Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
File: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft (raw, json)
Hash identifier: mOwiAbfXCneHVtbjaDqqnid+8hTci3xdFZyczuCNz+s=
Subject key identifier: 94:E0:4E:55:8C:10:18:B8:67:3A:33:A3:FB:9C:8B:43:9A:BA:5F:F1
Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
Certificate issuer: /CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Certificate serial: 019D3940B32D59B4624A385C29D362CC921C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
Manifest number: 15AA
Signing time: Sun 29 Mar 2026 11:00:34 +0000
Manifest this update: Sun 29 Mar 2026 11:00:34 +0000
Manifest next update: Mon 30 Mar 2026 11:00:34 +0000
Files and hashes: 1: A3deClBzpmq0rs-elnMt0VsxN6A.roa (hash: e8xeK+mn6g76+UNeiU88SqqbqUAXx6ynALfrPIIw70w=)
2: JFLXszgtKWNB8UXX7n6ocqRtZzs.roa (hash: cE8sRkhHErz5b5DWjzqzoNNykqnd7My1UzU7NgMicdM=)
3: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl (hash: 8SAoglsrYZA3PUWEZNAfsLoq4eLoEOf1uVrA0tIfm3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b3:2d:59:b4:62:4a:38:5c:29:d3:62:cc:92:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Validity
Not Before: Mar 29 11:00:34 2026 GMT
Not After : Mar 30 11:00:34 2026 GMT
Subject: CN=94e04e558c1018b8673a33a3fb9c8b439aba5ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:5a:56:9f:e2:f0:6f:13:f2:6c:6a:4a:9b:
5f:ec:d2:50:a2:f1:a3:08:ac:29:d2:38:aa:73:29:
b9:5b:08:46:ee:19:a4:a0:f5:d5:d6:44:a5:29:68:
4c:95:98:e9:f4:c2:12:4f:43:8e:71:e7:72:84:9d:
b2:93:70:d2:3f:d4:bb:ce:6f:2e:88:4e:f6:de:63:
eb:c0:bf:7f:0c:5c:1d:33:c2:4e:f0:bc:30:7f:ff:
8e:ce:8c:26:99:7d:66:e8:0e:ab:16:d2:39:e0:23:
e7:de:c9:43:ff:c8:dc:37:81:71:2b:06:56:0a:f3:
51:dd:ac:4d:48:83:89:09:a7:29:70:f5:95:db:b7:
b3:7e:34:52:62:5f:fb:ef:f0:73:86:86:25:b7:36:
69:5f:ec:49:d3:57:b3:09:a8:a9:3d:25:0b:d1:60:
b2:2b:90:f0:dd:64:de:d2:53:57:0a:56:76:4e:9e:
e0:87:77:09:72:0d:9f:d2:e3:a4:0f:18:a7:31:ba:
11:2a:63:12:ac:b1:0b:20:a9:31:8d:03:87:4b:49:
51:92:a0:6c:8c:14:1f:14:0a:de:79:9c:1c:73:da:
05:77:73:e6:f7:45:0f:ce:0d:41:7b:7f:6c:a7:98:
6f:af:f9:74:80:74:9d:22:86:7d:cb:65:61:09:47:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E0:4E:55:8C:10:18:B8:67:3A:33:A3:FB:9C:8B:43:9A:BA:5F:F1
X509v3 Authority Key Identifier:
keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b6:67:9d:81:57:33:e5:69:18:62:db:c5:46:87:57:a4:43:
f8:c0:57:2d:17:6c:bc:b9:8d:88:23:4a:e4:89:a6:62:9c:fd:
48:bf:e0:85:ad:a2:4d:f4:69:2e:88:21:a9:cc:ce:9b:f3:e8:
af:6f:6d:b8:2e:8c:67:98:39:f8:d9:ba:9b:bb:2b:3f:11:11:
c8:45:c8:37:c1:ea:ff:8d:bd:cb:a4:ad:4c:29:0a:02:8f:4f:
69:3a:cc:50:93:44:0a:4e:c7:62:80:79:26:58:ce:ce:3b:a8:
37:30:6f:e0:24:b1:5a:49:82:c8:94:f3:1b:6d:36:93:05:58:
0d:dc:7a:86:d1:d8:3f:83:5a:d4:21:d6:77:51:ee:ae:70:98:
c6:47:0e:da:85:62:a1:2c:83:ff:2d:18:73:b8:27:74:d5:de:
5b:ba:6c:78:c1:ff:46:0a:3a:ae:b1:81:c8:fb:b5:dd:7c:28:
e0:06:f6:04:e1:86:7e:21:5c:5a:3c:de:8e:87:fd:b4:14:34:
90:6c:7b:a3:d6:39:95:59:8c:9b:ef:73:8a:5a:f9:42:2c:3e:
64:18:6a:f0:3b:04:cd:7d:56:cb:84:e8:22:ab:65:00:64:5f:
07:e4:8b:f5:e1:74:7f:fb:92:b1:0e:ba:65:fc:b1:32:85:92:
05:34:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:01 2026 by rpki-client