
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
File: Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json)
Hash identifier: Dy2HjbxqbJox5g+I6d270d32xj0xiZ8LV0EDrcMjqxQ=
Subject key identifier: 87:0E:EF:2A:39:26:BC:9C:5A:58:0B:36:D9:A5:3A:30:A8:1A:04:3A
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 019CADC77FC97F029B8F5F670B0DF807C563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 09:00:58 +0000
Manifest this update: Mon 02 Mar 2026 09:00:58 +0000
Manifest next update: Tue 03 Mar 2026 09:00:58 +0000
Files and hashes: 1: 1N902uWxBewZ5PtMsS3s5KUkFgs.roa (hash: o8+FHwdwrm2FTsBbNR1O1Ec7gfE8MxmnmProyM8q4BU=)
2: 2DNY0VHjCzgXwvjQNfwSv13IiMs.roa (hash: 8hJ99PzYGO7rhyJIiR2XiqspVTy1Mvm/8YAqXh3HlZM=)
3: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: OOla/ssuJq0ueGXZuXltp5Zrn2j6WAABbdHDRr+lHo4=)
4: NdaVlYyGJzmfbtga--jSELZwlbE.roa (hash: 44YtoyTu9IHJo6Ox432rtAmIAiFL2xtPhJVn1fVc8ls=)
5: PXLUhkQGAdUhNdDhpDuX0qygtu4.roa (hash: C+ltPVNXFjYPNIseXTX/KmgQFlM5AY25yJREciY6tp8=)
6: ScefcWvuVGksXbQ0acoDdIYtZjE.roa (hash: l6JU0XgsxIoGIXcMc/fmzvrEp0Yz0Adf89ehE860isQ=)
7: YPVTV3WJ_kGERtyfsujU7TWmTuo.roa (hash: 3mQ5HyF6SXyaMb4D8sGEX7HkxBwBKSkoqI68TSckUnY=)
8: h4TS8P3Y9MPkSGxAwU5ny5ii-0Q.roa (hash: Z3pTNwIsVEmIXkCWPiwIUSynncIo2xxknOvYt/KXrfg=)
9: khuyur07z0KIfw77cPqiILd6kWM.roa (hash: jw4UZ6Kl6Ypyl46B52Rks2JHmI7Dr2yJY3HZEtC2NY0=)
10: t4QXxCvVmATXxT0HCiqC_03hiYc.roa (hash: FFvuRkQsX/cM6EacvCjfXpy5kO0eYWaiz4Ci86Jfl6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:7f:c9:7f:02:9b:8f:5f:67:0b:0d:f8:07:c5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Mar 2 09:00:58 2026 GMT
Not After : Mar 3 09:00:58 2026 GMT
Subject: CN=870eef2a3926bc9c5a580b36d9a53a30a81a043a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:5a:e4:fd:9d:c6:20:bb:64:b9:b2:2e:f9:
d5:d4:0f:13:99:55:37:1b:84:e3:8a:df:22:70:07:
75:a9:a8:6e:29:53:fa:3d:6b:3e:bc:9b:84:23:51:
4f:4a:0a:9b:93:8f:08:a4:be:17:56:c3:3c:98:a0:
6e:2a:11:4a:2c:80:c7:88:63:09:03:10:f7:78:df:
25:27:7f:e9:c0:9e:bc:eb:3a:96:65:0e:d7:6c:a3:
87:ab:ea:7b:2f:10:e0:a7:a3:96:a8:89:40:b5:71:
5c:10:c7:24:fc:00:87:47:c3:6c:9f:40:a7:8e:42:
ac:92:c2:bb:bf:77:9b:17:97:14:af:09:80:e1:1b:
14:f4:e9:19:b9:cf:de:d6:eb:49:8b:69:ce:3d:33:
53:96:98:0c:94:70:f1:87:d2:4d:78:25:50:76:f8:
77:30:98:45:0b:63:87:53:54:bf:b8:e4:db:60:e2:
f3:56:ca:cf:24:8c:8a:d9:40:64:e1:b7:b3:b7:cb:
a1:d4:05:74:5c:55:7c:75:1b:0c:3a:d2:14:c8:85:
74:13:70:36:62:37:1a:b8:e9:c7:d6:38:7c:25:88:
dc:ee:f9:77:0c:2f:a3:f8:bd:13:96:02:51:f6:f3:
34:52:76:40:6e:f8:da:20:48:89:f3:07:bc:f7:9c:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0E:EF:2A:39:26:BC:9C:5A:58:0B:36:D9:A5:3A:30:A8:1A:04:3A
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:54:df:da:e7:b9:06:ed:75:1c:18:cb:a6:80:c9:38:4b:9a:
b5:e8:a9:95:ed:d8:da:63:ce:7f:0d:81:ec:20:b3:3b:42:a4:
cc:c1:7e:75:35:4c:3a:10:d6:b4:21:3f:9b:04:96:de:48:f9:
a7:a1:e2:35:f0:40:b2:6b:22:2c:c3:43:19:0a:ef:89:0c:a1:
9b:cb:c9:d3:e1:95:0a:f9:16:8b:13:42:6b:d9:33:dd:1f:05:
05:6d:3e:06:f5:89:6d:ab:ce:24:43:20:4b:db:8b:4e:c8:f1:
79:76:d2:64:7c:cf:e1:6e:43:6f:1e:9e:49:9f:65:4f:fa:a8:
2e:d0:dd:4d:9f:59:fd:e2:49:9d:95:a2:de:cc:34:89:62:ef:
b8:7d:52:57:97:eb:a6:b4:b8:2e:1a:26:3d:bb:8a:b7:09:d7:
a9:ec:9e:01:6a:9e:a2:06:c1:e1:55:d8:4c:e8:03:05:38:be:
96:68:39:96:1b:e9:97:c7:1d:e2:33:dc:07:f4:0d:5b:8e:c6:
22:cd:94:c4:eb:56:62:e5:92:52:aa:bd:c7:14:19:99:06:10:
18:68:a0:f0:4d:46:29:f6:9b:ab:28:ed:c1:a8:13:f0:8e:5e:
9d:93:d9:33:1a:60:bd:71:03:0d:2d:88:7c:be:c6:ec:cd:8a:
cd:6a:b8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:53 2026 by rpki-client