Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier: CzsnrxdqrMEBFDXK1J9o6uLaP1TGpfW10HThUWTrzb8=
Subject key identifier: 0E:3C:1C:2D:6A:6B:86:C8:50:4E:31:C0:74:8C:DE:B6:87:EF:59:19
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 019D3865FEB33050A029345B9DC6367F60EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 07:01:41 +0000
Manifest this update: Sun 29 Mar 2026 07:01:41 +0000
Manifest next update: Mon 30 Mar 2026 07:01:41 +0000
Files and hashes: 1: 1-77MLKbMDtDiajP4cnfRaQ3miEM.roa (hash: uR4xAscZt2UY723RU9mF1OjyVpc+mJ5l3PG1PYSxgqc=)
2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: WaPBz461nnB9pose9aEjiG5VcvJOB+0ge2TTXQsktFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fe:b3:30:50:a0:29:34:5b:9d:c6:36:7f:60:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Mar 29 07:01:41 2026 GMT
Not After : Mar 30 07:01:41 2026 GMT
Subject: CN=0e3c1c2d6a6b86c8504e31c0748cdeb687ef5919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:03:e0:1e:70:4e:23:94:8d:08:14:63:30:
b0:55:1c:11:dd:9a:9d:f2:1a:16:7d:27:53:00:86:
0b:d5:ce:a7:df:31:8c:9e:d8:ba:16:6e:43:21:e4:
fe:16:42:e2:ba:06:34:9c:a2:4b:32:ef:a5:ec:23:
0a:2e:4e:a5:83:2b:f4:2a:7d:5c:cc:91:82:36:39:
09:72:51:52:cd:df:f9:46:af:f6:af:de:85:b3:9a:
2b:9e:a5:8f:ac:e0:0c:e3:63:6e:0f:8a:68:72:df:
56:97:41:01:4c:b8:b8:47:41:fd:ec:e9:ad:76:4b:
ed:7c:ba:9a:4a:50:d8:1f:b3:07:aa:4f:c8:5c:2f:
36:8f:ba:71:b3:28:10:d6:c4:65:60:e9:a4:81:52:
f7:9b:7a:89:4e:08:a5:e2:6e:1f:fa:0e:4c:33:f5:
e5:5d:1e:22:94:ea:9a:3e:32:63:80:3a:af:78:e9:
99:51:2f:ee:75:f1:fe:6d:4d:b9:42:ed:0a:67:c0:
17:b1:48:79:e6:bd:fc:84:e5:e2:b0:19:7f:a0:ea:
fa:ea:16:b5:74:51:27:c5:3d:1c:78:81:3b:90:75:
b8:6e:dc:08:bd:64:38:35:c7:25:63:a1:ee:85:a0:
4e:a7:3f:44:5f:4a:49:d7:cb:b1:95:f5:d1:6d:e9:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3C:1C:2D:6A:6B:86:C8:50:4E:31:C0:74:8C:DE:B6:87:EF:59:19
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b6:60:1f:19:f7:c7:cf:90:4d:d2:b3:35:0f:ce:7b:20:db:
8e:b8:f6:30:34:c5:d1:7b:1b:ea:2d:9e:68:86:a8:ed:9e:dc:
74:20:34:f5:f4:a4:8b:21:63:44:fe:2f:03:ae:2d:17:ca:20:
fd:ec:29:d8:09:1e:89:ad:2a:c5:1c:12:6a:d0:57:c8:01:0e:
b1:3a:fb:7a:57:aa:b7:22:13:2a:91:8f:85:4b:5d:1b:63:34:
ad:ce:eb:1c:bf:5e:05:4a:b5:e2:c7:49:78:9b:f8:7d:9e:f6:
08:de:df:49:83:82:d6:e2:f5:19:b2:dc:9b:00:74:ce:ca:fb:
98:90:f4:bc:7c:50:e7:c5:8c:dd:9e:bc:88:60:69:9e:e1:48:
87:73:80:d5:42:47:6e:0b:13:24:7c:d7:4c:dd:26:a6:3c:02:
94:7a:ad:b2:31:28:41:6e:28:76:e5:1d:86:60:63:a3:1f:2a:
3e:6d:34:3c:34:56:5d:03:13:f9:c1:ce:12:51:44:e4:6b:6a:
bd:38:f3:fc:85:3d:42:c8:21:dd:fb:5f:dc:18:0a:81:7b:81:
ca:51:e0:c5:e4:f6:8f:7d:67:fe:7b:a0:8e:63:52:35:9c:0f:
31:1c:34:c5:ef:e8:9c:19:77:a6:cb:b2:29:58:85:83:9a:2e:
64:ce:9e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:26 2026 by rpki-client