Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
File: EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json)
Hash identifier: gI3UX3FUUWmc/fielLWMQx353fbtHVRAJGYQk/ijcBo=
Subject key identifier: 69:7B:F6:3C:C0:94:0F:84:32:C7:E7:86:38:10:22:0D:28:44:5C:51
Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
Certificate issuer: /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Certificate serial: 019D270436B72CEFCBEBAE2B2817CF090869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
Manifest number: 0314
Signing time: Wed 25 Mar 2026 22:01:20 +0000
Manifest this update: Wed 25 Mar 2026 22:01:20 +0000
Manifest next update: Thu 26 Mar 2026 22:01:20 +0000
Files and hashes: 1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: o0Rc49yDLdKzHcVWpgAA2DlI3VX3DtrWuGi5FJHzY0E=)
2: V6MbHQ4IlulkadnPNR4GjRCTQBc.roa (hash: n6NjwhnZOFT/xKrdDQmsqkf3f28sKCszOE0xexeKQjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:36:b7:2c:ef:cb:eb:ae:2b:28:17:cf:09:08:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Validity
Not Before: Mar 25 22:01:20 2026 GMT
Not After : Mar 26 22:01:20 2026 GMT
Subject: CN=697bf63cc0940f8432c7e7863810220d28445c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:31:26:d4:0f:c9:2f:9d:ad:56:c9:b7:0e:
3a:4e:ab:75:77:d8:a7:41:2f:9b:5c:a2:5e:3a:5e:
a5:2d:bc:28:bb:68:73:04:06:77:3a:0c:b4:ca:ca:
35:56:d6:11:a6:85:8a:85:94:5d:16:9b:61:e1:da:
5d:2c:d2:42:cd:ee:bb:16:1f:87:38:10:7b:ba:f0:
95:8a:3a:ac:43:02:a4:d6:aa:72:e2:19:e7:e4:48:
f6:2f:1d:71:fe:ef:fd:0c:95:67:78:79:43:c1:4e:
59:03:63:f3:73:80:48:17:43:b4:55:89:7b:c9:e2:
a0:89:e5:8a:a5:cd:d5:8a:0d:36:f9:13:1e:11:cb:
a1:51:89:92:75:d4:bd:8f:e7:35:97:c5:f3:1e:cd:
02:aa:70:d3:e6:e6:d9:f8:fd:e7:3e:4d:0c:b7:54:
b1:0c:c3:c3:aa:d1:3c:69:62:1a:bf:c7:d6:e4:86:
67:c3:c2:0b:6a:d8:d5:69:7e:7b:ed:af:eb:02:d0:
2f:37:1f:e9:88:b7:8f:d3:18:b4:8d:0c:51:cb:48:
fb:f9:78:9c:57:af:a0:ec:e5:88:65:13:5a:bf:b4:
ea:78:c3:4c:b8:ac:d3:7b:38:7e:c1:61:76:a4:3c:
e3:d2:54:a5:54:4f:57:64:74:cc:f9:22:17:fe:93:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7B:F6:3C:C0:94:0F:84:32:C7:E7:86:38:10:22:0D:28:44:5C:51
X509v3 Authority Key Identifier:
keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f8:ab:10:e6:97:a7:81:b7:10:c1:35:1a:6b:f7:bc:0a:cf:
ce:41:7c:31:d0:b7:05:97:5d:c0:56:f3:17:0b:d5:75:21:27:
7b:a5:ea:2a:00:20:2b:89:5f:b7:63:a3:1a:80:35:19:0f:9f:
aa:6f:7c:10:cb:ac:9d:7e:68:87:87:43:4a:dd:08:cb:96:0b:
e7:55:7f:48:12:aa:5e:ea:71:39:d8:a1:c6:be:f1:51:7b:23:
22:12:84:1d:cd:71:14:1f:1a:08:de:88:4b:d4:2e:46:b3:de:
a6:1a:06:7a:08:cb:82:1c:43:c8:c4:52:fc:4c:1b:20:03:11:
cb:63:c5:5f:e8:f3:3a:64:51:3f:a6:a5:82:91:69:f8:bf:ac:
64:1b:a3:8e:b1:5b:30:4a:da:24:5b:19:2c:ef:e4:58:86:c4:
5b:68:49:b7:16:10:63:fc:f2:52:08:8c:5d:4e:f5:bb:2a:bf:
1f:ca:7c:55:e8:f7:e0:29:b4:b7:06:02:7a:17:da:4a:e0:93:
35:0c:30:b1:90:0b:6b:2e:96:40:6b:28:ea:2b:a2:0f:bc:b2:
3f:0a:a8:26:76:97:92:5c:1d:6d:5a:5e:3c:a7:5e:d8:1b:eb:
e0:e8:3d:95:a8:bd:bc:0d:67:78:d6:30:3f:ca:71:18:38:56:
12:d7:98:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:29 2026 by rpki-client