Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
File: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft (raw, json)
Hash identifier: /J9EJWiVjVIdxybt3/nr/mK8ryNr7BVwxoQJU3RovgE=
Subject key identifier: 6B:D8:BC:F1:8D:21:6A:96:A5:1A:3F:8C:D0:15:42:DC:DE:26:B6:29
Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
Certificate issuer: /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Certificate serial: 019D378909FC5C0DF32FF2DF6065A16717BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
Manifest number: 109D
Signing time: Sun 29 Mar 2026 03:00:20 +0000
Manifest this update: Sun 29 Mar 2026 03:00:20 +0000
Manifest next update: Mon 30 Mar 2026 03:00:20 +0000
Files and hashes: 1: 4TurvPB_ohFcEmoz-eVrTSXPuRI.roa (hash: gkcJydL0EzTSV6KSKCn0sG/zjtNhD9jooKJCUpapYy8=)
2: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl (hash: BRY8Ch6Cl6WM1tj2YhMU9aiKyFl1Cj+GwR2z0LTDRs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:09:fc:5c:0d:f3:2f:f2:df:60:65:a1:67:17:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Validity
Not Before: Mar 29 03:00:20 2026 GMT
Not After : Mar 30 03:00:20 2026 GMT
Subject: CN=6bd8bcf18d216a96a51a3f8cd01542dcde26b629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:2c:18:4c:b7:0f:2a:90:24:0b:f6:01:fc:
6f:c9:85:db:4a:fa:3e:4a:7c:9f:dc:3d:ed:16:e7:
26:19:69:ce:c1:2f:b7:94:69:5a:20:be:b3:a0:f3:
d0:dd:fa:0a:bc:2c:ed:96:ff:34:7a:ae:20:0f:df:
d8:8b:c3:5e:86:ce:8a:eb:2e:c2:36:18:cd:31:c5:
95:fc:c5:cd:f6:40:17:16:f1:57:42:28:d2:7e:c7:
2c:a6:85:97:06:47:62:1f:b2:e7:81:0d:38:c1:ef:
f4:e3:58:cb:f1:22:5d:25:47:bc:7c:63:d7:2c:54:
0f:6c:1f:2b:04:ea:09:dc:fc:f4:6b:f3:8b:74:bd:
f5:10:cc:21:d9:cd:02:2a:72:bf:7a:b2:89:f3:e9:
c0:eb:20:11:22:16:98:47:57:43:e0:00:f5:e3:17:
79:4a:bd:b3:77:d3:ba:a6:fa:0b:70:18:83:cc:4c:
e2:73:ae:19:4b:1c:85:bb:88:0c:b7:c1:5f:62:11:
91:7f:bd:48:b7:e8:e3:aa:d2:0d:64:83:de:cd:30:
55:4a:45:9c:28:30:37:b6:05:63:ae:54:a5:20:4f:
98:c0:85:07:ca:17:09:b3:92:d0:c5:08:e5:79:ba:
c1:8d:84:87:57:59:cb:08:46:63:48:22:ee:1a:ea:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D8:BC:F1:8D:21:6A:96:A5:1A:3F:8C:D0:15:42:DC:DE:26:B6:29
X509v3 Authority Key Identifier:
keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:60:ab:a8:87:4d:6f:89:fa:b1:9e:6e:78:78:1a:38:70:bf:
24:ae:a4:31:46:73:01:d1:cf:81:fc:81:22:2b:ee:36:3b:83:
37:73:0c:6a:ec:79:45:cc:6a:2c:5d:8d:6b:58:48:0b:02:8c:
69:e8:b7:2f:2f:30:21:4c:38:90:b3:0c:08:53:37:7d:b4:20:
e7:55:e0:9a:e7:bf:70:e0:53:04:9c:5e:5e:6c:9e:c7:f4:82:
c5:c0:8e:b7:ae:61:a1:60:16:ed:03:7f:27:19:3c:93:50:da:
b6:1a:23:51:27:90:35:d7:ea:d4:e8:cf:0f:44:68:45:40:4d:
a4:6b:d0:ad:46:4c:50:c1:23:3b:fa:43:05:f7:7f:ca:88:af:
51:b2:71:2f:5b:a2:5e:6c:33:51:a5:b2:2e:5b:bc:73:27:eb:
99:61:16:10:5f:84:dd:d6:60:c0:23:76:d5:67:75:0b:20:96:
4e:6d:78:6a:45:01:b2:d2:8d:63:c2:1a:85:90:5e:cf:9d:3b:
66:d2:d7:e9:fd:26:56:e0:9a:43:0a:89:5c:a8:7e:e3:29:65:
99:5a:fb:d9:b7:97:e0:78:2d:ea:41:bf:69:47:95:0e:78:c5:
55:55:5a:b8:2a:bb:1a:47:d1:7e:c4:cd:9b:76:dd:df:65:e7:
31:45:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:05 2026 by rpki-client