Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
File: EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json)
Hash identifier: pG+QnFsE1RiUwahe0U6c9Ae1VqsBGpDwJQgjRiYIHdo=
Subject key identifier: 80:5D:DD:E3:E9:B4:B1:6F:8C:73:59:DD:D0:C3:62:C6:56:E5:24:98
Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
Certificate issuer: /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Certificate serial: 019F0BBE6DFDF2D74427DDB6B548E6CC8196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
Manifest number: 040F
Signing time: Sun 28 Jun 2026 01:00:57 +0000
Manifest this update: Sun 28 Jun 2026 01:00:57 +0000
Manifest next update: Mon 29 Jun 2026 01:00:57 +0000
Files and hashes: 1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: yH+v+iJ9LE76gpvrPo+lgauihc6ZbioakeywLBozUTM=)
2: V6MbHQ4IlulkadnPNR4GjRCTQBc.roa (hash: n6NjwhnZOFT/xKrdDQmsqkf3f28sKCszOE0xexeKQjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0b:be:6d:fd:f2:d7:44:27:dd:b6:b5:48:e6:cc:81:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Validity
Not Before: Jun 28 01:00:57 2026 GMT
Not After : Jun 29 01:00:57 2026 GMT
Subject: CN=805ddde3e9b4b16f8c7359ddd0c362c656e52498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:8e:77:63:54:bf:c5:6b:6e:ff:10:b8:b3:
a8:66:42:8b:2f:98:74:08:00:0c:b7:bc:17:ac:5a:
78:5e:70:e2:76:08:29:01:18:c8:1c:3e:03:7b:54:
5a:f6:45:9c:bf:50:d1:82:88:fa:20:5f:4e:02:49:
81:c2:3c:03:13:ef:e2:21:d2:c0:b1:4f:e3:85:69:
cc:89:82:d7:18:8f:e4:93:68:51:cc:8b:67:3f:4e:
6c:28:39:3a:7d:ab:64:64:26:a2:1b:2b:50:d6:a3:
a5:67:df:b5:3a:67:2c:fe:7f:73:9e:79:f6:a7:05:
a6:2d:0e:ca:e8:41:46:86:1f:8a:ff:59:4b:63:a9:
8a:9d:cc:3f:f5:09:20:27:1c:25:b3:ea:f0:25:23:
85:19:b1:b3:54:a9:9d:1f:17:19:ae:56:6a:86:58:
82:00:ea:05:66:30:76:3a:b7:60:fd:b4:f4:1f:2c:
f4:28:91:e7:a0:ad:19:1a:83:ad:b9:78:0a:08:a4:
76:d0:74:95:df:4c:63:af:cb:1d:a2:22:db:89:75:
15:e0:55:eb:d1:fe:82:dd:9b:2f:4a:a3:41:97:d2:
0d:96:5c:c5:85:4c:c0:4f:d8:d4:0e:99:34:86:10:
f9:82:0c:1e:da:eb:1f:78:f9:98:8e:b7:34:51:f2:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5D:DD:E3:E9:B4:B1:6F:8C:73:59:DD:D0:C3:62:C6:56:E5:24:98
X509v3 Authority Key Identifier:
keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2c:6f:77:2b:36:93:34:8e:a3:13:da:2a:82:0d:ad:aa:33:
25:80:31:48:07:d0:1b:6a:af:ac:36:b0:cb:b2:bd:2d:56:31:
d5:8e:e5:9c:35:f0:a0:ef:8e:a8:4c:b1:ca:96:83:3a:83:c4:
8c:5a:6f:ab:2d:68:46:d1:c4:25:41:f6:98:c0:b9:78:03:82:
5f:6c:f6:50:56:38:22:11:a7:dc:ae:9b:eb:63:57:d2:9e:8d:
66:79:b8:c0:bd:84:6f:25:d4:4f:37:1c:1d:1f:bf:a6:d3:e9:
0f:84:42:c1:cd:da:7f:73:bb:29:6b:c6:7c:80:a2:07:e3:4f:
7d:fc:26:7d:c0:fb:64:a7:32:87:78:e8:1a:3d:ec:7c:86:80:
fd:ca:eb:fc:2d:8d:30:09:a7:10:29:0d:3a:61:51:15:8d:32:
86:90:7e:61:eb:02:18:c8:20:4e:f0:d5:31:ad:0d:c0:22:0e:
04:4b:fa:12:28:1c:65:ec:e6:ed:9f:91:56:32:61:32:51:31:
43:f5:76:06:02:32:db:e9:1c:8a:2c:fc:44:b3:23:0b:03:95:
87:c7:fa:2f:15:fb:fa:92:62:b6:01:e3:79:46:9b:81:10:fc:
27:09:6a:ad:34:18:f3:26:ea:4c:51:57:cb:a4:77:d9:bc:2e:
92:30:d4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 04:07:20 2026 by rpki-client