Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: ORKg6+BO6cpdKVCSDJAMCkCcm1yJ7wiD+ESF2iOAgVk=
Subject key identifier: CA:CE:D3:4B:40:DA:79:70:02:EB:1F:8E:D0:BF:64:D9:9B:71:E1:32
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019D26CD3FC9394234506DD12B9B9F3D7E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:01:18 +0000
Manifest this update: Wed 25 Mar 2026 21:01:18 +0000
Manifest next update: Thu 26 Mar 2026 21:01:18 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: QkOPf3Dr7RThIq8SKhOq3FNO5GhKpeb6HD8Te6OBBO0=)
2: qvuOHYoyggsc9g8iuTbD4CEqvBo.roa (hash: jWZoQBgvdhifzrjkxPZUHR/6QgarurKmN/mBEWXh09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3f:c9:39:42:34:50:6d:d1:2b:9b:9f:3d:7e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Mar 25 21:01:18 2026 GMT
Not After : Mar 26 21:01:18 2026 GMT
Subject: CN=caced34b40da797002eb1f8ed0bf64d99b71e132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:e2:55:09:99:55:29:50:b2:28:10:bf:24:
02:5f:d1:d8:0f:34:87:91:33:11:77:4f:00:d5:67:
ad:06:3c:57:9e:c7:56:44:48:6b:3b:ca:9d:1b:6f:
9e:7f:80:78:f2:18:b1:fd:ae:9e:90:5d:4c:59:92:
ca:f5:5a:ba:2b:eb:40:55:58:dc:e0:7b:13:b2:83:
d9:88:1f:54:0d:15:e0:fa:ea:2f:79:4e:5a:f1:8d:
6a:a9:a4:5a:c0:40:3f:34:a8:ca:bc:6f:a7:73:fc:
a9:9f:6a:3e:3f:74:52:b2:3f:16:45:2e:e2:d6:cf:
a0:26:2c:b0:f1:6f:03:84:97:e0:57:f0:29:3d:85:
6b:f6:b4:47:c9:9f:b2:9c:be:ef:1f:49:81:53:92:
28:aa:b8:bf:be:65:8c:02:74:21:f7:5a:c4:24:79:
6d:83:a2:31:00:00:ea:a3:87:66:87:96:ce:a7:9b:
74:db:07:96:d4:2d:b1:63:14:f3:db:01:9c:a0:b2:
a2:26:8b:d7:0b:14:80:c2:41:45:68:22:78:29:a5:
da:0f:96:f2:78:d6:31:4b:4e:3d:0f:24:14:63:b0:
5f:30:f2:38:e7:8b:b6:63:78:d3:bd:a9:7d:6d:ec:
aa:71:a8:0b:1b:ce:24:5a:f9:32:c9:ba:7c:ff:98:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CE:D3:4B:40:DA:79:70:02:EB:1F:8E:D0:BF:64:D9:9B:71:E1:32
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0f:09:2e:a5:60:b5:ca:60:4e:77:29:48:43:99:d9:24:95:
ee:af:bc:fe:5e:eb:3b:cf:89:b0:dd:a5:80:ad:43:d3:8e:0b:
80:58:37:3c:82:f8:88:51:02:1e:19:53:13:ae:67:7e:36:7a:
73:3d:8c:9d:9d:cc:ba:17:1c:28:10:ec:19:62:82:1c:24:ae:
e0:cc:8c:a5:b0:49:b9:ae:0b:c2:9f:43:32:10:20:e7:7c:62:
13:ad:1b:c1:41:83:f9:09:1b:2c:bb:e6:ab:e6:d4:9b:f7:b2:
95:d9:b0:ed:a3:0f:ee:08:0e:3d:d2:70:6f:c8:bf:0c:02:42:
3c:13:4c:7e:bb:2f:5e:a1:55:1e:4d:0b:cf:ed:84:45:84:ce:
e9:6b:97:23:be:1f:d8:83:98:d3:99:2b:29:fa:60:29:1c:2a:
30:78:1c:04:01:97:88:91:d9:b9:d5:7a:69:83:60:e9:d5:82:
b8:f5:4e:bb:e1:c0:d2:8e:a0:b7:89:28:0e:fe:fa:34:54:c5:
05:10:d7:27:d6:ee:7a:29:e9:0a:15:64:26:e5:0b:3c:c1:c8:
76:d7:46:74:f1:e6:35:3e:99:a4:6c:dc:21:11:f4:ea:3a:09:
7a:75:38:58:a6:1d:a1:d6:d1:ed:8f:d8:ab:93:95:ed:cc:9e:
6b:71:72:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:22 2026 by rpki-client