Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier: I6DtIw3VMo9qUBuAiwven5XnZBnI5D8VfUcVgeABqHY=
Subject key identifier: 59:2B:1F:B2:38:0F:63:C0:79:23:C1:59:9C:59:7A:08:9C:47:3A:8D
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 019D28F20BE5D8F67BD015FC9B59836749CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 07:00:44 +0000
Manifest this update: Thu 26 Mar 2026 07:00:44 +0000
Manifest next update: Fri 27 Mar 2026 07:00:44 +0000
Files and hashes: 1: 1-77MLKbMDtDiajP4cnfRaQ3miEM.roa (hash: uR4xAscZt2UY723RU9mF1OjyVpc+mJ5l3PG1PYSxgqc=)
2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: VZip0aXvIqF9mIgSvevIbjY1NPs0MiWx/FO9lvWhzoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:0b:e5:d8:f6:7b:d0:15:fc:9b:59:83:67:49:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Mar 26 07:00:44 2026 GMT
Not After : Mar 27 07:00:44 2026 GMT
Subject: CN=592b1fb2380f63c07923c1599c597a089c473a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:a0:3d:01:37:ab:fc:db:87:ed:dc:9b:8f:
90:45:d9:61:a8:80:c8:07:a5:51:02:c4:95:1c:ea:
2d:0d:c6:2c:10:f4:26:0a:6d:d1:c5:f1:14:78:c4:
7a:39:e4:36:ed:eb:47:ad:42:55:4b:bd:1c:20:2d:
57:8d:b6:cb:b3:6c:62:e7:02:a5:8c:2f:9e:17:17:
03:b3:5d:61:fb:e6:d8:62:a7:a1:4a:1c:4b:28:02:
51:91:69:3d:ef:ef:71:e6:cd:db:1b:03:78:fe:1a:
ff:e0:ba:cd:f2:d1:82:f1:3c:63:83:b9:e3:de:8a:
bd:a0:0f:45:13:36:8f:a2:f2:b5:4a:4e:6c:eb:40:
c4:01:d6:b1:6f:f4:73:4c:08:82:fc:3e:45:b4:0b:
6f:c0:75:b6:9c:d2:7e:e7:ad:ee:b7:dc:59:75:af:
98:1a:ab:9a:8a:bd:52:57:7c:bc:16:84:b6:b1:96:
99:8b:a4:5a:7f:7a:3c:27:fd:83:e0:83:44:4d:12:
77:06:5d:ea:75:ff:65:f8:10:26:b7:b3:a2:7d:b3:
f2:97:66:fa:05:a4:7b:73:60:b9:37:fc:d3:ec:c1:
5f:01:10:3c:f5:7e:12:55:66:05:64:d8:01:8f:a3:
2c:7b:5e:9e:0a:68:28:d5:57:a4:87:c4:02:3d:0a:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2B:1F:B2:38:0F:63:C0:79:23:C1:59:9C:59:7A:08:9C:47:3A:8D
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6b:fb:c4:18:0d:6d:bb:72:bd:fc:90:7a:54:7d:d0:bd:ed:
c3:20:d2:8b:08:e1:3f:d1:8b:3b:c2:8d:8c:a0:57:65:ae:72:
68:93:ab:6a:d7:b1:24:c9:2b:2a:3f:54:dd:b1:52:66:1c:9e:
fa:2f:bf:aa:53:c1:7c:8d:7b:e9:24:e0:33:8a:4e:4d:dc:00:
3b:89:e2:81:3c:36:a9:1e:36:c5:56:82:06:cd:a8:5d:c3:e1:
12:46:f7:19:bf:e8:d2:81:67:83:42:2b:62:f2:e7:b9:11:d5:
da:49:1f:87:a6:09:aa:c1:e6:49:40:6c:4e:fb:22:7c:f8:ee:
1c:9f:99:a7:0f:ed:46:fa:1e:b0:4e:e9:b4:ed:c1:bf:38:4b:
49:b2:39:54:59:ae:0c:40:b9:14:04:0d:84:85:71:ee:52:4c:
6a:81:8f:c7:12:f9:4d:a2:c1:e3:66:0c:cc:0a:8f:c2:fb:8c:
d8:6d:8f:87:f9:fd:6e:90:00:61:42:07:77:2a:bf:0a:34:35:
7b:7b:82:e5:a3:07:fe:51:82:e3:a8:da:f4:d7:e8:6e:8d:26:
cb:a8:c3:0f:3b:57:b9:e4:2f:6d:d2:b6:2c:b2:ec:b5:50:38:
f8:a5:ef:54:62:36:41:00:d1:0a:03:a0:37:c9:a5:b2:15:82:
22:42:56:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:27 2026 by rpki-client