Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: GL5ZWIa42c5UGA3mFMt9Ni5LBH/btuF9OyfZkNrE5DM=
Subject key identifier: F3:96:6E:A3:63:2C:C9:1A:AD:28:4C:11:F1:11:98:AB:FE:BA:8B:DA
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 01A08BD68459A4FDC50FCDB6087714853316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 15:01:26 +0000
Manifest this update: Thu 10 Sep 2026 15:01:26 +0000
Manifest next update: Fri 11 Sep 2026 15:01:26 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: x1iyP1NpV/08++SkHhwal6v7OLkKmLnmVMilkuNxBps=)
2: LgLPacdhRsAQk7Vm_5r4RdWNxxE.roa (hash: w8JcLAQyevCQky/Dfp2roamWiZayux9j96dBVgl8j+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:84:59:a4:fd:c5:0f:cd:b6:08:77:14:85:33:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Sep 10 15:01:26 2026 GMT
Not After : Sep 11 15:01:26 2026 GMT
Subject: CN=f3966ea3632cc91aad284c11f11198abfeba8bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:36:2f:63:df:cd:34:31:c8:ff:4a:d7:83:
9e:9b:c5:7f:f0:b1:8e:35:8e:38:64:1b:f8:a8:74:
b0:4d:3c:b5:83:cb:36:66:2d:63:04:f3:15:c6:fa:
1c:67:91:68:fb:4a:8e:8e:42:f3:70:6b:69:e3:3c:
f7:be:ad:3a:47:6a:4d:dd:81:a0:b6:40:c0:fa:ef:
42:3c:a6:5d:7e:31:9d:64:30:81:d3:ef:0f:da:44:
9a:df:36:5d:49:e3:b4:6a:c4:f1:8d:ab:18:47:40:
b2:75:f3:bc:f2:b7:89:02:c9:4b:aa:8c:31:8b:54:
07:15:a6:2c:aa:07:2d:2c:6b:9b:31:12:ba:bd:7a:
16:a8:86:67:bc:bd:1a:cd:f4:5a:85:ed:b3:f5:c5:
c9:37:14:1f:30:a2:13:24:bd:c6:36:8e:80:46:0b:
d7:8c:df:ea:18:1c:ab:c2:ed:fa:88:e1:e3:1f:58:
a8:74:c5:6f:58:21:df:a8:57:8e:67:b7:95:c0:8d:
9c:13:f6:50:03:2a:9b:f0:78:ab:6e:99:36:d2:62:
02:e9:6a:f6:38:2b:fa:5c:b6:5e:29:8f:b8:9f:11:
fd:61:b7:b3:ae:e1:13:61:b7:13:04:28:43:a4:c7:
a3:fc:98:31:21:09:2b:76:bc:ba:48:25:4a:81:eb:
db:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:96:6E:A3:63:2C:C9:1A:AD:28:4C:11:F1:11:98:AB:FE:BA:8B:DA
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bd:d9:a1:76:a7:ed:82:f3:1f:46:17:b8:d4:8e:2a:9c:66:
60:66:46:7c:3a:81:09:48:20:39:d9:74:af:11:1e:d5:d0:81:
39:dc:32:75:52:d1:96:3c:f6:07:2d:50:51:e0:c0:14:90:1d:
3b:a9:14:8d:f9:1a:30:a8:82:49:75:4b:ff:57:d6:9c:aa:0d:
34:18:29:e6:69:98:be:11:15:af:5a:dd:c8:06:26:63:38:bc:
79:ff:7e:8c:bf:64:b0:e3:63:3c:17:0b:fa:c2:0e:3f:60:dc:
39:6d:78:55:68:c4:16:01:6d:bc:2b:90:0a:71:6c:52:9f:9a:
27:c2:b8:92:c3:b5:88:27:cf:69:43:77:aa:f7:ed:25:12:d5:
f7:eb:c7:65:03:b2:50:b0:af:ce:05:ca:7e:5d:dc:2f:b1:22:
ae:66:63:ec:b0:1a:8e:24:93:4d:15:57:8c:b3:60:16:56:c8:
72:aa:c0:7c:2c:1c:7d:a1:7d:c2:d7:be:e4:00:a1:4d:4c:e3:
b9:08:8a:dc:df:92:e2:99:a5:5e:e5:24:c3:76:de:84:74:d4:
fd:a8:93:bd:d6:52:29:49:32:33:46:1c:57:85:19:2f:2c:d5:
72:ce:79:a5:7a:bb:92:b7:29:30:20:93:98:65:36:2a:a0:c6:
b9:18:9f:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1oRZpP3FD822CHcUhTMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYmM0MGJjYWI1ZTkwNTNhYjZkYjdkMTllMmEzOGRmMWI2
ZjlhNGIwHhcNMjYwOTEwMTUwMTI2WhcNMjYwOTExMTUwMTI2WjAzMTEwLwYDVQQD
EyhmMzk2NmVhMzYzMmNjOTFhYWQyODRjMTFmMTExOThhYmZlYmE4YmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXE2L2PfzTQxyP9K14Oem8V/8LGO
NY44ZBv4qHSwTTy1g8s2Zi1jBPMVxvocZ5Fo+0qOjkLzcGtp4zz3vq06R2pN3YGg
tkDA+u9CPKZdfjGdZDCB0+8P2kSa3zZdSeO0asTxjasYR0CydfO88reJAslLqowx
i1QHFaYsqgctLGubMRK6vXoWqIZnvL0azfRahe2z9cXJNxQfMKITJL3GNo6ARgvX
jN/qGByrwu36iOHjH1iodMVvWCHfqFeOZ7eVwI2cE/ZQAyqb8Hirbpk20mIC6Wr2
OCv6XLZeKY+4nxH9YbezruETYbcTBChDpMej/JgxIQkrdry6SCVKgevbAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOWbqNjLMkarShMEfERmKv+uovaMB8GA1UdIwQY
MBaAFBG8QLyrXpBTq2230Z4qON8bb5pLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQt
YWU0Zjg0ZTE2Y2ExLzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQtYWU0Zjg0ZTE2Y2Ex
LzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbr3ZoXan
7YLzH0YXuNSOKpxmYGZGfDqBCUggOdl0rxEe1dCBOdwydVLRljz2By1QUeDAFJAd
O6kUjfkaMKiCSXVL/1fWnKoNNBgp5mmYvhEVr1rdyAYmYzi8ef9+jL9ksONjPBcL
+sIOP2DcOW14VWjEFgFtvCuQCnFsUp+aJ8K4ksO1iCfPaUN3qvftJRLV9+vHZQOy
ULCvzgXKfl3cL7EirmZj7LAajiSTTRVXjLNgFlbIcqrAfCwcfaF9wte+5AChTUzj
uQiK3N+S4pmlXuUkw3behHTU/aiTvdZSKUkyM0YcV4UZLyzVcs55pXq7krcpMCCT
mGU2KqDGuRif0Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:46 2026 by rpki-client