Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: OReO0dqe/K0u2+yEbTfhYIPAJHawMx1D1MqKWzKmWag=
Subject key identifier: 20:C3:2F:4B:B9:83:E4:66:32:14:12:5B:13:6F:42:CD:EA:21:96:A4
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019CAB340D61122407A885764D5829909684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 21:00:41 +0000
Manifest this update: Sun 01 Mar 2026 21:00:41 +0000
Manifest next update: Mon 02 Mar 2026 21:00:41 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: 6ma/xFpUoDC4TlR9tJBCiBP8AZjI/g+aC6JrhDVXznM=)
2: qvuOHYoyggsc9g8iuTbD4CEqvBo.roa (hash: jWZoQBgvdhifzrjkxPZUHR/6QgarurKmN/mBEWXh09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0d:61:12:24:07:a8:85:76:4d:58:29:90:96:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Mar 1 21:00:41 2026 GMT
Not After : Mar 2 21:00:41 2026 GMT
Subject: CN=20c32f4bb983e4663214125b136f42cdea2196a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:44:61:02:d0:80:c6:99:b6:74:19:5c:af:
6a:ae:84:41:a5:95:26:14:a8:d8:92:22:b6:8b:ae:
b0:7e:25:06:29:57:f0:2d:27:cb:f3:3b:89:75:7d:
4a:5f:52:5b:ce:f6:cd:f1:3e:73:c3:eb:8e:08:5e:
dc:b7:bc:95:0e:5c:da:a5:74:75:ec:34:9f:4a:f7:
96:47:18:ff:77:e2:56:e9:1f:e6:ea:ab:06:ad:da:
ca:ac:00:17:61:9a:c4:5f:13:f8:80:cd:bf:53:27:
36:c0:70:d7:08:cf:68:c1:5b:72:a5:c0:60:0b:e9:
46:92:c4:06:91:5c:2a:0d:2d:2a:12:d7:ee:e8:0c:
1a:73:4d:9e:ec:d5:fe:60:9d:dc:3f:48:10:a0:fd:
0f:e0:02:11:48:9e:42:f7:70:3d:a8:44:ce:ac:89:
1e:19:a0:5d:a9:ca:6f:00:3a:46:c7:68:28:18:e9:
53:4d:6e:be:b6:4e:09:1d:d7:36:4e:f3:3a:39:fb:
54:21:91:00:e9:8c:79:89:57:52:80:e2:1d:b3:c1:
f3:cb:9e:2c:45:88:49:e1:fa:de:c1:56:ad:89:b8:
47:f1:e4:6d:86:2f:02:ec:20:c9:15:a1:66:19:15:
0d:26:90:d9:8c:0b:68:57:f9:70:72:f6:f4:e3:ec:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C3:2F:4B:B9:83:E4:66:32:14:12:5B:13:6F:42:CD:EA:21:96:A4
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:65:6a:5e:1e:12:9f:f5:f8:e7:1d:57:f0:6b:c0:e4:79:a5:
d9:4a:e0:c3:e8:03:9a:e0:30:85:d7:b8:b1:29:b4:66:74:d2:
c5:7e:e5:13:47:d4:0b:a5:7c:a5:21:d4:d8:85:67:31:23:8c:
fc:ed:54:90:1a:11:a4:6b:9d:b0:13:87:33:57:43:3e:03:0f:
d0:a7:13:ff:1a:30:48:75:5f:1e:98:9e:b0:97:1f:50:da:bb:
61:18:db:45:25:08:3f:20:9f:bc:18:60:91:34:f4:85:23:e7:
b0:eb:c0:6e:75:07:8f:65:e4:32:b7:aa:89:aa:82:d5:4f:36:
df:2c:59:5b:6a:ef:6e:ea:24:93:9f:7b:3e:1e:59:98:14:6a:
5e:e1:60:dc:8c:45:73:6a:30:29:da:76:21:7a:cb:9c:a7:c2:
bf:cc:55:56:eb:b4:74:58:0a:b0:35:7d:67:70:6f:e3:ea:55:
7e:51:7c:f2:8a:24:55:2d:1d:a2:29:c0:c3:48:1b:f5:69:6f:
30:10:88:df:33:4c:6a:0e:c0:0c:39:10:31:46:b6:51:3e:29:
16:5e:4f:35:93:40:b0:7a:8a:bb:a7:6e:c2:da:41:a8:e7:80:
30:b3:5c:84:fc:a7:f5:b9:32:a7:f8:ba:15:5d:4e:01:74:6c:
51:e0:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:18 2026 by rpki-client