
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json)
Hash identifier: eAl7vt77ucM4M/NI751ptycE3Z6A9HP9SLzHMrX1FRE=
Subject key identifier: 2E:04:AD:F5:F8:80:CE:C3:01:B8:83:3E:BA:F8:27:2C:CA:C9:3D:1D
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 01A178B9EA80BD58E6CADB1E56685A2D3576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
Manifest number: 1BF8
Signing time: Mon 26 Oct 2026 15:00:12 +0000
Manifest this update: Mon 26 Oct 2026 15:00:12 +0000
Manifest next update: Tue 27 Oct 2026 15:00:12 +0000
Files and hashes: 1: BgLIV9uICnmyyWhB50nr5Hx9brY.roa (hash: o61e3ghKRM139TJWeusWYuQb0EEuVVfyccorW0mfd4k=)
2: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: fRE+ppJD1S4Si3hrcQPh3kFP9dkTLqss0H1tfcPTciw=)
3: ExQa4_rJNaEHp9KaigvNnKDL6eU.roa (hash: 53Hf9NPeMQ6qfBPkcUTSGvezuAg+cEKzzFuOc90DUbQ=)
4: Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa (hash: qSiZYwUebITVF7msT4gMb3T5zA9NBTdfmsfNp4wHc7k=)
5: LZKXm-bLhsbXiuFmWld_mUy97PM.roa (hash: rvRDsRBYcjc9lrQ+x4qRkImf0hKdqG8bKXCQWaD0Yuw=)
6: N_jMHQCV1JEhPPm_oX6qQTIggnM.roa (hash: b6P3PLFt3EOLGlIMTrF2szecfsvkbkLCpjvX/hBSTvE=)
7: euBXC6rwjNF3N0PD1PpJMyMwSCI.roa (hash: 0lWahyGCdWHgLVF3U4IuMMbV9OFbVd1ssMeGsLZit7k=)
8: iI-JIIREyrVCRNSoJRI3rD8eag0.roa (hash: zF9D3W/DKJlql6on+FQS1/CzfYptHarWetavG7c7Vrw=)
9: j3miBQqNH9MvtZNlx1-gjZqrqlE.roa (hash: smq4tHXaK2J5Z2RTwqeV0To7ZSM03HiBGbCe7Zo0HKc=)
10: ySs7SU4bjzILxeAanv2fHUaKWo4.roa (hash: vb17VAVAufTzdYM1PaHWAgbmbK4CVZyUxS9hbwz1Rb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:b9:ea:80:bd:58:e6:ca:db:1e:56:68:5a:2d:35:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Oct 26 15:00:12 2026 GMT
Not After : Oct 27 15:00:12 2026 GMT
Subject: CN=2e04adf5f880cec301b8833ebaf8272ccac93d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:25:fb:5b:55:ab:93:db:30:18:f6:9d:e5:
1a:07:49:6d:32:56:c6:6a:bf:46:27:3b:e5:97:71:
0f:97:5d:a0:47:03:d6:e2:d7:c6:3e:c2:d1:ce:80:
b9:9a:90:51:8d:e1:f6:34:75:90:2c:16:19:27:f6:
7f:80:ac:73:85:70:36:5b:92:66:b0:6e:7b:7d:96:
cf:e0:eb:8c:77:ee:ca:a5:74:7a:76:63:e0:b4:9d:
27:ec:07:9f:05:3b:38:9d:ba:04:22:ae:5d:d0:c7:
98:e6:a7:17:2e:c7:aa:0a:b1:f5:d8:88:1c:8d:bb:
d1:af:63:73:de:c2:5c:82:4f:3f:99:ad:fa:ae:80:
7e:d9:de:1e:fc:e6:8d:76:81:b5:f7:b9:10:77:20:
fd:cb:e4:ff:3d:db:51:2f:1c:d5:fd:20:2e:c2:73:
a3:29:b7:8a:59:5d:41:3b:3e:2e:be:52:f9:56:8c:
16:72:72:6b:cb:1d:72:c2:5b:dd:15:87:8c:e5:17:
ff:90:c2:26:1c:6e:6c:ed:ca:76:f8:ea:6b:ce:57:
64:9b:1a:6d:7d:09:0f:f0:a7:d1:3e:ec:63:3d:05:
22:f9:30:d3:5e:81:65:e6:54:69:87:48:af:d4:97:
8f:4f:61:d8:cf:51:a4:fa:41:83:48:8f:7f:92:f7:
77:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:04:AD:F5:F8:80:CE:C3:01:B8:83:3E:BA:F8:27:2C:CA:C9:3D:1D
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d5:eb:f7:2c:0d:fb:25:1a:43:49:39:04:95:d9:76:88:c5:
2c:16:91:eb:b5:d3:45:12:74:0f:09:a3:04:00:72:24:f9:c1:
4c:a2:ce:05:d2:3c:a5:0a:8f:35:93:f3:1e:98:5e:d8:37:18:
21:c9:4c:c5:9d:5e:9c:9d:91:63:a3:e5:cb:40:50:92:a7:f6:
84:a5:32:f9:8b:f4:9b:b5:c0:f0:2b:7b:99:c0:35:2c:6b:a2:
ad:f4:7d:4a:fc:df:93:ee:4f:d3:4d:67:22:56:3d:8d:b6:86:
99:38:cc:35:39:cb:26:ac:c1:94:3d:0e:32:33:e8:5a:c9:9d:
7e:41:82:6c:64:ee:7a:5e:81:f0:6c:09:9c:f2:77:5a:fa:b1:
3b:e2:e5:fa:4c:8e:20:ef:ab:36:04:4a:c9:ba:25:9b:ea:0c:
c0:2f:15:86:86:58:0c:f0:bc:20:27:b8:61:7c:c7:6a:1d:97:
d5:8c:16:91:76:2c:ae:7f:61:4b:8b:ab:d2:98:ef:5e:3f:43:
b3:93:67:63:78:8c:af:d7:c6:a7:a6:aa:07:54:42:10:47:cf:
d3:e5:a1:ea:49:5e:13:56:d8:15:3f:a4:ca:e0:a2:9f:d2:6e:
e7:ba:f3:ed:64:56:90:2c:24:8c:66:77:03:77:c3:94:13:56:
5b:db:b9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:06:10 2026 by rpki-client