Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: vMweDz0nlI4bMdIHNrACnjhRF4+kytwFBgnNDMTZMNg=
Subject key identifier: 9C:9C:E7:20:AC:DF:A5:D7:53:4D:F1:76:28:B6:06:DD:94:78:B6:E6
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 01A0CF6D834379258EB55ED9A0B333F93AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 18:00:55 +0000
Manifest this update: Wed 23 Sep 2026 18:00:55 +0000
Manifest next update: Thu 24 Sep 2026 18:00:55 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: yfs1ENEe1ZZmn0u/gCeYy9EtP1wz5d6afxZ8kX8ophA=)
2: LgLPacdhRsAQk7Vm_5r4RdWNxxE.roa (hash: w8JcLAQyevCQky/Dfp2roamWiZayux9j96dBVgl8j+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:83:43:79:25:8e:b5:5e:d9:a0:b3:33:f9:3a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Sep 23 18:00:55 2026 GMT
Not After : Sep 24 18:00:55 2026 GMT
Subject: CN=9c9ce720acdfa5d7534df17628b606dd9478b6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:07:50:b6:84:92:04:61:9f:e7:7a:7f:fe:
4a:75:ae:12:3e:4c:2d:7b:9c:da:09:7a:f4:cd:91:
c0:57:17:22:61:48:b0:0b:9f:2b:4e:a2:ac:c9:32:
3d:64:9c:5c:12:fe:6f:c9:fb:dc:7b:3b:67:53:77:
ab:3f:3d:2e:02:36:ab:8c:71:03:81:71:b6:d5:74:
95:58:fa:bf:32:bc:3b:b7:83:3e:5c:88:36:0e:79:
36:94:40:b2:e0:c5:44:91:02:06:e8:93:77:85:e8:
b2:5b:4e:84:4f:3a:44:fe:43:20:4b:34:45:01:e7:
c3:94:8f:34:f7:f9:2c:a6:ed:6e:fd:bd:01:31:38:
74:99:fe:1e:51:e1:44:6a:3a:30:5e:c7:8f:e8:a0:
ff:b2:27:a0:11:c2:11:ec:df:b9:5a:73:d9:3d:e0:
4c:71:6f:30:57:b9:04:d5:42:7f:92:55:10:5f:01:
b1:24:e6:1a:10:e2:5d:2b:4e:d2:e0:8f:51:96:af:
1d:8f:69:e3:c6:f2:3f:47:c3:ea:22:74:89:26:75:
7d:ec:e6:df:2c:22:b4:f1:61:cd:75:1e:16:9d:cb:
33:52:ac:78:df:a1:c6:26:66:52:77:66:c3:5d:03:
79:db:40:78:74:04:a2:24:9a:9b:7e:b3:73:98:c3:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9C:E7:20:AC:DF:A5:D7:53:4D:F1:76:28:B6:06:DD:94:78:B6:E6
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:51:6e:6f:ca:44:fd:0f:fb:6d:5c:74:b3:1a:44:7e:ea:62:
ca:94:69:70:fa:8e:45:0b:2b:b4:1b:17:36:21:50:64:5d:0f:
2f:d5:fa:77:5a:49:e0:38:5a:b7:bb:16:c9:e8:37:31:d8:43:
93:13:4c:0c:07:a6:85:9b:ff:fa:3d:e5:b3:61:4e:04:c4:47:
c7:af:ba:a9:f6:27:fc:b3:6f:92:af:8b:f9:09:b5:3b:46:7d:
ab:f7:f6:eb:08:04:43:4d:9b:46:2b:75:f9:c7:c3:86:34:b4:
0b:12:62:b8:9c:53:62:0d:9a:8a:8e:b2:9f:e0:54:d4:de:55:
8e:c1:5c:4e:f9:dc:65:e8:93:01:3a:77:76:b1:95:1d:df:c7:
da:ab:e4:47:74:40:b5:dc:65:26:7c:b7:17:f3:6e:17:8d:24:
29:ce:d3:4e:fb:e5:90:75:18:bf:23:55:28:25:bd:a8:46:09:
ea:e6:11:28:ea:07:06:34:12:44:cc:f6:42:aa:a2:9f:c1:d9:
a6:0c:28:d1:d4:9d:72:ec:6e:44:a6:27:dc:97:20:f6:f9:89:
c9:07:f2:7d:44:52:cb:45:be:9e:c4:21:a0:16:d3:dd:6b:f1:
24:c0:30:5b:9f:92:94:56:49:4e:84:a7:e8:5e:cc:50:49:26:
fb:9e:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:34:54 2026 by rpki-client