Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: SgzZ6xmIvh6V0qDpKudDw+p7yhd9aYsL0EjmFcq+A+8=
Subject key identifier: BD:32:7F:7A:2F:E8:2F:A2:F3:39:53:3D:44:B3:5A:85:7C:30:85:15
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019F90C7CF38CF79119BC28C8449194E2036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 21:00:41 +0000
Manifest this update: Thu 23 Jul 2026 21:00:41 +0000
Manifest next update: Fri 24 Jul 2026 21:00:41 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: l94QpRwcb7WSe2JGEk64VkeIrpnnQj970sC3AlH7Dvg=)
2: LgLPacdhRsAQk7Vm_5r4RdWNxxE.roa (hash: w8JcLAQyevCQky/Dfp2roamWiZayux9j96dBVgl8j+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:cf:38:cf:79:11:9b:c2:8c:84:49:19:4e:20:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Jul 23 21:00:41 2026 GMT
Not After : Jul 24 21:00:41 2026 GMT
Subject: CN=bd327f7a2fe82fa2f339533d44b35a857c308515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:bc:44:78:41:38:fc:01:1c:37:29:02:0d:
ba:1b:76:73:d1:ed:b3:b0:07:79:ed:cb:04:f2:85:
16:73:7f:9d:f0:d1:2f:27:a2:d3:9e:cc:19:69:04:
d9:70:07:fb:ae:71:89:72:c8:99:d8:61:8d:0c:26:
b3:79:2e:52:15:66:28:f4:63:00:5b:dd:b1:be:e8:
91:51:05:ff:de:84:0f:13:5c:3a:f6:8b:c9:7e:44:
8e:f9:5b:5a:33:05:22:18:1f:4e:5a:51:50:5e:0a:
43:92:9c:a0:e9:b2:56:da:16:a0:70:d9:91:fa:81:
1b:f9:a7:27:a4:ca:27:cc:6c:60:f0:e5:0b:5d:35:
05:0c:4d:ef:c0:af:91:43:0f:28:80:fc:96:66:c1:
a4:6f:0e:5a:fb:c9:36:71:2b:65:8d:15:61:58:56:
bc:cf:57:46:69:c7:a5:62:5d:8c:dc:fd:80:e1:6b:
9e:07:2c:20:78:ce:f8:8b:e7:7e:22:27:a5:26:6b:
6f:ed:f9:3c:96:1e:1e:95:18:59:5f:fd:2c:5e:08:
0b:81:63:63:fc:a9:21:24:b8:fd:51:7e:2e:cf:ad:
00:f5:5c:27:df:75:a6:eb:0c:86:46:fc:33:36:aa:
89:5c:1b:32:9b:88:69:70:1b:d4:42:a7:49:63:0a:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:32:7F:7A:2F:E8:2F:A2:F3:39:53:3D:44:B3:5A:85:7C:30:85:15
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:05:72:4a:77:3f:04:97:9b:43:b1:f8:8f:0c:56:0e:1c:a3:
5a:fd:89:ed:14:4c:c0:62:b0:0b:6b:67:81:01:d6:2b:96:13:
94:6d:34:26:f4:e4:01:4c:34:24:4c:ea:49:69:f0:32:53:7f:
52:94:4b:64:0e:44:c6:0e:fb:72:36:7a:26:7c:b4:d0:e8:d6:
95:dc:b9:76:15:5b:c7:eb:e7:ae:eb:28:f2:16:77:be:ff:1f:
90:fd:13:5a:40:a1:ce:45:cc:2c:c4:9f:fe:29:75:45:db:a1:
75:e0:8b:76:50:93:2e:b4:5c:a5:ed:f9:fd:fc:a2:f6:79:3b:
55:b0:10:05:e6:de:25:e6:a1:ae:a2:2d:e6:0e:d1:df:16:98:
2c:65:d7:25:36:69:26:0a:53:08:a8:24:2d:dd:a9:3d:97:4d:
46:2d:a5:60:52:a8:16:de:2c:e9:b1:a1:bf:62:90:b8:54:1f:
f5:32:e7:9a:03:86:b8:f5:54:c0:9c:ac:2c:f4:f2:a9:c3:4d:
39:74:c9:60:20:13:20:e6:6d:4b:dc:a5:ec:3b:11:a9:7e:55:
dc:1e:a5:d6:1e:d6:f9:36:39:14:f7:be:9f:07:f1:8f:ec:9e:
d2:ce:63:9f:6d:ce:ba:a9:37:b7:5d:f3:fd:c3:ec:44:52:46:
6b:3d:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:39 2026 by rpki-client