:11:de:20:1c:d3:b0:90:49:9f:b3:0f:
93:f3:8f:70:78:5d:7a:b4:89:d1:f5:5b:6a:20:0b:c8:2e:3e:
0a:db:f0:0a:ff:d2:46:59:99:6f:5f:93:e7:cd:e7:bb:0e:71:
f5:fd:4a:df:08:14:28:7d:f6:a1:27:23:ee:e9:fc:cf:21:7e:
02:65:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:47:09 2026 by rpki-client