Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier: gM/tnWNsZcBhgbLlSQhd41PskcuNu5hyqsggk9bopcI=
Subject key identifier: 90:5E:0F:63:24:F6:DD:F3:8A:90:EA:66:C6:FB:B3:A5:CD:EB:E3:22
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 01A0DD29802A7DC0F1F23F93E36D242932E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number: 1A04
Signing time: Sat 26 Sep 2026 10:01:19 +0000
Manifest this update: Sat 26 Sep 2026 10:01:19 +0000
Manifest next update: Sun 27 Sep 2026 10:01:19 +0000
Files and hashes: 1: 1-77MLKbMDtDiajP4cnfRaQ3miEM.roa (hash: uR4xAscZt2UY723RU9mF1OjyVpc+mJ5l3PG1PYSxgqc=)
2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: LsE02+z+8dQg4ANXhbwBpwE7IC1zHg/k6gqz49OwWa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:80:2a:7d:c0:f1:f2:3f:93:e3:6d:24:29:32:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Sep 26 10:01:19 2026 GMT
Not After : Sep 27 10:01:19 2026 GMT
Subject: CN=905e0f6324f6ddf38a90ea66c6fbb3a5cdebe322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:9a:9b:23:34:af:9d:66:f0:c1:59:3b:b4:
99:58:98:3f:73:60:92:3b:f1:be:72:14:bd:14:4e:
93:85:f8:4e:73:d1:ff:98:4e:5c:9e:70:86:e8:95:
16:67:d8:b7:98:6c:c3:0d:de:3f:1d:94:6c:2b:18:
51:4b:76:e1:31:62:b5:bd:63:a4:23:e8:a5:5e:48:
3b:b0:64:b8:c4:55:d6:5e:d1:94:2a:8a:99:af:02:
44:99:02:2c:8d:cf:ec:46:8d:8d:a6:28:ac:61:88:
cc:bd:ed:25:54:85:7a:e7:5a:5f:c7:f2:41:01:b5:
1a:98:09:c4:fc:1b:51:20:b6:96:18:0a:5d:81:ce:
9c:86:65:98:e7:ee:cf:0b:60:dc:82:3e:d7:be:d1:
a4:ca:d0:09:ff:92:5f:ad:9b:54:17:ab:1c:0d:e7:
58:21:35:18:7e:2f:a3:87:ab:57:ea:d7:3c:08:52:
de:9b:8d:4d:66:d4:f9:a4:0d:53:08:c7:37:fb:70:
7c:72:99:aa:b3:17:8c:99:51:52:9d:41:52:4f:7b:
43:be:79:90:6c:0c:ea:e3:67:79:f0:91:4f:4e:82:
0b:7c:a5:27:0b:9d:c7:2f:7e:0b:02:af:7b:4d:cf:
9f:83:91:a5:9a:c5:fa:07:38:aa:e6:c6:6f:8a:24:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5E:0F:63:24:F6:DD:F3:8A:90:EA:66:C6:FB:B3:A5:CD:EB:E3:22
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1b:99:17:05:ad:07:b0:64:2f:71:b0:69:e5:1f:f3:45:96:
f5:2a:57:89:51:40:74:79:53:9d:19:f2:ea:32:56:0d:2e:11:
43:bf:52:62:45:31:e3:fb:2b:de:69:f2:5c:1c:0d:d0:5e:31:
39:92:4e:ba:ca:f8:f5:be:48:46:bf:4f:67:d5:1b:c9:b9:88:
78:98:94:76:3a:bc:d7:d2:d9:06:5d:a1:da:67:25:a9:97:cb:
0d:c5:3d:35:68:65:e1:8d:ef:3b:b1:e9:55:6a:b3:51:50:a5:
64:50:3d:ac:84:20:de:b4:21:51:f6:58:97:1c:61:5c:63:04:
d0:59:7a:14:dc:dd:da:a2:be:97:36:5b:03:c0:a2:ef:1e:a1:
e0:b1:10:02:5c:2a:78:e1:43:79:64:b8:aa:a4:5d:9d:f6:19:
64:78:3d:46:b8:ea:49:13:ac:2e:85:f6:83:01:d4:62:ca:15:
38:b4:39:22:68:67:65:7b:18:ca:a1:49:02:fd:3d:b7:02:81:
9c:b5:e7:78:cb:0d:8a:45:a8:ea:8a:91:7a:b0:ba:f3:6c:c1:
18:e3:34:d9:81:cb:ac:40:4f:b5:38:7f:e7:66:d7:ba:95:46:
22:ec:71:39:57:f1:a4:1a:78:36:a7:0c:57:1b:9f:2b:c1:02:
66:6e:0a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:25:37 2026 by rpki-client