
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json)
Hash identifier: JMmYpfyfOVgCDe+HHnRJO0y3G7+es2rDeK48d3LmOWw=
Subject key identifier: 3E:8D:EE:D3:5E:B7:A2:D6:18:1E:1A:D0:CB:92:6A:29:5A:F8:5B:F3
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 019E1EA32925B227162D461BDEE93FB68F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
Manifest number: 1A16
Signing time: Wed 13 May 2026 00:01:09 +0000
Manifest this update: Wed 13 May 2026 00:01:09 +0000
Manifest next update: Thu 14 May 2026 00:01:09 +0000
Files and hashes: 1: 0kwfeb-8KYnjT1DaXTFg8NKV5Qs.roa (hash: NXuZo/nEKglyJiMys1lOF8MOKYcVQUjHhjrhGVTXb8w=)
2: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: rJx7tCQ4Gl9uDQXycWBkX7mnuuZlqwQFydBwJ6W4aGw=)
3: ExQa4_rJNaEHp9KaigvNnKDL6eU.roa (hash: 53Hf9NPeMQ6qfBPkcUTSGvezuAg+cEKzzFuOc90DUbQ=)
4: Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa (hash: qSiZYwUebITVF7msT4gMb3T5zA9NBTdfmsfNp4wHc7k=)
5: RiCeGoLJLFsyXLs4imgog-X_h40.roa (hash: m5IiGNSxjj3YSYsLMUU0YB0kkycBv85oeXqVJ5P7/kM=)
6: X5_OOiiCcGiXKcGALlcB_hscUHs.roa (hash: Qj/ZlInW3VgI1VUQwqxEhpwqlf4BE1RLFh2kkgSMtX4=)
7: _3kzqKok3z7fQDLrnmIfOGBMWpE.roa (hash: vrsV62/+f0qeXZvSNXU86WQluWpB748JDnGujS/D0TU=)
8: dt_h2jDFaKqkzIddYe0TXBQ7Xa4.roa (hash: 8m1NdBfkMSUGjrc+bNSbL42mIAkudYh1k64Oy2V2C/E=)
9: euBXC6rwjNF3N0PD1PpJMyMwSCI.roa (hash: 0lWahyGCdWHgLVF3U4IuMMbV9OFbVd1ssMeGsLZit7k=)
10: jgyIRRC_MNSudQTkVP4EtLCsoZ8.roa (hash: xBXvcNCMuyJKe1tYP4xJcn0Ua+9Z39MZ8ks982crXdw=)
11: ycPOYoC5EGigYRPsY5jd06bUctI.roa (hash: 0z4I48mSoM+33E5faSNq5zd4kWbj90tYgYiQSwWbs+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:29:25:b2:27:16:2d:46:1b:de:e9:3f:b6:8f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: May 13 00:01:09 2026 GMT
Not After : May 14 00:01:09 2026 GMT
Subject: CN=3e8deed35eb7a2d6181e1ad0cb926a295af85bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:16:36:f3:bb:16:3d:c8:13:92:d6:6b:a8:
e6:a0:aa:54:96:57:b4:86:df:55:64:21:ee:8c:0c:
58:0f:8a:ce:57:8c:73:0b:f9:e1:22:26:cc:f3:fe:
51:03:2b:1e:63:dc:80:00:7d:6a:a2:a0:8b:13:23:
8a:b9:5b:46:f7:62:8c:12:f8:fe:da:5b:c1:da:d6:
fe:e6:a6:a5:49:ad:c7:ad:40:70:9d:57:e9:4c:5c:
09:28:9e:ac:67:73:cc:15:d2:d4:dc:31:9a:89:72:
88:e1:e8:cd:4a:2c:cf:1d:c4:bd:8a:c1:d7:fd:91:
f5:b4:c5:3e:4f:97:bb:23:2b:30:09:a2:3a:d6:07:
b7:70:b5:3d:11:89:81:34:79:eb:f8:1e:12:f9:60:
04:2a:6a:69:bb:ac:c8:49:54:4d:db:bd:4d:9d:9b:
23:23:22:e7:21:a5:26:e3:70:8a:38:d2:f6:09:40:
c8:31:ca:f4:f9:72:11:77:65:0a:69:36:54:8b:58:
22:3c:e7:4f:b8:79:fd:cd:ec:10:0f:12:f3:64:16:
18:a8:aa:5f:78:4a:22:b9:e2:d5:7f:d6:27:1f:6e:
19:b9:40:29:2b:2a:31:aa:35:fd:da:16:6a:67:4a:
04:3b:35:d1:73:f8:79:f7:36:32:f9:43:32:38:7f:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8D:EE:D3:5E:B7:A2:D6:18:1E:1A:D0:CB:92:6A:29:5A:F8:5B:F3
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:44:da:ab:f3:e3:8e:d6:8f:68:41:0b:31:42:da:d5:fa:6e:
af:01:58:c7:9b:c1:44:34:aa:f4:fa:a1:1b:04:a5:78:26:80:
59:d4:cc:85:0c:bb:6b:28:72:20:1a:d6:1b:67:c3:6f:59:c3:
a5:f4:8c:59:07:d4:31:25:19:28:53:70:15:cf:92:23:b2:2f:
ba:41:e5:87:62:08:b3:92:eb:52:dd:d1:6f:47:6c:cb:5f:07:
c7:f9:14:2e:d0:ee:ef:82:72:93:b4:bf:a5:2b:70:0f:3d:7a:
88:6c:28:19:1a:14:04:cd:a1:0d:da:65:c8:10:e6:05:9a:82:
fd:eb:29:de:6d:0e:b2:35:fb:65:c7:02:2d:c0:a7:8f:d6:db:
29:58:e5:ec:9e:0e:44:ac:eb:2e:ab:43:b8:05:71:0e:d9:56:
6e:0f:07:85:39:6c:90:24:12:d1:a4:cd:82:a4:94:cb:7b:dd:
67:34:2b:1d:fa:f0:81:83:e5:be:b9:df:3f:16:39:09:70:cc:
ea:ae:27:98:68:a5:c7:e7:d9:f5:38:1b:1a:db:19:da:ab:5d:
a3:87:9e:c9:79:82:df:10:2d:94:78:4a:a2:ab:b7:35:37:1f:
7a:b2:61:87:36:5e:f6:dc:e0:86:c2:0f:66:b4:9c:92:eb:43:
21:3f:1a:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eoyklsicWLUYb3uk/to+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4
MGEzMDEwHhcNMjYwNTEzMDAwMTA5WhcNMjYwNTE0MDAwMTA5WjAzMTEwLwYDVQQD
EygzZThkZWVkMzVlYjdhMmQ2MTgxZTFhZDBjYjkyNmEyOTVhZjg1YmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfIWNvO7Fj3IE5LWa6jmoKpUlle0
ht9VZCHujAxYD4rOV4xzC/nhIibM8/5RAyseY9yAAH1qoqCLEyOKuVtG92KMEvj+
2lvB2tb+5qalSa3HrUBwnVfpTFwJKJ6sZ3PMFdLU3DGaiXKI4ejNSizPHcS9isHX
/ZH1tMU+T5e7IyswCaI61ge3cLU9EYmBNHnr+B4S+WAEKmppu6zISVRN271NnZsj
IyLnIaUm43CKONL2CUDIMcr0+XIRd2UKaTZUi1giPOdPuHn9zewQDxLzZBYYqKpf
eEoiueLVf9YnH24ZuUApKyoxqjX92hZqZ0oEOzXRc/h59zYy+UMyOH9KVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6N7tNet6LWGB4a0MuSaila+FvzMB8GA1UdIwQY
MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt
ZDE2OWMwODhiNDEyLzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy
LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUTaq/Pj
jtaPaEELMULa1fpurwFYx5vBRDSq9PqhGwSleCaAWdTMhQy7ayhyIBrWG2fDb1nD
pfSMWQfUMSUZKFNwFc+SI7IvukHlh2IIs5LrUt3Rb0dsy18Hx/kULtDu74Jyk7S/
pStwDz16iGwoGRoUBM2hDdplyBDmBZqC/esp3m0OsjX7ZccCLcCnj9bbKVjl7J4O
RKzrLqtDuAVxDtlWbg8HhTlskCQS0aTNgqSUy3vdZzQrHfrwgYPlvrnfPxY5CXDM
6q4nmGilx+fZ9TgbGtsZ2qtdo4eeyXmC3xAtlHhKoqu3NTcferJhhzZe9tzghsIP
ZrSckutDIT8awA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:05:18 2026 by rpki-client