Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: SaYPfss/oz68S7m37HGOROa5raMb+zHqvYGE6VVX1RA=
Subject key identifier: D5:3E:78:8C:F0:C3:E1:6A:25:70:88:9A:C9:A4:C7:68:23:D6:A0:17
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019D98BD4A62EE733AEA026265B43CECE3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 00:00:35 +0000
Manifest this update: Fri 17 Apr 2026 00:00:35 +0000
Manifest next update: Sat 18 Apr 2026 00:00:35 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: O3OiyiFOqPT/NBUIU6aQenB6VKRIr8NMOGufcksyeDc=)
2: qvuOHYoyggsc9g8iuTbD4CEqvBo.roa (hash: jWZoQBgvdhifzrjkxPZUHR/6QgarurKmN/mBEWXh09w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:4a:62:ee:73:3a:ea:02:62:65:b4:3c:ec:e3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Apr 17 00:00:35 2026 GMT
Not After : Apr 18 00:00:35 2026 GMT
Subject: CN=d53e788cf0c3e16a2570889ac9a4c76823d6a017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a0:f6:c2:19:1c:fc:d4:ed:22:8f:8c:be:fe:
cd:fb:51:a1:c3:f6:e5:83:fc:ed:a9:cb:ba:a5:b4:
61:5f:e4:9a:2b:bd:4e:2f:d0:04:24:34:0c:6a:1d:
6d:6b:f0:6f:7f:f4:9e:a1:0b:1a:36:67:9d:9f:4b:
ab:15:35:60:06:7d:cc:fb:e0:70:20:c2:62:f8:92:
9a:40:18:3d:83:1e:48:ff:f4:19:0b:3e:e4:86:5f:
6c:fa:55:d8:a6:78:fa:d9:68:00:95:a0:7d:88:dd:
94:a2:05:ae:e1:ee:d1:99:25:13:50:62:1a:03:0d:
4c:fe:4a:7c:5c:37:12:0e:60:b3:77:65:b7:64:ab:
4d:c4:a9:20:de:56:a7:5f:0b:a4:72:6c:e2:a9:ed:
30:a2:21:be:85:75:9f:56:59:78:ee:cc:b1:24:46:
04:14:d6:76:f7:0c:8e:a1:a3:36:b2:8f:88:4e:87:
e1:bf:c5:0c:dc:49:4a:0f:dc:49:ee:f9:e7:e6:b8:
1d:16:3e:0e:03:07:5a:67:85:90:69:31:80:06:b2:
cf:4a:60:34:52:87:64:37:9a:a0:3a:92:fa:6f:a5:
18:9d:8a:7e:e3:ce:97:44:53:bb:41:95:29:f5:3f:
52:8c:32:27:2b:92:70:d5:c3:67:01:e8:21:cd:26:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3E:78:8C:F0:C3:E1:6A:25:70:88:9A:C9:A4:C7:68:23:D6:A0:17
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fd:21:90:19:38:bb:46:1b:42:14:49:a5:06:28:98:0a:73:
65:cc:95:5a:f4:52:b4:09:e3:09:a5:f1:32:82:ac:93:a0:4b:
2e:7b:02:0b:e0:ff:87:27:02:37:dc:58:27:2e:91:d8:57:11:
4a:c4:e9:43:72:36:f0:9c:a3:94:e0:0c:b8:91:4e:50:58:23:
74:78:7b:78:c7:4c:e0:00:1c:51:47:3d:eb:7b:5d:2a:e9:68:
0f:7a:a2:54:1d:fa:34:16:aa:a0:e8:58:47:55:41:d4:c9:b7:
75:55:0b:78:18:44:de:9e:14:e3:73:e5:96:fe:43:ae:82:a8:
b0:f1:5f:e8:6d:bb:3b:49:d6:33:81:7f:82:a8:bf:c1:3d:2f:
8a:23:db:c9:4c:ba:0f:d3:e9:79:76:19:c3:1d:a4:b9:62:d9:
08:f7:cd:44:96:f4:bf:e1:2a:64:1c:83:33:88:b4:c6:48:e3:
c4:cb:b1:17:0b:3d:81:70:5a:13:32:0e:7c:af:b8:46:6b:16:
46:46:05:60:06:d7:da:7d:d3:25:92:80:0d:40:0c:fc:34:d8:
39:3f:a4:58:ff:b0:e0:4c:76:f9:a8:2a:81:57:79:09:02:9e:
17:9d:b6:fd:ed:a2:4e:7f:51:78:7c:7d:88:ad:5f:a4:7e:4c:
25:11:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:21:57 2026 by rpki-client