
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json)
Hash identifier: KDY1LKOsso/tZnALSRCDBBDRz81gxVb0L9cER0lHO/g=
Subject key identifier: D3:A7:C1:9C:25:01:38:8F:6F:82:80:47:21:6C:7C:A8:3A:27:D5:CA
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 019F93E790E6C00AD7B8FAEB4FB8789E244A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
Manifest number: 1AE8
Signing time: Fri 24 Jul 2026 11:34:14 +0000
Manifest this update: Fri 24 Jul 2026 11:34:14 +0000
Manifest next update: Sat 25 Jul 2026 11:34:14 +0000
Files and hashes: 1: 0kwfeb-8KYnjT1DaXTFg8NKV5Qs.roa (hash: NXuZo/nEKglyJiMys1lOF8MOKYcVQUjHhjrhGVTXb8w=)
2: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: lscOKZyVUJJ4GpqtYtidBmWbnYNMXc1KXtYsOSXJbZc=)
3: ExQa4_rJNaEHp9KaigvNnKDL6eU.roa (hash: 53Hf9NPeMQ6qfBPkcUTSGvezuAg+cEKzzFuOc90DUbQ=)
4: Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa (hash: qSiZYwUebITVF7msT4gMb3T5zA9NBTdfmsfNp4wHc7k=)
5: euBXC6rwjNF3N0PD1PpJMyMwSCI.roa (hash: 0lWahyGCdWHgLVF3U4IuMMbV9OFbVd1ssMeGsLZit7k=)
6: j3miBQqNH9MvtZNlx1-gjZqrqlE.roa (hash: smq4tHXaK2J5Z2RTwqeV0To7ZSM03HiBGbCe7Zo0HKc=)
7: jEz60612qkB_50Y260RpXZ-MuzM.roa (hash: BZr/I7EwZxM2uQlW25KjJKranZ7EMY8qsKCPvVpgBzk=)
8: n5DZWGwRfzSzns4eqFSjissC4Ic.roa (hash: hHHRlJz1sF3jJiU+5Rs6YUDTVt6DrNfVoH1Q2sTlqY0=)
9: r-anbRE4DLxuI4SkTafQgXiuasg.roa (hash: 0MlabvnrMR3GTUJus2cIH3xhwZlvfH8ipVahLa7E8mI=)
10: vIuaHhw5-i00cPHH0vZ_LmseB00.roa (hash: bHcmA3+3imH7FcDE4PSlxFxFCMqyJAFjvPvcad59hYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:e7:90:e6:c0:0a:d7:b8:fa:eb:4f:b8:78:9e:24:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jul 24 11:34:14 2026 GMT
Not After : Jul 25 11:34:14 2026 GMT
Subject: CN=d3a7c19c2501388f6f828047216c7ca83a27d5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:6d:ac:30:e4:29:af:91:cd:a1:b1:a8:1a:
a2:71:31:16:e2:31:bc:92:d0:51:26:1b:df:fa:14:
6e:33:ca:be:d0:58:b5:7a:90:8d:5e:72:82:e0:eb:
60:55:e5:d5:39:5b:03:fb:60:31:bc:96:61:c2:6d:
0f:37:1b:16:4c:34:d0:2a:20:88:7c:d2:0c:e9:65:
93:2d:75:e5:67:af:af:ff:be:08:9a:57:5b:b8:5f:
40:84:32:1a:59:da:b7:83:42:56:15:63:f9:f2:80:
d1:ea:55:27:c9:28:90:e1:d5:20:f7:31:21:89:26:
a7:1b:06:08:15:dd:23:d4:c4:e7:13:20:02:08:40:
55:da:da:fe:26:69:da:60:9d:10:0b:2d:bf:ec:ac:
29:dd:f4:7d:91:09:a9:31:a1:bc:6f:0c:97:40:3b:
e9:96:aa:b2:7a:be:58:02:55:67:d6:0b:a3:28:65:
b0:87:1d:ef:ed:f9:84:fa:9d:a7:30:27:2c:7d:a2:
a4:81:d7:29:d4:50:b4:3c:59:f2:33:67:65:d9:ca:
41:d1:d9:00:a4:39:da:fd:55:ef:97:05:0b:ee:fd:
1f:65:c3:e9:ca:41:f5:3c:2b:4f:f6:a2:bd:f4:89:
35:dc:e5:fe:21:70:2b:e5:a7:5f:3f:2d:0c:81:1b:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:C1:9C:25:01:38:8F:6F:82:80:47:21:6C:7C:A8:3A:27:D5:CA
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0b:9d:8c:2e:af:e9:c2:4c:4d:b6:cb:a1:03:ba:d4:e6:fa:
3a:22:77:7f:66:b4:c2:fd:65:8c:d8:67:ee:77:7b:4e:9b:25:
9b:15:8e:f6:9b:86:d3:fc:e3:97:1b:f4:46:7e:97:c1:87:d2:
b0:72:9c:82:26:90:98:5d:1d:44:af:47:a5:01:b7:b3:ec:b0:
86:57:7d:6f:72:43:37:38:37:f5:cf:02:60:fc:d8:2a:8d:e8:
de:98:c4:3e:b4:f2:b7:b5:0a:6a:8c:f8:42:0f:60:6f:85:c2:
56:ad:0c:4e:59:af:40:5e:ce:eb:d2:c9:80:89:01:52:ae:b5:
7d:3f:60:ad:eb:6d:e6:08:42:7f:9b:52:0d:11:1c:c2:60:fb:
c7:bf:1d:78:a0:3b:59:60:a5:ed:32:dc:6a:2a:e6:9c:10:6d:
9f:8d:5c:70:e5:02:d4:4a:89:6a:19:17:e2:da:17:6a:27:95:
a0:b7:4d:25:a5:55:a3:1c:ab:57:04:01:d3:82:06:ff:b6:2b:
80:10:57:0b:93:09:56:81:81:0f:53:47:80:7e:e0:e1:ee:3f:
4a:ec:5e:41:de:7d:1c:b8:92:99:c2:df:25:a6:1d:d5:ac:ba:
03:26:34:51:24:6b:8e:19:68:cd:3f:ee:bf:f6:0b:5e:c3:ac:
51:66:45:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:45 2026 by rpki-client