Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: QIuo9vfc7FwsJCCslJsm9fQdO+Lr5vEXdEkuqle3KPw=
Subject key identifier: 37:6C:F6:6A:E2:3F:AD:41:D7:A5:C5:4F:74:F7:CA:A6:20:11:00:BD
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 01A0D916E74F2470AB9A5EDF518F4B63CD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 15:02:31 +0000
Manifest this update: Fri 25 Sep 2026 15:02:31 +0000
Manifest next update: Sat 26 Sep 2026 15:02:31 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: yQcf8qB1gUX7nTJ6ItjyyCOLwoC++NKidLpKyTjyTxc=)
2: LgLPacdhRsAQk7Vm_5r4RdWNxxE.roa (hash: w8JcLAQyevCQky/Dfp2roamWiZayux9j96dBVgl8j+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:16:e7:4f:24:70:ab:9a:5e:df:51:8f:4b:63:cd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Sep 25 15:02:31 2026 GMT
Not After : Sep 26 15:02:31 2026 GMT
Subject: CN=376cf66ae23fad41d7a5c54f74f7caa6201100bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:46:cf:d9:52:b4:d1:f8:16:31:38:6a:5d:
ff:f7:be:e8:c0:67:99:fd:3c:7d:db:47:69:64:04:
72:4e:e3:a1:cf:5f:19:1c:e2:a8:70:b9:06:1a:68:
30:69:b6:de:2b:f8:34:e1:e9:3f:2d:43:c6:b3:7a:
41:52:29:d5:9e:5e:a5:dd:24:d5:26:04:a4:51:05:
80:7c:c8:b0:b0:55:94:76:ae:9b:70:0f:9d:d6:c5:
d0:86:e9:5e:53:48:fe:7d:d4:da:2d:ef:13:74:80:
bd:f9:07:c1:98:67:33:a1:18:60:80:8c:20:cc:b0:
9b:fa:46:7f:3f:71:c4:94:8e:86:af:14:94:3a:b0:
d5:d7:d1:36:6d:5d:3e:6e:a3:f3:67:ff:fc:61:9a:
73:2e:61:e5:34:ca:a8:ec:f6:30:cc:d5:84:97:76:
eb:87:f4:30:d6:a9:0a:61:df:57:83:97:1b:03:85:
37:12:82:85:a3:17:60:0e:d0:35:ff:a0:a2:75:bf:
f7:9b:78:7e:75:0f:47:ca:a8:be:c3:98:ad:32:5b:
95:1e:e6:b5:a7:b1:1d:59:aa:4c:01:87:b8:ed:5a:
a0:34:9e:52:19:70:0b:b4:38:14:dc:d1:31:3b:0a:
ed:50:7f:82:91:db:6a:4f:0b:ee:06:11:25:ad:31:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6C:F6:6A:E2:3F:AD:41:D7:A5:C5:4F:74:F7:CA:A6:20:11:00:BD
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c1:8e:21:52:91:1b:37:ad:c9:11:dc:1f:8c:ca:15:1e:fa:
e5:83:22:8b:b4:78:95:a5:6f:e3:7f:ef:57:c0:82:76:f3:8b:
7a:11:41:40:07:df:bd:d0:88:cc:d8:de:9a:38:76:c2:cd:d3:
32:05:eb:3c:c3:92:7b:69:9c:3c:b0:1c:cb:8b:64:54:2c:15:
20:ae:d5:fb:0e:25:d5:4e:b5:75:75:3a:f0:8a:ea:f9:08:4e:
37:72:3c:e5:fb:7e:15:98:45:1e:0a:49:12:0c:b4:ea:4c:4f:
18:cc:da:6b:8f:e9:ec:5f:a7:11:94:55:43:e1:e7:e3:5e:f0:
a2:c6:31:a5:30:2a:36:56:48:5e:92:8e:52:58:f7:33:9e:d5:
be:c6:c6:18:0f:69:03:5e:d9:51:e4:d3:42:aa:35:d9:9e:49:
81:7f:65:03:03:6b:f4:df:df:f8:53:52:ef:af:0a:47:e3:c7:
a4:d0:c5:08:58:ca:e7:94:f7:41:2f:f7:39:a2:0e:51:c0:cf:
d4:8f:be:e6:2c:63:e6:90:32:04:5b:3d:7e:ae:32:45:ef:8b:
15:77:41:84:2d:be:87:1d:f6:fa:fe:e0:72:e9:16:30:b0:29:
c6:7d:26:ac:d7:41:4c:bf:d1:c8:80:e4:b3:62:3e:9e:5a:85:
cc:ca:24:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZFudPJHCrml7fUY9LY80eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYmM0MGJjYWI1ZTkwNTNhYjZkYjdkMTllMmEzOGRmMWI2
ZjlhNGIwHhcNMjYwOTI1MTUwMjMxWhcNMjYwOTI2MTUwMjMxWjAzMTEwLwYDVQQD
EygzNzZjZjY2YWUyM2ZhZDQxZDdhNWM1NGY3NGY3Y2FhNjIwMTEwMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWNGz9lStNH4FjE4al3/977owGeZ
/Tx920dpZARyTuOhz18ZHOKocLkGGmgwabbeK/g04ek/LUPGs3pBUinVnl6l3STV
JgSkUQWAfMiwsFWUdq6bcA+d1sXQhuleU0j+fdTaLe8TdIC9+QfBmGczoRhggIwg
zLCb+kZ/P3HElI6GrxSUOrDV19E2bV0+bqPzZ//8YZpzLmHlNMqo7PYwzNWEl3br
h/Qw1qkKYd9Xg5cbA4U3EoKFoxdgDtA1/6Cidb/3m3h+dQ9Hyqi+w5itMluVHua1
p7EdWapMAYe47VqgNJ5SGXALtDgU3NExOwrtUH+CkdtqTwvuBhElrTFQOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDds9mriP61B16XFT3T3yqYgEQC9MB8GA1UdIwQY
MBaAFBG8QLyrXpBTq2230Z4qON8bb5pLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQt
YWU0Zjg0ZTE2Y2ExLzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQtYWU0Zjg0ZTE2Y2Ex
LzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsGOIVKR
GzetyRHcH4zKFR765YMii7R4laVv43/vV8CCdvOLehFBQAffvdCIzNjemjh2ws3T
MgXrPMOSe2mcPLAcy4tkVCwVIK7V+w4l1U61dXU68Irq+QhON3I85ft+FZhFHgpJ
Egy06kxPGMzaa4/p7F+nEZRVQ+Hn417wosYxpTAqNlZIXpKOUlj3M57VvsbGGA9p
A17ZUeTTQqo12Z5JgX9lAwNr9N/f+FNS768KR+PHpNDFCFjK55T3QS/3OaIOUcDP
1I++5ixj5pAyBFs9fq4yRe+LFXdBhC2+hx32+v7gcukWMLApxn0mrNdBTL/RyIDk
s2I+nlqFzMokgA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:04:00 2026 by rpki-client