Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: EtL+8cW8eqbvUztUEIEgiaRO3+tH68w49SGq+03HQTo=
Subject key identifier: A2:65:61:B8:08:F8:74:5E:70:8B:DB:EB:F4:8C:F2:CF:5C:7C:69:E9
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019E1DFDF9D779EF07BF80174530EDE5C4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 21:00:44 +0000
Manifest this update: Tue 12 May 2026 21:00:44 +0000
Manifest next update: Wed 13 May 2026 21:00:44 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: lp5mt4Vin5UrKk8pnk3fkpG2yBs3R9v/StNgXM4S5Wo=)
2: qvuOHYoyggsc9g8iuTbD4CEqvBo.roa (hash: jWZoQBgvdhifzrjkxPZUHR/6QgarurKmN/mBEWXh09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:f9:d7:79:ef:07:bf:80:17:45:30:ed:e5:c4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: May 12 21:00:44 2026 GMT
Not After : May 13 21:00:44 2026 GMT
Subject: CN=a26561b808f8745e708bdbebf48cf2cf5c7c69e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ba:ea:e5:47:69:2b:17:60:cb:43:f2:0d:c9:
2f:c8:ae:60:74:a6:4b:ff:e8:7d:6e:e4:5e:55:b8:
11:88:85:6d:6d:fa:b5:d9:1a:80:97:7b:1a:5f:a7:
f0:a0:fe:34:ae:52:46:98:cd:91:9d:9a:e1:a2:6a:
69:7f:d0:43:7d:0e:7e:ae:00:26:91:d5:4c:6a:83:
ad:b6:d5:76:db:e9:cc:30:82:84:bb:db:35:b0:e0:
43:b0:d1:ad:21:48:94:12:f3:b8:3b:58:5f:50:79:
02:2d:4a:b3:06:39:ed:3e:ac:63:71:58:72:5a:f0:
7f:67:e0:bd:58:95:42:85:3f:2f:53:d0:b5:89:9f:
13:5d:0b:73:0f:56:af:ce:57:1b:52:e6:19:22:b4:
25:43:38:db:f9:a9:fc:ba:a6:c6:31:b4:1c:7a:cc:
68:dd:14:18:00:15:3b:19:f3:7d:a8:6c:77:22:25:
fa:43:14:37:15:54:4a:3d:27:c4:a3:13:c2:3f:4c:
0f:ae:13:c6:63:6a:89:57:e7:99:e4:7d:1b:26:a7:
03:b9:f4:fd:91:20:83:f5:dd:a8:88:c9:53:9c:8f:
df:17:3f:2c:a3:a0:d6:58:c1:e3:f1:01:c9:aa:30:
bd:4c:54:a8:e8:e7:ea:f9:96:3e:f3:80:38:f9:18:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:65:61:B8:08:F8:74:5E:70:8B:DB:EB:F4:8C:F2:CF:5C:7C:69:E9
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:03:ae:a5:2f:c3:6b:61:8e:45:7e:a1:a0:b8:e8:6c:38:17:
51:ca:8a:64:f6:21:76:a4:3b:3e:61:0c:4b:18:af:9e:f5:7d:
07:a6:74:f4:ba:29:5f:20:87:6d:e6:98:7e:83:10:10:ea:43:
00:29:0a:a3:93:33:3e:67:3a:4b:d5:3a:08:17:00:7b:de:fd:
29:88:99:16:66:e9:16:ae:6f:4b:fa:87:d3:56:69:a4:1f:de:
92:d5:33:7a:36:6b:05:df:69:55:22:76:3a:c2:2d:61:0e:a6:
9b:ed:ef:51:11:ef:ff:a2:f2:df:dc:4b:bc:48:91:9f:83:c5:
76:58:69:ed:d0:fc:0d:1a:33:cf:8c:ad:1e:ff:51:04:07:12:
ed:45:4a:8d:d4:a5:ed:17:7e:be:0d:ac:e1:05:d8:25:e5:1d:
55:03:e4:ea:1a:56:ff:a3:7c:6f:8f:e5:1f:87:9a:b3:f7:c4:
81:15:79:00:38:e8:57:92:c7:92:bc:e0:f2:e0:d3:60:2d:8e:
c7:32:c8:92:4a:e5:12:56:1d:04:d7:73:cd:da:e2:f9:0a:63:
45:1b:7e:5f:8b:0d:52:3b:3a:00:da:a9:75:94:21:c7:83:d4:
0a:3f:af:8e:f7:50:b8:a9:8d:d7:d5:5d:ff:57:4c:10:8f:60:
af:27:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:42 2026 by rpki-client