Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
File: ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft (raw, json)
Hash identifier: ZxIHtCvb/fCAIs6lBeWh5P2c5x7ZpdD35CwohAIylIY=
Subject key identifier: 88:D2:DE:5D:C8:E7:0E:F4:D2:6E:CE:BA:34:A1:7D:14:36:7E:2E:20
Authority key identifier: 79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
Certificate issuer: /CN=79bc498edc4189584874b7cb45025ef542481b6a
Certificate serial: 019D2703E452DB510919C2128D4C4C6E5D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 22:00:59 +0000
Manifest this update: Wed 25 Mar 2026 22:00:59 +0000
Manifest next update: Thu 26 Mar 2026 22:00:59 +0000
Files and hashes: 1: a3hQkooCn8x46O_eURpLJRVcyg4.roa (hash: tnmlw5UaWszHoGLC/j+Q9KSkF66XylpC4Q+T0iyP6ac=)
2: ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl (hash: bPmMSelWn6rd6DSG8wM85ken/rM9R0qyF23k7pRevOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e4:52:db:51:09:19:c2:12:8d:4c:4c:6e:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bc498edc4189584874b7cb45025ef542481b6a
Validity
Not Before: Mar 25 22:00:59 2026 GMT
Not After : Mar 26 22:00:59 2026 GMT
Subject: CN=88d2de5dc8e70ef4d26eceba34a17d14367e2e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:3f:6a:44:5e:2e:76:d4:43:7b:bf:a0:b6:
1b:bf:04:85:b7:9d:59:13:45:59:7e:ea:d3:d2:07:
79:06:c6:b3:56:7b:b8:eb:72:9b:99:d4:2b:d9:71:
39:89:a6:0a:d5:b8:1a:09:be:73:81:11:ea:cb:ff:
19:ae:78:52:1c:ce:0b:30:ba:62:e0:ab:ae:2c:8d:
fb:e2:d7:2f:0c:72:c8:58:3c:8f:d3:ee:35:76:55:
d2:6c:3f:36:78:57:a8:ac:81:a0:da:47:e4:b3:fd:
a0:18:1b:c7:37:f0:d3:76:fd:c7:f5:2e:83:3d:fd:
78:ec:e6:e7:f7:dd:02:aa:c7:18:ea:fb:6f:64:63:
1a:50:85:25:3b:66:e8:24:62:a0:58:ba:02:18:9e:
51:4b:13:72:f5:27:ce:66:6f:82:f6:a2:7b:d1:12:
d3:b2:a5:33:a6:e5:6f:09:93:48:49:4f:dd:4b:0f:
23:90:e7:0e:cd:1b:c2:66:88:73:bc:7c:15:3a:25:
43:72:a0:85:83:9c:11:b1:7c:98:09:68:92:6f:e8:
55:b4:74:65:c0:5f:ac:53:d3:06:3e:b9:92:f6:ca:
e5:08:47:a2:91:32:73:cc:cd:c0:2f:ee:47:87:85:
85:77:e0:62:e7:74:17:60:a7:46:06:13:6b:d4:18:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D2:DE:5D:C8:E7:0E:F4:D2:6E:CE:BA:34:A1:7D:14:36:7E:2E:20
X509v3 Authority Key Identifier:
keyid:79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c0:36:0b:f0:d4:0b:46:1e:50:85:95:aa:3d:bb:9c:71:5c:
3f:3d:a8:59:ae:ef:28:fe:17:92:11:49:0b:ce:25:52:d6:7f:
54:d4:ff:3d:a4:c5:01:8a:39:3c:0e:f4:96:c6:0f:a7:fb:fe:
15:2d:23:b3:9c:a3:70:37:f9:65:5e:ec:7e:40:60:3a:5f:9e:
d1:e8:b1:3e:ba:f8:be:22:ab:26:75:26:dc:e5:30:a1:5e:b8:
18:3d:4e:48:05:c4:17:45:88:b0:21:cb:8c:db:85:ba:fd:4e:
99:df:74:43:b2:77:33:e2:f1:41:af:e4:79:81:ca:f3:30:8f:
c9:d0:29:3d:31:c1:6a:b1:42:1b:16:0a:24:7f:61:bf:3d:3c:
12:fe:38:a6:e2:cd:6a:29:ba:49:e9:7f:b7:56:3c:75:92:2a:
a8:1c:47:98:d5:ea:5c:e3:cf:5a:52:36:dc:55:23:73:a3:cb:
41:85:62:8b:14:fb:13:5e:1a:c7:a6:b1:bb:57:cb:f0:47:18:
2b:2c:d1:62:b1:4d:0c:2d:d4:fc:0b:cc:97:a7:b0:12:45:06:
76:78:97:78:10:7d:c2:63:6e:8a:9f:66:de:3e:c3:71:c3:10:
8b:02:b2:ed:29:8c:c7:c4:4d:32:89:16:51:83:eb:03:2a:d0:
47:44:29:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:57 2026 by rpki-client