Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: C9eeP45jZgM6yhdn8xI0sPoGP21wlwyol1lxiDsV7g0=
Subject key identifier: 1A:FA:47:1E:98:C6:9A:C4:C4:4B:B2:4A:A5:51:38:3F:CC:6A:A5:E3
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 01A18CAF5C8C7C07216BA096DE5ECD305DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 1AD1
Signing time: Fri 30 Oct 2026 12:01:05 +0000
Manifest this update: Fri 30 Oct 2026 12:01:05 +0000
Manifest next update: Sat 31 Oct 2026 12:01:05 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: AWqc39iHfqe5HEHgOenA2qCyFQoSXhmcZPQ0nfpVW9o=)
2: LgLPacdhRsAQk7Vm_5r4RdWNxxE.roa (hash: w8JcLAQyevCQky/Dfp2roamWiZayux9j96dBVgl8j+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:af:5c:8c:7c:07:21:6b:a0:96:de:5e:cd:30:5d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Oct 30 12:01:05 2026 GMT
Not After : Oct 31 12:01:05 2026 GMT
Subject: CN=1afa471e98c69ac4c44bb24aa551383fcc6aa5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:47:fb:48:91:77:20:46:ee:27:91:6f:e2:
ef:14:e5:48:90:95:a4:bf:08:6a:9f:8b:c6:a8:95:
43:07:28:d4:0b:33:63:f8:6a:4c:f8:61:17:17:3d:
2a:da:d3:a6:53:3d:37:c7:2f:42:df:5b:06:38:60:
ea:fc:07:37:ab:e2:b2:d6:05:ea:0f:c0:65:03:23:
07:9e:a2:ec:13:5c:b8:4b:68:64:70:e6:8f:a2:d4:
95:f1:47:fe:90:98:23:ae:4f:d1:05:43:8c:61:40:
db:bf:78:b4:d4:25:6d:ec:fd:f3:ff:e0:66:05:69:
b0:a5:1a:1e:a2:5a:b2:42:15:18:4a:ef:ec:cc:e4:
6c:c6:70:6b:2b:2b:cd:59:27:52:88:7f:1d:d3:b4:
21:41:80:a2:25:7b:ed:a7:07:c1:24:dd:62:8a:e1:
ed:d3:13:1f:51:aa:a4:3d:01:f6:23:08:35:23:19:
2f:6e:1f:c4:fc:3e:1c:f1:81:1a:c8:97:b2:03:40:
3c:2c:49:eb:b9:b2:dd:bd:30:6c:2f:53:f7:ab:b0:
0f:83:a1:83:c9:0a:53:ef:6b:cc:33:8d:86:4e:24:
1d:1b:a8:70:fe:e7:34:06:13:72:2e:e8:81:da:3f:
27:76:ad:75:3b:5e:2e:f2:07:c9:e3:2b:59:5b:24:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FA:47:1E:98:C6:9A:C4:C4:4B:B2:4A:A5:51:38:3F:CC:6A:A5:E3
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0e:b8:fe:2a:b3:ed:3a:e8:2f:64:ae:44:16:87:c6:22:a5:
35:78:eb:4d:ed:d9:86:81:16:39:4d:c0:ac:1e:87:66:f3:91:
3e:31:ad:e7:98:3a:4b:42:86:bb:6c:dd:a3:29:ef:a9:fb:d7:
d9:8e:7f:9c:0d:60:78:7b:85:99:55:ef:d3:32:c7:2a:a0:af:
17:1c:9e:50:45:e1:a5:9d:b0:ef:f9:d9:19:30:f7:7f:8d:ff:
ff:3a:06:61:4b:3b:e9:7f:9c:b3:2f:80:7a:ec:c9:99:a1:8a:
52:2d:08:98:d5:ed:ff:bf:56:0b:d5:a2:d4:bf:8a:85:d3:fd:
0b:55:8d:fd:37:0f:59:19:50:f7:91:8f:20:08:84:4e:40:8f:
de:c6:5e:69:9b:60:c6:47:39:60:08:06:9a:e3:5f:a5:2d:f8:
88:e4:bd:46:c2:05:ef:08:b8:07:c8:d7:5d:48:4b:a1:cc:31:
9f:ae:35:13:ff:ac:7c:24:90:87:fd:fb:95:df:07:39:09:de:
14:67:28:8a:ba:22:d7:fd:bf:80:02:52:78:00:72:17:e4:cc:
87:7a:e2:1b:82:bb:19:d7:14:d2:74:87:1b:ca:58:e0:7c:8e:
06:28:74:12:dd:19:19:82:20:bc:7b:b7:9f:1e:62:25:ce:9d:
92:8d:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:21:56 2026 by rpki-client