
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json)
Hash identifier: 38isqKDDTCo7ADU+yI5RUbX8rtEvBIKCz5BYPGhxh+Y=
Subject key identifier: D6:A7:4B:01:EF:86:89:7D:8B:D1:1E:2C:05:4E:EE:43:02:92:F2:68
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 01A0D15C31C577DC6F10831B5D93DD6A5659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
Manifest number: 1B97
Signing time: Thu 24 Sep 2026 03:01:15 +0000
Manifest this update: Thu 24 Sep 2026 03:01:15 +0000
Manifest next update: Fri 25 Sep 2026 03:01:15 +0000
Files and hashes: 1: 0kwfeb-8KYnjT1DaXTFg8NKV5Qs.roa (hash: NXuZo/nEKglyJiMys1lOF8MOKYcVQUjHhjrhGVTXb8w=)
2: 1ZS7cc_tEEysPYF4DOTIIcIT1ao.roa (hash: lmYN+w7oqIwz91IkaBPnHvUwV7oLDKZRMqJbBK9c1n0=)
3: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: LPTjvQPqsPO1NSZz1SQTWVkJuwhQ+p6LMHiFeyuXZcs=)
4: ExQa4_rJNaEHp9KaigvNnKDL6eU.roa (hash: 53Hf9NPeMQ6qfBPkcUTSGvezuAg+cEKzzFuOc90DUbQ=)
5: Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa (hash: qSiZYwUebITVF7msT4gMb3T5zA9NBTdfmsfNp4wHc7k=)
6: Kuq3P7Qo7dY0uDSDfQAvQ-YqzYw.roa (hash: SgrkljN25ZyMwMNQeGikKgqlI+HrgpswmKROiJL7Gko=)
7: euBXC6rwjNF3N0PD1PpJMyMwSCI.roa (hash: 0lWahyGCdWHgLVF3U4IuMMbV9OFbVd1ssMeGsLZit7k=)
8: j3miBQqNH9MvtZNlx1-gjZqrqlE.roa (hash: smq4tHXaK2J5Z2RTwqeV0To7ZSM03HiBGbCe7Zo0HKc=)
9: vIuaHhw5-i00cPHH0vZ_LmseB00.roa (hash: bHcmA3+3imH7FcDE4PSlxFxFCMqyJAFjvPvcad59hYc=)
10: ySs7SU4bjzILxeAanv2fHUaKWo4.roa (hash: vb17VAVAufTzdYM1PaHWAgbmbK4CVZyUxS9hbwz1Rb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:31:c5:77:dc:6f:10:83:1b:5d:93:dd:6a:56:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Sep 24 03:01:15 2026 GMT
Not After : Sep 25 03:01:15 2026 GMT
Subject: CN=d6a74b01ef86897d8bd11e2c054eee430292f268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:21:49:86:04:aa:3e:5f:ec:67:cb:50:b3:c0:
d9:a0:46:ff:95:10:d2:3b:15:69:67:c9:61:30:65:
d8:f1:61:3a:f5:22:d4:b9:5c:6e:96:e2:03:bb:a4:
77:10:e3:77:e8:6b:f8:f9:e5:18:86:55:99:78:d8:
1e:ef:58:1c:bb:5a:27:ee:b6:09:77:8d:54:92:13:
8b:b4:b3:ea:77:e9:23:62:0f:62:19:44:04:e6:12:
8f:93:3a:00:a0:fc:c7:06:87:82:41:4d:41:52:ce:
95:d0:eb:8e:b9:14:6f:65:51:3e:6e:33:0e:b5:c4:
31:bc:f3:55:a2:d7:98:9b:cb:56:67:ed:9e:b2:94:
bc:9c:2a:d3:2e:f9:61:09:25:f5:9d:f6:b3:9b:ab:
ee:fa:5a:57:00:18:f1:b3:f9:bc:44:a9:3e:ac:6b:
b8:12:0f:45:53:3e:a2:5d:b4:82:88:b3:a1:a8:0b:
aa:f1:e0:d1:06:8d:2c:30:43:89:ff:5f:f3:22:5c:
a3:fd:d4:29:e9:dd:04:d2:8a:a3:c4:3c:72:79:64:
28:5d:99:e0:3b:4a:cf:87:45:4e:ee:ee:1c:f1:c7:
58:39:1f:5f:a7:51:d2:02:a9:d2:66:3d:5d:f9:30:
75:77:22:cb:95:e5:6b:c2:aa:b8:7d:60:c8:1d:ff:
90:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A7:4B:01:EF:86:89:7D:8B:D1:1E:2C:05:4E:EE:43:02:92:F2:68
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a6:ca:39:6c:b1:32:3d:65:6d:ea:40:b1:fb:1a:08:58:c8:
ca:8b:86:76:d6:ce:e4:6b:3a:9a:53:85:16:a6:2c:49:99:a9:
92:a5:22:9a:7f:38:44:51:24:64:f4:8e:62:bf:29:26:8d:7a:
37:1d:06:c5:a9:2a:25:0d:5e:52:9a:21:d0:f4:7c:fb:09:bf:
4c:07:50:fd:20:0d:d0:fa:97:1e:58:80:a1:a4:c3:ce:b5:00:
04:ea:5d:87:5b:3e:a2:bc:be:ce:1e:40:2d:f3:f6:19:3c:44:
f8:15:b5:3e:a5:8e:b4:be:19:21:ee:17:df:85:a7:e5:57:b4:
d7:8d:b4:ce:3a:5f:1c:a7:b0:c0:77:90:8f:99:f4:49:06:87:
65:4f:74:90:d5:43:06:5b:fe:f4:40:87:5f:24:0c:19:40:52:
4a:87:f2:d4:b5:9c:23:1f:d7:c4:2e:02:bd:a6:7b:1c:d2:54:
45:03:94:0d:aa:8e:6d:32:00:ac:d7:24:e4:5f:63:c3:da:58:
37:89:9a:59:2f:e9:0b:9f:9a:a8:89:5f:15:60:63:90:e2:72:
6c:19:d5:6e:73:32:51:d2:8a:94:36:e8:b4:d5:86:16:fb:70:
f4:0e:ce:e9:25:fe:ca:d5:8a:39:dc:1c:2c:31:d2:35:9b:f0:
ab:f0:6e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:21:51 2026 by rpki-client