
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json)
Hash identifier: 4RacBqaOqG2sZtFpeARKadcX8I3d6seR4nQkQHaRFJg=
Subject key identifier: C1:0C:1D:09:50:15:23:F8:B5:84:87:8D:B8:80:C4:0D:67:58:ED:1C
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 019D25F10FE8D983700C6671BF1E24B61CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
Manifest number: 1984
Signing time: Wed 25 Mar 2026 17:00:48 +0000
Manifest this update: Wed 25 Mar 2026 17:00:48 +0000
Manifest next update: Thu 26 Mar 2026 17:00:48 +0000
Files and hashes: 1: 0NKhDKM-5Ss2PkXpqTneoEemaz8.roa (hash: Ast2f0yb+CsukurTEugrLSF0q9KXQ7PgzYdbYYQejg4=)
2: 0kwfeb-8KYnjT1DaXTFg8NKV5Qs.roa (hash: NXuZo/nEKglyJiMys1lOF8MOKYcVQUjHhjrhGVTXb8w=)
3: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: /UllVz6e3EPIFGB1xHnGoKt8e6r+sd4IEjgkuvqgmaQ=)
4: ExQa4_rJNaEHp9KaigvNnKDL6eU.roa (hash: 53Hf9NPeMQ6qfBPkcUTSGvezuAg+cEKzzFuOc90DUbQ=)
5: Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa (hash: qSiZYwUebITVF7msT4gMb3T5zA9NBTdfmsfNp4wHc7k=)
6: RiCeGoLJLFsyXLs4imgog-X_h40.roa (hash: m5IiGNSxjj3YSYsLMUU0YB0kkycBv85oeXqVJ5P7/kM=)
7: X5_OOiiCcGiXKcGALlcB_hscUHs.roa (hash: Qj/ZlInW3VgI1VUQwqxEhpwqlf4BE1RLFh2kkgSMtX4=)
8: _3kzqKok3z7fQDLrnmIfOGBMWpE.roa (hash: vrsV62/+f0qeXZvSNXU86WQluWpB748JDnGujS/D0TU=)
9: d_9pi3Ye2aKoW8gve-U04b79Rnk.roa (hash: 6L0BplOcXSb4jEcJxY1bZLR4JtOIP3ERlm3ya08pW+I=)
10: euBXC6rwjNF3N0PD1PpJMyMwSCI.roa (hash: 0lWahyGCdWHgLVF3U4IuMMbV9OFbVd1ssMeGsLZit7k=)
11: htB4U1w1lyxRkybj99MUexfYL2U.roa (hash: 9CBmNblFS83kLJs7qBsmbwFyEe/0OsJDGt9H4YHydYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:0f:e8:d9:83:70:0c:66:71:bf:1e:24:b6:1c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Mar 25 17:00:48 2026 GMT
Not After : Mar 26 17:00:48 2026 GMT
Subject: CN=c10c1d09501523f8b584878db880c40d6758ed1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:eb:5a:aa:43:6d:38:59:2a:6a:e1:fc:0b:
a9:72:fb:1c:ca:dc:e3:d9:c0:cc:fe:8a:9e:ba:cd:
31:dc:aa:04:0e:7c:9a:ef:92:17:77:61:b8:02:44:
5b:85:78:aa:ac:19:9c:a9:fb:7c:fa:75:68:3b:88:
0a:5d:92:73:51:4d:7b:6f:de:76:de:3e:47:55:9c:
af:c9:6d:e0:fd:66:73:16:ff:ff:9f:91:26:ca:d8:
99:37:5d:6d:1d:24:cd:3a:7d:7c:a9:54:77:ef:67:
fe:25:8b:89:10:0a:99:20:dd:a2:a5:36:37:1f:a7:
64:5f:36:a0:6c:89:53:e9:89:ee:2e:4d:ec:25:29:
15:0a:7a:75:b2:13:30:d7:53:6e:53:d8:49:ad:92:
be:de:ae:69:00:27:96:83:1d:79:b7:35:39:6b:59:
05:ac:cb:a4:7d:cd:61:a2:fb:e2:b9:c4:08:3a:1e:
d8:38:df:30:24:b2:d9:25:b5:7b:2c:9f:2a:eb:4f:
cf:45:a3:11:74:d2:1b:1a:8b:a9:f1:b7:50:c1:43:
ab:dd:6e:e9:80:8f:94:5e:57:80:e4:5b:05:07:f9:
f6:ec:f0:9c:f9:ed:d0:8d:14:9c:4b:6d:31:08:d0:
06:1a:aa:80:17:43:c9:c2:59:82:0e:09:a7:b7:09:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:1D:09:50:15:23:F8:B5:84:87:8D:B8:80:C4:0D:67:58:ED:1C
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:81:fb:96:b6:43:8f:bf:79:0f:f6:18:7a:4b:7b:bb:97:47:
7d:b1:a0:02:5d:a2:0c:37:ee:2e:0d:9b:55:1a:90:be:b7:8a:
18:6c:a3:52:a3:77:7a:fe:f8:b8:43:e9:d4:8b:6d:c1:d2:12:
05:f5:a7:05:1f:1b:1a:8f:96:a3:e0:9b:22:2d:b3:5a:72:1d:
2b:cc:70:94:41:3d:d4:ae:45:de:87:65:7a:14:a3:25:29:db:
51:c0:f7:67:ae:97:46:3f:9f:62:69:35:5b:38:13:5e:0c:07:
6d:55:49:f3:88:ef:a1:37:8b:5d:d8:a4:91:13:5d:59:45:f9:
c0:42:bd:d7:96:5a:2b:7e:59:ab:03:2a:0e:a9:ad:83:ee:b8:
fc:78:de:04:a4:6f:49:04:1f:e9:7b:a8:f0:b3:f6:93:8e:21:
6c:0d:3a:b7:78:b1:a3:aa:8a:c2:9e:4b:a3:ca:7a:00:5c:6c:
43:84:5d:03:35:31:73:54:c6:db:93:86:5f:60:6a:3e:84:f0:
1d:aa:54:c9:57:6d:94:33:1d:31:56:f2:d7:82:01:ce:a2:20:
85:c6:81:b5:25:49:54:fc:8d:3b:61:28:7f:a4:14:78:88:77:
1f:47:71:fc:30:a2:b5:e5:60:2e:78:5a:51:7a:b6:8a:9f:e8:
0d:df:51:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:30 2026 by rpki-client