
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json)
Hash identifier: W4HwvqDkQOEw2pK8uZbKlt32wV8ROnfdy+OH+g8qkhQ=
Subject key identifier: 28:E3:7A:FC:5C:3D:1E:BD:02:51:01:A0:66:9E:A8:B7:F3:DD:68:66
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 019F935AC1A76AA61A5399B251EAF5044427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
Manifest number: 1AE7
Signing time: Fri 24 Jul 2026 09:00:26 +0000
Manifest this update: Fri 24 Jul 2026 09:00:26 +0000
Manifest next update: Sat 25 Jul 2026 09:00:26 +0000
Files and hashes: 1: 0kwfeb-8KYnjT1DaXTFg8NKV5Qs.roa (hash: NXuZo/nEKglyJiMys1lOF8MOKYcVQUjHhjrhGVTXb8w=)
2: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: 0t4fuHDDD3nUoMuM/L3Km2Bc65NQrnY6GwaSr4189vY=)
3: ExQa4_rJNaEHp9KaigvNnKDL6eU.roa (hash: 53Hf9NPeMQ6qfBPkcUTSGvezuAg+cEKzzFuOc90DUbQ=)
4: Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa (hash: qSiZYwUebITVF7msT4gMb3T5zA9NBTdfmsfNp4wHc7k=)
5: SmPFY6dZ1pVM1Snep7Pzm5jzv3s.roa (hash: lU439vJ8/wAYwDX7DeUNkJxFAFNXVAuEfJb9mOXP5/4=)
6: euBXC6rwjNF3N0PD1PpJMyMwSCI.roa (hash: 0lWahyGCdWHgLVF3U4IuMMbV9OFbVd1ssMeGsLZit7k=)
7: j3miBQqNH9MvtZNlx1-gjZqrqlE.roa (hash: smq4tHXaK2J5Z2RTwqeV0To7ZSM03HiBGbCe7Zo0HKc=)
8: jEz60612qkB_50Y260RpXZ-MuzM.roa (hash: BZr/I7EwZxM2uQlW25KjJKranZ7EMY8qsKCPvVpgBzk=)
9: n5DZWGwRfzSzns4eqFSjissC4Ic.roa (hash: hHHRlJz1sF3jJiU+5Rs6YUDTVt6DrNfVoH1Q2sTlqY0=)
10: vIuaHhw5-i00cPHH0vZ_LmseB00.roa (hash: bHcmA3+3imH7FcDE4PSlxFxFCMqyJAFjvPvcad59hYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:c1:a7:6a:a6:1a:53:99:b2:51:ea:f5:04:44:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jul 24 09:00:26 2026 GMT
Not After : Jul 25 09:00:26 2026 GMT
Subject: CN=28e37afc5c3d1ebd025101a0669ea8b7f3dd6866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:b7:9a:0c:59:e9:8d:fc:7f:6c:c2:5b:81:
1e:53:e6:24:72:40:76:b0:b1:fb:76:9d:9e:38:ee:
ee:9a:21:6a:43:4e:68:1f:df:88:1a:34:3e:fb:81:
56:de:e3:63:62:cf:ea:84:4d:01:ca:7b:de:6f:10:
7d:ce:9e:ad:2a:c7:35:44:db:f5:4a:50:fc:ed:11:
50:a0:39:43:3b:3c:1f:0f:65:36:7d:fb:eb:a4:c8:
5c:31:cf:a2:53:71:6f:0d:a2:85:68:57:f0:c3:25:
1f:90:37:08:ed:5d:13:f4:d4:2b:1e:32:38:14:30:
51:d4:a2:fc:f9:07:51:54:98:d2:bc:13:44:ce:3f:
29:4f:fd:db:9d:7b:f2:fb:c6:30:52:31:5f:b1:6c:
ec:88:37:87:1a:e5:af:c1:ff:8e:ad:70:7f:02:d1:
92:73:6b:c2:32:45:42:ea:ee:a2:5f:c5:0f:fa:be:
26:3d:3f:cf:87:13:85:bf:80:2c:10:2e:0d:a8:73:
d8:76:48:7b:f5:ea:78:c1:80:a8:5c:d5:64:76:0b:
61:6b:05:43:bf:62:44:40:76:86:1e:10:43:f7:17:
38:d8:4c:ef:40:b6:d5:dd:b1:f7:19:f1:02:88:7f:
51:f8:b1:82:22:bb:62:6b:f1:cb:4a:de:16:a5:82:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E3:7A:FC:5C:3D:1E:BD:02:51:01:A0:66:9E:A8:B7:F3:DD:68:66
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fb:8f:b8:f4:0c:8c:ab:b5:34:b2:d4:d4:98:e9:b6:ad:ce:
d3:51:33:b9:a4:67:88:c1:32:31:ed:2b:76:cd:3b:19:ed:0c:
a4:33:2e:7f:02:d6:ed:2b:9c:40:5c:5c:fc:6c:e3:f7:67:78:
86:70:40:d0:9a:29:cb:16:df:78:e7:5f:c1:a2:a2:4f:c2:8d:
d3:2f:75:3c:f6:ca:5d:ee:ad:09:5c:d8:53:0b:7b:09:47:17:
51:a7:a5:3a:1e:ce:4e:c8:de:ab:59:af:53:2d:d2:21:7e:66:
de:6c:26:2c:1f:d5:ab:e1:b3:7b:53:43:3a:fc:44:67:fc:fa:
a3:7b:53:46:b8:8a:2e:c6:3d:c1:93:22:2c:b9:a9:62:69:1e:
31:24:d2:9c:0a:6c:b0:8a:01:76:71:62:16:2c:f1:77:4e:11:
a6:09:97:ba:59:a2:f8:2e:6b:de:01:06:32:f5:71:f3:46:e0:
fd:09:fa:f0:51:76:0f:5a:3d:38:be:3e:c0:d1:5f:51:f3:10:
88:6c:ed:5f:b2:a3:d4:04:80:b9:56:50:1b:30:57:45:8a:71:
61:e0:8c:78:cf:4b:b2:a3:3d:f3:e5:83:e7:3c:7b:62:e5:13:
93:39:a6:2c:71:ec:00:c5:e4:80:2d:c8:48:93:78:6a:51:50:
ac:4a:c4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:23 2026 by rpki-client