Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
File: EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json)
Hash identifier: Yvu04VIPDGXlbq+3czH/MyprgHFfspUIjDbMZkMKYt4=
Subject key identifier: 5B:22:99:D5:3A:54:AF:C6:6C:53:4D:48:3D:B0:FE:29:8D:A5:00:F5
Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
Certificate issuer: /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Certificate serial: 019F92EDB4E95269CC6C447D00BCA00875E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
Manifest number: 0455
Signing time: Fri 24 Jul 2026 07:01:19 +0000
Manifest this update: Fri 24 Jul 2026 07:01:19 +0000
Manifest next update: Sat 25 Jul 2026 07:01:19 +0000
Files and hashes: 1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: 6G9sUf899dc8wqG/34Dh1dgj5jV5/yltvwGBVxqHack=)
2: V6MbHQ4IlulkadnPNR4GjRCTQBc.roa (hash: n6NjwhnZOFT/xKrdDQmsqkf3f28sKCszOE0xexeKQjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:b4:e9:52:69:cc:6c:44:7d:00:bc:a0:08:75:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Validity
Not Before: Jul 24 07:01:19 2026 GMT
Not After : Jul 25 07:01:19 2026 GMT
Subject: CN=5b2299d53a54afc66c534d483db0fe298da500f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:a1:0a:89:f2:4a:01:7b:33:49:7c:ef:d1:
f8:69:3d:21:93:cd:b3:d7:0f:91:b3:a0:44:3b:07:
35:a7:d4:90:57:60:6d:97:20:73:5d:52:86:f4:29:
b0:c5:27:36:14:11:f3:4b:6d:d4:be:68:96:9a:11:
0a:07:70:f9:36:f2:7b:06:e1:19:95:6c:b3:00:8c:
c6:2f:39:08:7a:af:39:c9:c3:7c:8a:85:c2:f2:72:
37:51:9b:75:89:fd:5e:c1:fe:ef:75:04:50:2b:48:
75:76:0b:2c:45:7a:f5:a1:cd:60:e7:09:f4:54:d5:
2c:e2:8e:62:01:63:82:e6:dd:0a:6c:94:76:d5:c0:
2e:a3:b6:b7:e6:28:24:74:ef:0a:ad:c4:f2:9b:c0:
79:cb:cd:32:1b:a0:ec:78:df:8f:2e:7a:7f:6d:c2:
d7:20:84:9d:69:2a:93:2c:e4:bc:42:b3:a9:1f:78:
3a:5d:a9:ad:f8:56:35:dc:06:0d:ad:02:cc:bd:af:
4d:e6:ce:61:d6:51:04:66:1b:c2:57:6c:29:c8:f0:
5f:d6:ae:a2:50:c3:13:9d:f7:e9:cd:03:9c:85:b8:
66:d4:58:50:d2:bf:51:94:39:4d:27:bb:4c:4d:87:
c1:f6:a1:75:4d:0e:b7:20:04:80:02:ca:5c:f2:43:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:22:99:D5:3A:54:AF:C6:6C:53:4D:48:3D:B0:FE:29:8D:A5:00:F5
X509v3 Authority Key Identifier:
keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8f:d5:1a:3a:e6:2f:78:22:64:fc:f0:30:13:34:de:01:ad:
d2:a5:fc:ec:d7:d7:24:c2:e8:d0:de:b0:51:6a:3a:d0:6d:a0:
c5:8f:4d:f3:b2:36:ba:d5:38:2b:10:10:14:dc:d9:0e:19:ff:
41:fb:c9:2f:a6:f4:71:98:21:ae:0c:42:71:c4:06:f3:cf:0f:
1b:9c:af:e4:f4:e8:53:f4:c5:d6:d3:2f:69:27:97:68:88:d1:
a2:97:d0:09:65:80:26:bd:69:c2:d4:e0:af:1e:28:58:d4:2e:
30:c6:34:da:df:85:7e:17:cc:dc:49:c9:ae:f5:3d:0b:d4:49:
a9:4c:44:2e:d2:89:0c:18:d3:4e:51:ff:9e:8c:7b:2e:24:5a:
0c:64:0b:11:8f:16:f7:52:f7:06:72:be:f6:55:46:b7:67:a1:
78:8d:c7:e1:41:7c:f0:47:70:88:50:51:90:03:02:bd:d2:8f:
f4:98:b4:6e:fd:67:d0:7c:3a:b0:f0:15:e8:f2:d9:7f:82:98:
bf:68:d5:20:2c:1b:0d:b9:16:fb:b0:73:7a:e7:07:44:55:a5:
69:06:df:2c:ce:e9:ed:35:65:a9:29:be:ef:7e:b3:dc:0c:85:
e0:9b:5b:fb:a8:20:4a:70:92:5c:d0:d5:46:7a:66:fe:b5:7a:
3f:ab:b4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:54:19 2026 by rpki-client