Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
File: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft (raw, json)
Hash identifier: HQhuTCeE4RsN9J+xN1Mr+nKEeryODxjSAR6B5b6ueiA=
Subject key identifier: E9:54:BB:B4:C8:C4:67:52:66:22:FD:05:59:95:D5:B8:C6:D7:BD:80
Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
Certificate issuer: /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Certificate serial: 01A0F945855C892955D053F9BF1580D95603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
Manifest number: 128F
Signing time: Thu 01 Oct 2026 21:01:17 +0000
Manifest this update: Thu 01 Oct 2026 21:01:17 +0000
Manifest next update: Fri 02 Oct 2026 21:01:17 +0000
Files and hashes: 1: 4TurvPB_ohFcEmoz-eVrTSXPuRI.roa (hash: gkcJydL0EzTSV6KSKCn0sG/zjtNhD9jooKJCUpapYy8=)
2: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl (hash: 2HdNmbWBMVBs0XAN0lGEJ3kH7PDCPwynldFCEgsBXLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:45:85:5c:89:29:55:d0:53:f9:bf:15:80:d9:56:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Validity
Not Before: Oct 1 21:01:17 2026 GMT
Not After : Oct 2 21:01:17 2026 GMT
Subject: CN=e954bbb4c8c467526622fd055995d5b8c6d7bd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:ca:ae:c4:6b:4a:34:79:c8:ae:9b:47:fa:
b8:35:71:f2:66:48:5e:a9:20:88:9a:89:f5:37:d7:
9e:f6:c8:d0:f6:09:a6:c9:84:35:4f:12:4c:c7:02:
e8:51:34:a3:61:22:6c:63:fb:88:30:91:7d:ec:14:
94:4d:e5:01:82:d9:ae:94:38:65:28:18:fb:f4:4f:
85:f8:9f:a1:0c:1d:ec:69:ed:38:b9:ca:44:a7:5f:
5b:85:c6:76:a7:14:85:11:df:12:4f:34:63:6f:d4:
f0:db:64:9a:f6:ad:ce:37:83:53:1f:13:c8:6d:d7:
41:27:f1:5f:ef:9e:c5:93:8c:65:d9:91:ef:f3:8e:
bf:71:d7:e7:45:ef:97:fb:18:62:28:f0:c7:5f:29:
85:02:42:d0:fa:5e:67:27:0f:b9:d0:42:54:02:4a:
03:e6:52:06:22:99:d8:66:5a:05:25:25:38:81:38:
84:d8:d9:20:70:3c:ab:d1:44:60:a2:ee:30:72:01:
d2:96:92:ef:95:bc:2e:bb:00:d7:7d:12:19:e6:f3:
43:cf:d0:c2:3a:36:9c:d7:34:2a:72:4a:37:eb:52:
10:07:e5:ad:b9:de:13:a0:06:50:13:45:27:e9:63:
d3:1e:34:e5:b5:d2:e8:9c:37:f6:e9:b2:9e:84:cf:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:54:BB:B4:C8:C4:67:52:66:22:FD:05:59:95:D5:B8:C6:D7:BD:80
X509v3 Authority Key Identifier:
keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ca:7a:03:97:d4:d5:ea:89:34:ab:21:47:3e:82:2c:4e:d8:
dc:dd:cb:98:4e:a8:8c:6f:49:5b:dc:5a:d3:96:1f:3a:e5:91:
d9:04:5c:a3:29:6b:7e:a3:df:f2:b2:c8:39:16:2f:48:7a:26:
16:4d:27:78:fc:2a:7b:bc:3c:6a:93:05:61:f7:9b:92:86:0d:
7d:73:2c:bc:e9:e6:f8:f0:a7:75:1a:8a:46:10:1c:22:66:8a:
c5:1e:0a:ba:6c:4f:e7:f8:6a:05:62:9e:1c:54:13:2d:17:79:
18:b7:28:39:70:45:2e:2e:55:a0:f7:c2:af:ae:a3:b1:68:69:
85:fb:42:37:4f:00:99:91:62:ff:19:30:d2:f5:a4:0b:47:bb:
76:9a:b1:9d:85:a8:19:8b:e0:37:a8:f0:5d:69:1c:8f:fd:64:
d9:16:e4:0c:7b:21:78:7c:4d:9a:40:8e:7e:7e:2a:4e:3a:4e:
5b:62:d5:48:7e:d7:4c:99:f3:ba:d5:62:89:04:f0:2c:07:c5:
f4:87:f7:e7:4d:8e:5f:95:59:d4:3a:0f:92:84:bf:4f:78:66:
21:de:18:19:21:1b:62:a9:28:62:45:66:8c:46:04:60:70:f6:
e7:ef:e1:78:14:fb:54:f0:59:93:08:e8:62:83:03:5e:8c:db:
51:6c:1f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 11:23:21 2026 by rpki-client